ICT GRC - Junior Associate

About the opportunity Are you ready to accelerate your career in IT Security? We’re looking for a driven and detail-oriented Junior Associate to join our ICT GRC (Governance, Risk, and Compliance) team. In this role, you will play a critical part in executing key activities that help us manage IT risks, coordinate audits, ensure compliance with internal and external requirements, and drive outsourcing security assessments. You’ll work closely with experienced risk and compliance professionals, taking ownership of core processes in audit readiness, risk assessment, continuous reporting, and third-party risk management. In this role, you will: • Coordinate audit preparations by gathering critical evidence, managing stakeholder requests, and maintaining accurate audit logs. • Execute IT control tests to evaluate the effectiveness of internal controls, documenting results and identifying areas for improvement. • Draft and maintain risk reports, presentations, and dynamic dashboards for management visibility. • Review risk assessments on tools and internal processes, ensuring all required documentation is accurately evaluated. • Manage and track risk and gap items in systems like GRC tools, driving remediation efforts with relevant stakeholders. • Facilitate team and stakeholder meetings, capturing key decisions and maintaining structured documentation in shared repositories. • Optimize internal GRC materials, including templates, FAQs, policies, and process documentation. • Assess and prioritize incoming vendor risk requests, ensuring SLAs are met and critical risks are escalated appropriately. • Draft comprehensive assessment summaries and risk recommendations for management review. • Help maintain the central risk system, ensuring a high standard of data quality for all documentation and assessment outcomes. • Ensure policies and procedures owned by ICT GRC are updated based on review cycles by connecting with the right stakeholders within and outside the team. What you need to be successful Background: • A completed Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Security, Business Informatics, Engineering, or a related field. • 1 to 2 years of relevant work experience (including robust internships or working student roles) in information security, IT risk management, IT audit, or compliance, ideally within banking or the wider financial services industry. • A solid foundational understanding of regulatory frameworks and standards (e.g., ISO 27001, NIST, DORA, GDPR) and enterprise IT concepts (e.g., identity management, network security, cloud architecture). • Enthusiasm for navigating how cybersecurity, IT risk, IT compliance, and IT governance functions operate within a fast-paced digital banking environment. • Professional certifications Skills: • Strong analytical and problem-solving skills with a proven ability to translate complex IT and security concepts into structured risk assessments. • Proficiency with data management and reporting tools (Microsoft Excel/Google Sheets); hands-on experience with GRC tools (e.g., OneTrust) and issue tracking software (JIRA, Confluence) is highly preferred. • Industry certifications such as CRISC, CISA, or ISO 27001 Lead Auditor/Implementer are highly advantageous. • Clear and professional communication skills; able to document findings accurately and influence cross-functional team members to complete compliance tasks. • Excellent organizational skills with the ability to manage multiple assessments and deliverables simultaneously without losing attention to detail. • Comfortable working autonomously and collaboratively in a hybrid team environment. • Fluency in English is required; German is a plus. • Adaptability and op