ICT Risk Assessment Manager

We are looking for a ICT Risk Assessment Manager to join the Information Risk Management (IRM) Segment and work at the heart of ICT Compliance at N26. We’re setting the standard for innovation and excellence in FinTech compliance, embedding it into N26’s culture to ensure that every control, policy, and risk assessment strengthens our position as a leader in the industry. As part of our team, you’ll be at the forefront of building a compliance culture that’s innovative, scalable, and seamlessly integrated into our operations, making compliance a key driver of N26’s competitive advantage.

• Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring.

• Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments.

• Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement.

• Act as a point of contact for team-related topics and support escalation handling when needed.

• Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security.

• Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution.

• Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner.

• Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments.

• Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities.

• Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection.

• Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency.

• Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership.

• Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables.

• Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line.

• Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks,