IT Risk & Compliance Associate
Risk & Compliance Associate - IT & Cyber Risk
WHAT YOU WILL BE DOING
As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.
You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements.
We need someone like you to help us on the following fronts:
Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products
Perform independent risk oversight and challenge over IT, Cybersecurity
Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)
Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks
Assess risks related to cloud environments, infrastructure, and technology architecture
Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation
Support the identification and management of ICT third-party / vendor risks
Lead risk assessments (RCSA), control testing and risk reporting activities
Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)
Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries
Support internal and external audits and regulatory interactions when required
WHAT WE ARE LOOKING FOR
EXPERIENCE
+5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)
Proven experience in second line of defence (risk oversight / control functions)
EDUCATION
Required
Bachelor’s degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields
SKILLS & KNOWLEDGE
Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus
Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT)
Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management
Experience in:
Risk assessments (RCSA, control frameworks)
IT controls and cybersecurity practices
Cloud risk and technology environments
Familiarity with Third-party risk management with focus on IT, Cyber and resilience
Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact
Ability to challenge stakeholders constructively and influence decision-making
Excellent communication skills (written and verbal), with experience interacting with senior stakeholders
High level of English
DESIRED CERTIFICATIONS
CISA, CRISC, CISSP, CISM or similar
ITIL or other IT governance certifications