Lead IT Risk Manager (f/m/d)

Upvest GmbH

Job Overview

Location

Berlin

Job Type

Full-time

Full Job Description

📋 Description

• As the Lead IT Risk Manager at Upvest, you will own and evolve the IT Risk and Business Continuity Management Framework within the second-line risk function, playing a pivotal role in safeguarding the company’s technology and data integrity in a highly regulated financial services environment.
• You will provide independent oversight to the first-line IT GRC team, lead comprehensive risk assessments across cyber, technology resilience, third-party, and data security domains, and ensure alignment with Upvest’s Risk Appetite Framework while maturing the ISMS against ISO/IEC 27001:2022 and regulatory standards like DORA, BaFin, and EBA.
• You will drive second-line assurance reviews, support internal and external audits (including ITGC and Application Controls), and act as the primary second-line contact for IT risk, reporting material risks and remediation progress to senior stakeholders, the C-suite, and the Risk Committee.
• You will join a diverse, international team of over 270 professionals from 70+ nationalities at a fast-growing fintech backed by €280M in funding from top-tier investors like BlackRock and Tencent, where you’ll shape the future of secure, scalable investment infrastructure in Europe.
• This role offers the opportunity to deepen your expertise in IT governance, regulatory compliance, and risk management while developing strategic influence and leadership skills in a high-impact, innovation-driven environment with access to cutting-edge AI tools and personal development budgets.

🎯 Requirements

• University degree in Computer Science, Information Technology, Information Security, or equivalent academic/professional background
• Minimum of 5+ years of progressive professional experience in IT Governance, Risk, Compliance, and Security (IT GRC/IT Security) within a regulated financial institution, bank, fintech, or fast-scaling B2B platform environment
• Deep operational understanding of IT governance standards (e.g., ISO 27001), regulatory risk requirements (BaFin BAIT/MaRisk), and modern resilience standards like DORA
• Exceptional verbal and written articulation skills in English, with proven ability to engage credibly with multilingual international stakeholders, technical engineering leads, and C-level executives
• Strong product engineering and security-focused mindset, combined with commercial pragmatism and ability to operate confidently under ambiguity

🏖️ Benefits

• Best-in-class AI tools: €20,000 per year to spend on the best AI tools available
• 30 days of annual leave, sports benefits, confidential professional coaching, and flexibility to work remotely abroad for up to 183 days a year
• UpRest: one-month fully paid sabbatical after every 4 years of working at Upvest
• Personal development budget and freedom to decide how to use it
• Hybrid/remote work options across Berlin, London, Tallinn, or elsewhere in Europe
• Competitive above-market salary and participation in employee equity program
• Company-wide events (UpFest, dinners, offsites, Holiday party) and inclusion initiatives via Employee Resources Groups (Upfem, UpVergent)

Skills & Technologies

Senior

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

Upvest GmbH

Visit Website

About Upvest GmbH

Upvest GmbH provides a set of APIs that enable fintechs, banks and wealth managers to embed investment capabilities into their applications. The Berlin-based company offers infrastructure for fractional shares, ETFs, crypto and other assets, handling trading, custody, settlement and regulatory compliance. Customers can launch brokerage or robo-advisor products without building their own broker-dealer, reducing time-to-market and operational overhead. Upvest holds BaFin licences for proprietary trading, investment brokerage and crypto custody, serving clients across Europe.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.