# Risk & Controls Manager **Company**: Pleo **Location**: London **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: Finance **Industry**: Finance **Apply**: https://jobs.ashbyhq.com/pleo/3081ba31-5f4c-4de6-98a4-93cf6ce4b1fb?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_4150c0e8-01a ## Description We're looking for a Risk and Controls Manager to join our Risk & Controls team, part of Pleo's Second Line of Defence. You'll report to our Head of Risk and Controls, helping build and run our enterprise risk management framework, from risk appetite linkage through to the risk reporting our senior leaders and committees rely on. As a Risk Manager, you will: - Build and run our ERM framework: Work closely with the Head of Risk and Control on our enterprise risk management framework, including risk appetite, how it links to our risks and controls, and the reporting that goes to senior management and governance committees. - Own technology and security risk oversight: Lead 2LOD oversight of information security, technology and operational resilience risk, setting the methodology and standards and challenging the First Line on where the gaps are. - Test our IT general controls: Run ITGC testing with our technology and security teams, assessing whether controls are well designed and working in practice. - Lead high-risk testing when incidents happen: Partner with our Assurance & Controls Manager to lead incident-driven testing in our highest-risk areas and turn findings into clear actions. - Run risk assessments and RCSAs: Lead risk assessments and risk and control self-assessments across the business, not just in technology. - Shape our GRC tooling: Run GRC tools and help decide how we bring more structure and automation to how we manage risk. - Be a trusted risk partner: Advise First Line teams on risk, regulatory change and the control environment, and support our engagement with regulators. You'll work closely with other members in our Risk and Controls team, the security GRC team in the First Line, as well as teams across Product, Engineering, Operations, Finance and Compliance. We value people from a range of risk backgrounds, so if you match most of what's below, we'd love to hear from you. WHO YOU'LL BE WORKING WITH AND REPORTING TO You'll work closely with other members in our Risk and Controls team, the security GRC team in the First Line, as well as teams across Product, Engineering, Operations, Finance and Compliance. WHAT YOU BRING You'll thrive in this role if you have: - Enterprise risk management depth: Hands-on experience running an ERM or operational risk framework in a regulated financial services business (FinTech, banking, payments or similar), including risk appetite, risk reporting and RCSAs. - Technology risk know-how: Hands-on experience applying security, technology and operational resilience risk methodology and standards, with enough depth to challenge technology and security teams credibly. - Controls testing experience: A track record of ITGC testing or similar control testing and assurance work. - The ability to influence: Confidence engaging stakeholders on complex or sensitive risk topics, challenging constructively and being heard. - Clear, collaborative communication: The ability to translate risk concepts into practical language for everyone from engineers to senior leadership. - A pragmatic mindset: A drive to find workable answers to real risk challenges rather than defaulting to theory. Nice to have: - First Line experience, for example in an IT, security or GRC team before moving into second line risk - Experience with GRC tooling, including selecting or rolling out a platform - Exposure to data risk or AI risk - Experience at both a FinTech and a traditional bank or payments business HOW YOU'LL DEVELOP IN THIS ROLE In your first 12 months at Pleo, you'll: - Get under the skin of Pleo's risk landscape and take ownership of key 2LOD review and challenge activities across priority business areas. - Play an active role in evolving our risk framework as the company continues to scale , contributing your expertise to initiatives that will shape how we manage risk for years to come. - Build strong relationships across the business, establishing yourself as a credible and trusted voice on risk matters. SHOW ME THE BENEFITS! - Your own Pleo card (no more out-of-pocket spending!) - Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office - Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis - We offer 25+ days of holiday + your public holidays - For our Team, we offer both hybrid and fully remote working options - We use MyndUp to give our employees access to free mental health and well-being support with great success so far - Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work ## Skills ### Required - Enterprise Risk Management - Technology Risk - Controls Testing - GRC Tooling - Risk Assessments - RCSAs ### Nice to have - First Line experience - GRC tooling experience - Data risk or AI risk experience - Experience at a FinTech and a traditional bank or payments business --- Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/pleo/3081ba31-5f4c-4de6-98a4-93cf6ce4b1fb?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)