IT Risk & Compliance Associate

Risk & Compliance Associate – IT & Cyber Risk

WHAT YOU WILL BE DOING

As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.

You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements.

We need someone like you to help us on the following fronts:

• 
  

  Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products

  
  


• 
  

  Perform independent risk oversight and challenge over IT, Cybersecurity

  
  


• 
  

  Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)

  
  


• 
  

  Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks

  
  


• 
  

  Assess risks related to cloud environments, infrastructure, and technology architecture

  
  


• 
  

  Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation

  
  


• 
  

  Support the identification and management of ICT third-party / vendor risks

  
  


• 
  

  Lead risk assessments (RCSA), control testing and risk reporting activities

  
  


• 
  

  Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)

  
  


• 
  

  Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries

  
  


• 
  

  Support internal and external audits and regulatory interactions when required

  
  

WHAT WE ARE LOOKING FOR

EXPERIENCE

• 
  

  +5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)

  
  


• 
  

  Proven experience in second line of defence (risk oversight / control functions)

  
  

EDUCATION

Required

• 
  

  Bachelor’s degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields

  
  

SKILLS & KNOWLEDGE

• 
  

  Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus

  
  


• 
  

  Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT)

  
  


• 
  

  Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management

  
  


• 
  

  Experience in:

  
  


• 
  

  Risk assessments (RCSA, control frameworks)

  
  


• 
  

  IT controls and cybersecurity practices

  
  


• 
  

  Cloud risk and technology environments

  
  


• 
  

  Familiarity with Third-party risk management with focus on IT, Cyber and resilience

  
  


• 
  

  Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact

  
  


• 
  

  Ability to challenge stakeholders constructively and influence decision-making

  
  


• 
  

  Excellent communication skills (written and verbal), with experience interacting with senior stakeholders

  
  


• 
  

  High level of English

  
  

DESIRED CERTIFICATIONS

• 
  

  CISA, CRISC, CISSP, CISM or similar

  
  


• 
  

  ITIL or other IT governance certifications