Governance & ICT Risk Manager

Join bonify, Germany’s leading platform for credit scoring and financial management. We are on the mission to revolutionize the FinTech industry and make the credit score and financial data available and transparent for our users.

We are looking for a Governance & ICT Risk Manager with strong analytical and communication skills, a curious, non-judgmental mindset, sound judgement and a hands-on approach.

You will help us run and continuously improve our risk and governance processes in a regulated fintech environment. You should be comfortable working through complex topics, understanding how things work in practice, connecting the dots across different areas and turning them into clear actions and decisions.

AI and automation are part of how we work, where they add value. We want to reduce unnecessary manual work and make our governance processes more efficient.

• Coordinate enterprise and ICT risk activities – support the identification, assessment, documentation and follow-up of risks, with ICT risks embedded in the broader enterprise risk framework. Ensure relevant risks, dependencies and actions are consistently captured, followed up and escalated where needed.
• Coordinate and operate our Outsourcing & ICT Third-Party Governance – manage the lifecycle from provider intake and assessment through monitoring, reassessment, changes and exit, working closely with business owners and relevant control functions.
• Coordinate business continuity and operational resilience activities – coordinate BIA reviews, continuity planning and resilience testing.
• Coordinate governance input into the New Product Process (NPP) and relevant changes – ensure required stakeholders are involved early and that required assessments and decisions are completed at the right stage.
• Run the related governance processes – maintain registers, documentation, evidence and decision trails, coordinate recurring reviews and ensure agreed actions are followed through.
• Continuously improve how governance works – simplify processes, improve tooling and use AI and automation where they genuinely improve quality, consistency or efficiency.

• 3–5 years of experience in governance, risk management, ICT risk, third-party risk, business continuity or a comparable role in a regulated or compliance-driven environment.
• German at B2 level and professional English.
• Berlin-based - Willingness to work regularly from our Berlin office.
• Strong analytical and communication skills. You can understand complex topics, ask the right questions, identify relevant risks and dependencies and translate them into clear next steps.
• A curious and open mindset. You want to understand how things work before reaching conclusions and are comfortable challenging assumptions and asking questions.
• Sound judgement. You can distinguish routine topics from issues that require deeper assessment, specialist input or escalation.
• A hands-on and structured working style, with strong ownership of operational processes and follow-up.
• The ability to work cross-functionally with Product, Tech, Information Security, Risk, Compliance, Legal, Privacy and other stakeholders.
• A practical interest in AI and automation and how they can improve governance and risk management workflows.
• Experience with tools such as Jira and Confluence, or comparable workflow and documentation tools.