Lead IT Risk Manager (f/m/d)

About The Role

What You’ll Do

• Risk Framework Ownership & Oversight Own and evolve the IT Risk and Business Continuity Management Framework within the second line, keeping it scalable as the business grows.
• Provide independent second-line oversight and challenge to the first-line IT GRC team on the design and effectiveness of IT controls.
• Lead IT risk identification, assessment, and mitigation across cyber, technology resilience, third-party, and data security, linking back to the Risk Appetite Framework.
• IT Governance & Compliance Management Mature the ISMS by guiding policies, standards, and procedures with the relevant process owners.
• Define baseline controls and run continuous ISMS maturity assessments against ISO/IEC 27001:2022 and related standards.
• Oversee third-party IT risk, internal technology exposures, and business continuity assessments.
• IT Audit & 2nd Line Assurance Drive second-line assurance reviews and deep-dives across critical IT risk domains, reporting findings and tracking remediation to closure.
• Support internal and external audits, including IT General Controls (ITGC) and Application Controls.
• Run preliminary internal IT audits to prepare engineering, product, and business teams for official engagements.
• Regulatory Alignment & Stakeholder Management Lead Upvest's DORA obligations, including ICT risk management, incident classification, and third-party ICT risk oversight.
• Track the regulatory landscape (BaFin, EBA, ESMA, ECB) and translate requirements into actionable risk guidance.
• Act as the primary second-line contact for IT risk, reporting posture and material risk events to senior stakeholders, the C-suite
• the Risk Committee What you bring: Education: University degree in Computer Science, Information Technology, Information Security
• an equivalent academic/professional background.
• Experience: Minimum of 5+ years of progressive professional experience in IT Governance, Risk, Compliance
• Security (IT GRC / IT Security) within a regulated financial institution, bank, fintech
• fast-scaling B2B platform environment.
• Technical Depth: Deep operational understanding of IT governance standards (e.g., ISO 27001), regulatory risk requirements (BaFin BAIT/MaRisk), and modern resilience standards like DORA.
• Communication Skills: Exceptional verbal and written articulation skills in English, with a proven ability to engage credibly with a multilingual international stakeholder base, technical engineering leads, and C-level executives.
• Mindset: A strong product engineering and security-focused mindset, combined with commercial pragmatism and the ability to operate confidently under ambiguity.
• How we Upvest in you: Best-in-class AI tools: Every Upvenger has €20,000 per year to spend on the best AI tools available — so you're always working with the most powerful models and tooling on the market.
• Impact-driven work: We’re building the infrastructure that will power the future of investing in Europe.
• It’s complex, ambitious, and meaningful.
• You’ll work with modern technologies and create something entirely new.
• No legacy systems, no limits.
• Wellbeing: Recharge with 30 days of annual leave and maintain a healthy lifestyle with sports benefits.
• Access confidential professional coaching and enjoy the flexibility to work remotely abroad for up to 183 days a year.
• Recharge with UpRest, a one-month fully paid sabbatical after every 4 years of working at Upvest.
• Development: Growth is in our DNA.
• Each Upvenger has access to a personal development budget and the freedom to decide how to use it.
• Flexible work environment: Work from any of our hubs in Berlin, London or Tallinn hybrid or remotely across Europe, depending on the role.
• We give you the choice and budget to work where you’re most comfortable and productive, either at home or in the office.
• Compensation and equity: We believe that all Upvengers contribute to our success and deserve a competitive, above-market salary and a participation in our employee equity program.
• Team celebrations: Participate in company-wide events, such as UpFest, dinners, offsites and our Holiday party, to connect with colleagues and celebrate our achievements.
• Inclusion : We’re committed to a culture where everyone belongs and thrives.
• Our Employee Resources Groups foster inclusion and connection, like Upfem for our female Upvengers, or UpVergent supporting neurodivergent Upvengers and allies.
• Our Values: Make it easy for others.
• We simplify the complex and act with the best intentions Own the outcome.
• We are proactive, fast and confident to get the job done, valuing progress over perfection.
• Rise to the challenge.
• We aim high and push the boundaries.
• We stay curious, learn and celebrate our wins together.
• We start with the Why to align on purpose.
• We are transparent and share knowledge to empower and inspire others.
• Upvest is an equal opportunity employer.
• We celebrate diversity and are committed to creating an inclusive environment for all employees.