Information Security Controls Manager - Cloud & AI Governance

About the opportunity

We are seeking an Information Security Controls Manager to join the Information Risk Management (IRM) Segment within the Information Security (IS) Controls team at N26. As a member of this team, you will contribute to ensuring that Information Security Controls Framework processes are operated without any disruptions, with a specialized focus on strengthening our Cloud Security posture and AI Governance frameworks. N26 and its subsidiaries operate in a variety of regulatory environments and across international boundaries, while the IRM team helps N26 to navigate this complex, demanding, and rapidly evolving technological landscape.

In this role, you will:

• Frequently communicate with various stakeholders of all levels.
• Execution and review of the Information Security (IS) Controls Framework monitoring process, ensuring comprehensive coverage of cloud infrastructure and AI/ML deployments.
• Communicate, Collate and review the evidence received via monthly control review request tickets (TOE).
• Perform QA reviews, query and or seek clarification from stakeholders to achieve the objectives of controls effectiveness.
• Highlight the gaps/risks observed during reviews, raise non-conformities, particularly concerning cloud misconfigurations and AI model risks, and suggest improvements to the teams or stakeholders.
• Liaise with the CISO office and the DPO office to provide updates on a monthly basis over the status of controls, including compliance updates regarding cloud security and AI systems.
• Improve awareness of controls, security practices, and responsible AI utilization among stakeholders.
• Contribute to the team in developing KRIs tailored to traditional IT, Cloud environments, and AI use cases.
• Working independently and managing the IS Controls daily tasks.
• Review and update the design of the controls pages from a technical perspective and maintain the control calendar.
• Actively work on the change requests from stakeholders.
• Preparation and follow-up of Change Request tickets.
• Drafting and publishing of the monthly control reports & other documentation (MoMs).
• Support the team and stakeholders during audits and coordinating the action items and evidence.
• Maintain controls team’s key documentation to ensure audit readiness.
• Equally participate in designing controls, developing working instructions and procedures that are required based on security standards and regulations such as ISO 27001,