Data Protection and Security Manager

• Design, maintain and continuously improve the data protection risk management framework
• Maintain the Data Protection Controls Effectiveness Testing and Evaluation Procedure
• Maintain and further develop the data protection risk register and key metrics
• Act as a 2LoD point of contact for internal data protection–related topics
• Ensure the proper and timely involvement of the DPO in all relevant personal data protection matters
• Manage the DPO mailbox / dedicated data protection mailbox
• Develop and prepare regular privacy and data protection risk reports and global “health check” overviews
• Manage or support the Data Protection General Training & Awareness program and required privacy-related trainings
• Work cross-functionally and build strong relationships to strengthen and enhance data privacy compliance
• Monitor regulatory developments and emerging privacy and cyber/ Information security risks
• Support audit and regulatory readiness by managing privacy-related findings and action plans

• Bachelor's degree in Law, Information Security, Information Technology, Risk Management, or a related field would be preferable but not mandatory
• Professional privacy certifications such as IAPP CIPP/E / CIPM
• Professional security management certifications such as CISA / CISM / CRISC, or equivalent are preferable
• Minimum of 3–5 years of experience in data protection / privacy risk management, ideally within the banking or financial services industry
• Experience working with risk and control frameworks, audits, regulatory readiness, and remediation tracking is highly advantageous
• An understanding of information security concepts (e.g., access control, logging, encryption, incident management) and how they intersect with privacy requirements
• Experience with third-party / outsourcing privacy topics (e.g., DPAs, sub-processors, PIAs/TIAs, vendor risk inputs)
• Should be able to leverage modern tooling (including AI where appropriate) to improve risk reporting
• Strong stakeholder management skills
• Strong project and prioritisation skills
• Strong analytical skills
• Effective communication and interpersonal skills
• Strong report-writing and documentation skills
• Good understanding of information security fundamentals
• Fluency in English (verbal and written) is mandatory
• German is a plus

German is a plus

• Accelerate your career growth
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation
• Access to a Premium subscription on your personal N26 bank account
• Additional day of annual leave for each year of service
• A high degree of autonomy and access to cutting edge technologies
• A relocation package with visa support for those who need it