In This Role, You Will

• Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring.
• Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments.
• Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement.
• Act as a point of contact for team-related topics and support escalation handling when needed.
• Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security.
• Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution.
• Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner.
• Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments.
• Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities.
• Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection.
• Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency.
• Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership.
• Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables.
• Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line.
• 
  

What You Need To Be Successful

• Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks, methodologies and related processes.
• Ability to communicate clearly with peers, as well as stakeholders of all levels from the partner companies.
• Previous experience working in a dynamic environment of a technology-driven business (as e.g. a scaled startup).
• Hands-on experience with cross-functional teams, business operations analysts, security engineers, software engineers, product managers, data analysts, IT audit functions, among other relevant stakeholders, in assessing processes, risks and controls.
• Knowledge and hands-on experience on SOC reports, ISO 27001 certification and other standards or frameworks as a plus (as e.g., PCI DSS).
• Previous experience in the banking sector is a plus, especially understanding of MaRisk and DORA requirements. Experience with Governance, Risk & Compliance (GRC) platforms.
• Strong Sense of Ownership: You are able to inherit a workflow, identify its weaknesses, and independently implement improvements and optimizations on your own initiative.
• Experience with AI tools to improve workflows and efficiency
• 
  

Join us.

For our location in Roth, Germany

Your Tasks

• Regional Compliance & Governance: Serve as the subject matter expert for EU and North American security compliance. Ensure regional entities meet regional regulatory mandates (e.g., NIS2, TISAX, ITAR, CMMC).
• Business & Technical Bridging: Act as the liaison between EU/NA business units and technical teams. Ensure that regional business and external compliance requirements are clearly understood and met by technical execution.
• Policy Implementation: Work locally with IT and business stakeholders to ensure that overarching global security policies and technical standards are translated into compliant, day-to-day procedures.
• Risk Assessment: Conduct regional risk assessments across both business workflows and technical deployments in the EU and North America, ensuring risks are documented and addressed.
• Vendor & Supply Chain Risk: Manage third-party risk assessments for regional vendors, utilizing SecurityScorecard to monitor the external security posture of partners and suppliers.
• Cyber Crisis & Resilience Support: Act as the regional coordinator for ICT resilience and cyber crisis management, supporting the Director in ensuring local readiness and business continuity.
• Security Culture: Champion the global security awareness program within the EU and North American entities, tailoring communication to fit regional business cultures.
• 
  

Your Talents

• Experience: 5 years in Information Security, specifically within GRC, compliance, IT audit, or risk management functions.
• Regional Expertise: Strong knowledge of the EU regulatory landscape and North American compliance requirements.
• Skills: Excellent communication and stakeholder management skills. Must be highly capable of auditing technical procedures against written policies.
• Frameworks: Strong knowledge of ISO27001. Knowledge of TISAX, CMMC, and other applicable frameworks is a plus.
• Certifications: Certifications such as CISM, CISA, CRISC, or regional compliance/privacy certifications (e.g., CIPP/E) are highly preferred.
•