Data Protection and Governance Manager

Berlin · 3+ years experience · Full-time · Remote · Posted Sep 29, 2026

At a glance

The Data Protection and Governance Manager will join the Data Protection & Governance team within the CISO Office at N26.
This role focuses on ensuring the company meets data protection obligations, managing privacy risk coverage, and embedding data protection requirements into daily operations.

Operationalise data ownership, stewardship, classification, and lifecycle/deletion controls.
Maintain the 2LoD risk framework, risk register, and effectiveness testing for GDPR, DORA, MaRisk, and the EU AI Act.
Triage the DPO mailbox and handle complex internal/external queries.
Run DPO involvement and administrative processes.
Design high-impact privacy metrics, global health checks, and executive reporting for governance forums.
Partner cross-functionally to close audit findings.
Manage third-party and vendor risks including DPAs, PIAs, and TIAs.
Run dynamic privacy awareness initiatives.

3+ years of hands-on experience combining data protection/privacy risk management with data governance.
Proven track record building operational/NFR frameworks, risk matrices, and registers covering personal data, privacy, and AI risks.
Solid grasp of InfoSec intersection points including encryption, access controls, logging, and incident response.
Familiarity with GRC tooling and modern AI-driven risk reporting.
Degree in Tech, Law, Risk, or equivalent practical experience.
Exceptional documentation, reporting, and narrative-building skills in English.
Ability to translate complex cyber, legal, and AI regulations into actionable advice.