Governance & ICT Risk Manager

Join bonify, Germany’s leading platform for credit scoring and financial management. We are on the mission to revolutionize the FinTech industry and make the credit score and financial data available and transparent for our users.

We’re looking for a Governance & ICT Risk Manager. who enjoys bringing structure into complex environments and making sure things run cleanly, traceable, and regulator-ready. This role is ideal for someone with early experience in governance, compliance, risk, or regulatory operations, who likes keeping order in place and working closely with senior stakeholders.

You’ll work in close collaboration with the Chief Risk Officer and the Compliance Manager, acting as a central coordination point across governance, outsourcing, and ICT risk topics in a fintech environment.

• Own the Outsourcing & ICT Risk lifecycle – coordinate new vendor setups, add-ons, periodic reviews, and documentation completeness.
• Support risk assessments – conduct pre-checks, track open items, and ensure regulatory documentation standards are met.
  Maintain governance registers and documentation – including contracts, SLAs, risk assessments, and exit plans.
• Coordinate governance input into the New Product Process (NPP) to ensure regulatory and risk requirements are embedded early.
• Facilitate quarterly governance assessments across risk and compliance processes, tracking follow-ups and action items.
• Support regulatory and management boards – prepare materials, ensure documentation quality, and coordinate submissions.
• Ensure transparency and traceability across governance processes, decisions, and controls.
• Own and structure Confluence governance spaces, ensuring clarity, version control, and audit readiness.
• Track governance tasks in Jira, including audits, remediation actions, and cross-functional follow-ups.

• 1–3 years of professional experience in a regulated or compliance-driven environment (e.g., financial services, fintech, risk, audit, IT governance, legal, data protection).
• Basic understanding of regulatory frameworks (e.g., DORA, GDPR, financial regulation, ISO standards) is a plus.
• Hands-on experience with Atlassian tools (Jira and Confluence) and structured, ticket-based workflows.
• Strong documentation skills with a high level of accuracy and attention to detail.
• Fluent English (written and spoken) and professional working proficiency in German (C1 preferred).
• Strong organizational and coordination skills, with the ability to manage multiple parallel topics.
• Proactive, reliable, and ownership-driven working style.
• Clear communicator who collaborates constructively and asks clarifying questions when needed.
• Berlin-based (or willing to relocate) with hybrid presence preferred.