Risk and Internal Controls Analyst (BR120-GRC)

OKTO’s continuous growth demands high-caliber candidates, who can demonstrate professionalism, passion, and creativity. For those who come on board, we offer significant career advancement, challenges, and a runway for growth.

OKTO powers digital payments for every entertainment, leisure, and gaming environment. Our unified payment platform combines secure, real-world transactions with the most powerful payment technology to create immersive payment experience for both merchants and their users.

Since 2019, OKTO has been improving payment interactions for online and retail gaming and introducing frictionless payments with its local knowledge, sector expertise and international capabilities.

The expanding business now employs over 100 payment experts, gaming insiders and software engineers, serving some of the most exciting international markets including, Brazil, Romania, Italy, Greece, Germany, the UK and Spain.

Role Summary:

We are looking for a Mid/Senior professional with strong autonomy and hands-on experience in Risk Management and Internal Controls. This role is designed for someone who can independently manage risk and control activities, from planning and assessment to execution, reporting, remediation, and continuous monitoring.

The position will be part of and led by the Compliance function, working closely with Compliance leadership while maintaining a cross-functional view of the organization's business and operations.

The professional will be responsible for identifying, assessing, monitoring, and reporting business and operational risks across the organization, as well as evaluating the design and effectiveness of internal controls. This includes understanding how different business processes operate, identifying potential risks and control gaps, and working with process owners to implement practical mitigation and remediation measures.

The professional is expected to have a broad understanding of the organization's business, operational processes, risks, and internal controls as a whole, with the ability to connect risks and controls across different functions and processes.

The role requires a high degree of independence, analytical capability, maturity, and ownership. The successful candidate should be able to independently organize and prioritize their work, interact with multiple business areas, constructively challenge existing processes and controls, and provide clear recommendations and management insights.

Key Responsibilities

Risk Management

• Independently conduct business and operational risk assessments across the organization.
• Maintain and improve the risk universe, risk mapping, assessment methodology, and KRIs.
• Identify emerging risks, assess potential impacts, and recommend appropriate mitigation measures.
• Develop and monitor risk treatment plans, ensuring clear ownership, deadlines, and follow-up.
• Support risk appetite and tolerance monitoring and prepare risk reports, dashboards, and management insights.
• Proactively identify trends and issues requiring management attention.

Internal Controls

• Independently map and assess business processes, risks, and internal controls across the organization.
• Plan and execute internal control testing, documenting results and identifying deficiencies.
• Assess control effectiveness and recommend practical remediation actions.
• Work with process owners to strengthen controls and address identified gaps.
• Monitor remediation plans and challenge stakeholders when actions are delayed or insufficient.
• Support the design and implementation of controls in response to risks, process changes, audits, or regulatory requirements.

Compliance, Governance & Stakeholder Management

• Work under the leadership of the Compliance function, supporting the Risk and Internal Controls framework.
• Act as a business-facing point of contact across Finance, Operations, Product, Commercial, Legal, Technology, and other areas.
• Maintain a holistic view of business and operational risks and controls, identifying interdependencies and potential impacts.
• Provide constructive challenge on risk identification, control effectiveness, and remediation plans.
• Support internal and external audits, governance forums, and management reporting.
• Independently manage priorities, deliverables, and deadlines, proactively escalating material risks and issues.

Requirements

Education & Experience

• Bachelor's degree in Business Administration, Engineering, Economics, Accounting, Finance, or related fields.
• 3-7+ years of relevant professional experience in Risk Management, Internal Controls, Internal Audit, Compliance, Operational Risk, or related business risk functions.
• Hands-on experience with risk assessments, risk mapping, internal control design and testing, KRIs, remediation plans, and risk reporting.
• Demonstrated experience analyzing business and operational processes and their associated risks and controls.
• Experience working directly with multiple business and operational areas rather than exclusively within a technical or IT environment.
• Proven ability to independently manage end-to-end activities, from planning and execution to reporting and follow-up.
• Experience interacting with multiple stakeholders and presenting findings or recommendations to management.
• Experience in financial services, fintech, payments, banking, or another regulated environment is highly desirable.

Technical Knowledge

• Strong practical knowledge of Risk Management and Internal Controls frameworks and methodologies.
• Good knowledge of Excel and PowerPoint for analysis, reporting, dashboards, and management presentations.
• Knowledge of COSO and/or ISO 31000 is a plus.
• Experience with Business Continuity Management (BCM) and Business Continuity Plans (BCP) is a plus.
• Experience with GRC, risk management, or internal control tools is a plus.

Languages

• Advanced English.
• Intermediate to advanced Spanish.

Important Information

• Full-time position under a CLT (Brazilian employment) contract.
• Hybrid work model, based in São Paulo/SP, Brazil.
• The position sits within the Compliance function and operates across the organization.
• This is a business and operational Risk & Internal Controls position, focused on understanding and strengthening risks and controls across the organization's processes and operations.

Benefits

• Competitive compensation - aligned with your experience and the market.
• Meal allowance - provided through a prepaid card, with the flexibility to use part of the balance beyond food expenses.
• Health and dental plan - no monthly cost for you and your dependents, with comprehensive coverage to take care of your health and well-being.
• TotalPass - access to gyms and partner studios, encouraging a healthy and balanced lifestyle.