About us Join bonify, Germany’s leading platform for credit scoring and financial management. We are on the mission to revolutionize the FinTech industry and make the credit score and financial data available and transparent for our users. We are looking for a Governance & ICT Risk Manager with strong analytical and communication skills, a curious, non-judgmental mindset, sound judgement and a hands-on approach.You will help us run and continuously improve our risk and governance processes in a regulated fintech environment. You should be comfortable working through complex topics, understanding how things work in practice, connecting the dots across different areas and turning them into clear actions and decisions.AI and automation are part of how we work, where they add value. We want to reduce unnecessary manual work and make our governance processes more efficient. Your tasks <ul style="margin-top:0px;margin-bottom:0px;"><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Coordinate enterprise and ICT risk activities – support the identification, assessment, documentation and follow-up of risks, with ICT risks embedded in the broader enterprise risk framework. Ensure relevant risks, dependencies and actions are consistently captured, followed up and escalated where needed.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Coordinate and operate our Outsourcing & ICT Third-Party Governance – manage the lifecycle from provider intake and assessment through monitoring, reassessment, changes and exit, working closely with business owners and relevant control functions.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Coordinate business continuity and operational resilience activities – coordinate BIA reviews, continuity planning and resilience testing.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Coordinate governance input into the New Product Process (NPP) and relevant changes – ensure required stakeholders are involved early and that required assessments and decisions are completed at the right stage.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Run the related governance processes – maintain registers, documentation, evidence and decision trails, coordinate recurring reviews and ensure agreed actions are followed through.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Continuously improve how governance works – simplify processes, improve tooling and use AI and automation where they genuinely improve quality, consistency or efficiency.</li></ul> Requirements <ul style="margin-top:0px;margin-bottom:0px;"><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">3–5 years of experience in governance, risk management, ICT risk, third-party risk, business continuity or a comparable role in a regulated or compliance-driven environment.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Strong analytical and communication skills. You can understand complex topics, ask the right questions, identify relevant risks and dependencies and translate them into clear next steps.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">A curious and open mindset. You want to understand how things work before reaching conclusions and are comfortable challenging assumptions and asking questions.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Sound judgement. You can distinguish routine topics from issues that require deeper assessment, specialist input or escalation.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">A hands-on and structured working style, with strong ownership of operational processes and follow-up.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">The ability to work cross-functionally with Product, Tech, Information Security, Risk, Compliance, Legal, Privacy and other stakeholders.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">A practical interest in AI and automation and how they can improve governance and risk management workflows.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Experience with tools such as Jira and Confluence, or comparable workflow and documentation tools.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">German at C1 level and professional English.</li><li style="list-style-type:disc;font-size:11pt;font-family:Arial, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Willingness to work regularly from our Berlin office.</li></ul> What we offer As part of the bonify team, you'll have:<ul style="margin-top:0px;margin-bottom:0px;"><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">The opportunity to take ownership from day one</li><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">The chance to thrive in a dynamic and flexible startup environment.</li><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Access to extensive coaching and training programs through our personal development budget</li><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">30 vacation days</li><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">Subsidies for BVG and UrbanSportsClub</li><li style="list-style-type:disc;font-size:11pt;font-family:Rubik, sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;text-decoration:none;">1:1 language classes in both German and English.</li></ul>The Company is committed to the principle that no employee or job applicant shall receive unfavourable treatment on grounds of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage or civil partnership, pregnancy, and maternity. Please note, to be compliant with AML Offices, due to the specifics of fintech industries additional background checks are required (applicable only at the offer stage). If you're ready to make a meaningful impact in the world of FinTech and embark on an exciting career journey, apply now to join bonify!

Governance & ICT Risk Manager @ bonify

About this role

Ready to apply?