Risk and Internal Control Officer – Remote-First

Overview

This role strengthens the risk and internal control framework of a growing European payments organization operating across multiple European countries.

You will work in a regulated environment and collaborate with stakeholders across the three lines of defense, supporting how risks are identified, monitored, mitigated, and reported.

Responsibilities

• Monitor level 1 controls, collect control results, and support managers in control execution and follow-up.
• Design, plan, and perform level 2 controls using a risk-driven approach.
• Monitor other level 2 controls performed by the Group DPO and Group CISO.
• Contribute to the continuous identification, assessment, and documentation of risks.
• Maintain the risk register, Key Risk Indicators, and risk mitigation plans.
• Monitor risk appetite thresholds and ensure appropriate mitigation actions are raised when required.
• Contribute to risk reporting presented to relevant committees and supervisory boards.
• Monitor third-party service provider risk assessments and support effective oversight of external risks.
• Promote risk and internal control awareness across the organization and contribute to continuous improvement initiatives.
• Collaborate with stakeholders across the three lines of defense, including Compliance, Business Continuity, and Risk & Compliance.

Requirements

• 2–5 years of professional experience in a similar Risk and/or Internal Control role.
• Proficient in English.
• Ability to thrive in a remote-first, multicultural environment.
• Strong knowledge of Enterprise Risk and Internal Control, including risk framework setup and the Three Lines of Defense model.
• Hands-on experience with Level 1 / Level 2 control execution and testing.
• Strong understanding of risk reporting and governance, including knowledge of COSO and experience working in regulated environments.
• Excellent communication and stakeholder management skills, with analytical thinking, attention to detail, and a proactive continuous improvement mindset.

Preferred Qualifications

• Knowledge of ICT risk management, outsourcing risk management, and DORA compliance.
• Experience with GRC tools.

Compensation & Benefits

• Competitive compensation package, including salary and a performance-based bonus.
• High-quality benefits program.
• Learning & development budget: €5,000 training budget per year.
• Possibility to work from another EU country for up to 3 months per year.
• Remote-first culture with quarterly and annual all-staff in-person meetups.

Location

This position is remote-first, with in-person meetings at least once a quarter. Work is based in the country where you are located.