
at N26
FinTechPosted 8 days ago
No clicks
**Data Protection and Governance Manager | Berlin, Risk Department** Operationalize data ownership, stewardship, and lifecycle controls across N26. Manage EU privacy risks, support DPO & CISO, and drive compliance.Requires 3+ years in data protection, risk management, and data governance, preferably in banking or fintech. - Keywords: Data Protection, Governance, Risk Management, Data Governance, Data Stewardship, Privacy Risk, EU Privacy Laws, GDPR, DORA, MaRisk, AI Act, Encryption, Access Controls, Logging, Incident Response, GRC Tooling, IAPP, Security/Risk Certifications, Pragmatic Risk Mindset, Cross-Functional Execution, Communication, Bias for Action, N26, Fintech, Banking.
- Compensation
- Not specified
- City
- Berlin
- Country
- Germany
Currency: Not specified
Full Job Description
Data Protection and Governance Manager
What You Will Do
- Govern & Scale: Operationalise data ownership, stewardship, classification, and lifecycle/deletion controls across the business.
- Manage Privacy Risk: Maintain the 2LoD risk framework, risk register, and effectiveness testing for EU privacy laws (GDPR), DORA, MaRisk, and emerging regulations like the EU AI Act.
- Support the DPO & CISO: Triage the DPO mailbox, handle complex internal/external queries, and run DPO involvement and administrative processes.
- Monitor & Report: Design high-impact privacy metrics, global "health checks," and executive reporting for governance forums.
- Drive Execution & Compliance: Partner cross-functionally to close audit findings, manage third-party/vendor risks (DPAs, PIAs/TIAs), and run dynamic privacy awareness initiatives.
What You Need to Succeed
Background & Experience- 3+ years of hands-on experience combining data protection/privacy risk management with data governance (metadata, data quality, stewardship) preferably in banking, fintech, or financial services.
- Proven track record building operational/NFR frameworks, risk matrices, and registers covering personal data, privacy, and AI risks.
- Solid grasp of core InfoSec intersection points: encryption, access controls, logging, and incident response.
- Familiarity with GRC tooling (e.g., ServiceNow) and modern AI-driven risk reporting.
- Certifications (Preferred): IAPP (CIPP/E, CIPM) or Security/Risk credentials (CISA, CISM, CRISC).
- Education: Degree in Tech, Law, Risk, or equivalent practical experience.
- Pragmatic Risk Mindset: Able to translate complex cyber, legal, and AI regulations into clear, actionable advice for non-technical teams.
- Cross-Functional Execution: Strong stakeholder manager who can constructively challenge, prioritize competing workstreams, and close audit actions fast.
- Communication: Exceptional documentation, reporting, and narrative-building skills in English (German is a plus).
- Bias for Action: Resilient, curious, highly analytical, and comfortable innovating processes within an agile, fast-moving environment.
- Accelerate your career growth by joining one of Europes most talked about disruptors .
- Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
- As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
- Vacation days vary depending on your location of work. Additional day of annual leave for each year of service.
- A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
- A relocation package with visa support for those who need it.





