(Senior) ICT Risk Manager (f/m/d)

Raisin is the world's leading platform for savings and investment products. Founded in 2012, the FinTech connects consumers with banks in the EU, the UK and the US. This gives consumers better interest rates and banks a diversified form of refinancing . Our vision is to offer savings and investments without barriers and thus open up the global 160 trillion euro market. Raisin currently employs more than 800 people from over 75 countries worldwide. Today, the platform holds over 80 billion euros in assets from more than one million investors which have accrued over 5 billion euros in returns. Team Group Governance is a newly established team, dedicated to enabling the safe and scalable growth of the Raisin Group. We are responsible for driving process optimization, implementing robust governance structures, and establishing the foundational ICT risk management process for the 1st line of defense. Our mission is to secure Raisin's digital landscape, ensuring compliance with evolving regulatory requirements, and embedding risk awareness into the bank’s overall strategy. Your Responsibilities Drive and maintain the underlying methodology approaches for all ICT risk processes and operations, ensuring process robustness and consistency. Coordinate ICT risk management across the organization, including designing and operating standardized processes for handling ICT risk cases. Support the identification, analysis, evaluation, and mitigation of ICT risks, collaborating closely with affected departments. You also coordinate with the 2nd line of defense units on risk treatment strategies and acceptance. Advise risk owners on effective risk treatment strategies and assist management with related decision-making. Monitor the implementation status of all defined risk treatment measures and provide necessary oversight. Provide actionable insights on strengthening controls and mitigating risks in daily operations. Actively develop and enhance the 1st Line of Defense ICT risk management process in collaboration with 2nd line of defense units. Prepare management reports detailing the overall ICT risk profile and the progress of risk mitigation efforts. Your Profile Education: Bachelor's or Master’s degree in Engineering, Computer Science, Business Administration, or a related technical field. Professional certifications such as CISSP, CISM, or CRISC are a strong plus. Experience & Skills: 3-5 years of hands-on experience in information security, ICT risk management, or a closely related field. Experience working within the banking or financial services industry is highly desirable, with a preference for candidates from a smaller firm or Fintech background for better cultural fit. Strong knowledge of ICT risk management principles and practices, including risk assessment, mitigation, and monitoring. Deep knowledge of banking regulations, standards, and frameworks (e.g., NIST, ISO 2700x, MaRisk/BAIT, DORA, GDPR, and/or PCI DSS). Excellent analytical, problem-solving, and decision-making abilities. Strong technical understanding of ICT risks, including expertise in securing databases both in transit and at rest. Familiarity with AI solutions and an understanding of LLM models is a significant plus. Strong collaboration and communication skills, necessary for advising and coordinating across diverse departments and 2nd Line of Defense units. Familiarity with tools such as Service Now, G Suite, Web app firewall, Linux, Jira, and Confluence is desirable. Join our mission, join our team – and grow with us! At Raisin, we care about each other and it is one of our top priorities to foster an open and caring environment in which everyone feels welcome and comfortable. Our culture is strongly driven by our ambitious team, which connects more than 75 different nationalities. As part of our team, you will benefit from Employee Development Budget of €2,000 and four full training days per year. Flexible working hours, home office and 30 vacation days. A comp