ICT Risk Assessment Manager

About the opportunity We are looking for a ICT Risk Assessment Manager to join the Information Risk Management (IRM) Segment and work at the heart of ICT Compliance at N26. We’re setting the standard for innovation and excellence in FinTech compliance, embedding it into N26’s culture to ensure that every control, policy, and risk assessment strengthens our position as a leader in the industry. As part of our team, you’ll be at the forefront of building a compliance culture that’s innovative, scalable, and seamlessly integrated into our operations, making compliance a key driver of N26’s competitive advantage. In this role, you will: • Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring. • Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments. • Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement. • Act as a point of contact for team-related topics and support escalation handling when needed. • Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security. • Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution. • Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner. • Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments. • Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities. • Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection. • Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency. • Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership. • Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables. • Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line. What you need to be successful: • Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks, methodologies and related processes. • Ability to communicate clearly with peers, as well as stakeholders of all levels from the partner companies. • Previous experience working in a dynamic environment of a technology-driven business (as e.g. a scaled startup). • Hands-on experience with cross-functional teams, business operations analysts, security engineers, software engineers, product managers, data analysts, IT audit functions, among other relevant stakeholders, in assessing processes, risks and controls. • Knowledge and hands-on experience on SOC reports, ISO 27001 certification and other standards or frameworks as a plus (as e.g., PCI DSS). • Previous experience in the banking sector is a plus, especially understanding of MaRisk and DORA requirements. Experience with Governance, Risk & Compliance (GRC) platforms. • Strong Sense of Ownership: You are able to inherit a workflow, identify its weaknesses, and independently implement improvements and optimizations on your own initiative. • Experience with AI tools to improve workflows and efficiency Skills: • Proficiency with Governance