Комплаенс и риски вакансии

Location: Melbourne, Victoria, Australia Workplace: hybrid We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. Driving Capital.com ’s regulated expansion in Australia, you will embed practical, risk-based controls that keep our fast-moving business fully aligned with AFSL, ASIC and AML/CTF expectations. Acting as the operational bridge between front-line teams and regulators, you will ensure that compliance is not a hurdle but a competitive advantage for our OTC-derivatives offering. Responsibilities: Regulatory Advisory & Support: Serve as a  point of contact for policy, procedure and technical queries from operational teams. Onboarding Oversight: Review KYC/AML checks and verify wholesale-client categorisations to guarantee compliant client onboarding. Policy Governance: Maintain and continuously improve the Compliance Manual, policies and procedures in line with evolving ASIC and AUSTRAC requirements. Regulatory Engagement: Assist the Head of Compliance with  preparing and respond to ASIC, AUSTRAC and external-audit requests, ensuring timely and accurate submissions. Controls Testing & Risk Assessment: Assist with internal audits, control testing and risk assessments, highlighting gaps and driving remediation. Compliance Registers Management: Maintain and monitor registers for breaches, complaints, conflicts and incidents, escalating themes to leadership. Board & Committee Reporting: Compile clear, data-driven reports for the Compliance Committee, TMD Committee and Capital.com Board Requirements: Industry Experience : 2-4 years in compliance or regulatory roles within OTC derivatives, CFDs, FX or broader financial markets, ideally under an AFSL framework. Regulatory Expertise : Deep working knowledge of ASIC Regulatory Guides, the AML/CTF Act and derivative-reporting obligations, with the ability to interpret and apply them pragmatically. Operational Know-how : Hands-on familiarity with client-onboarding workflows, trading systems and compliance-monitoring tools; proven experience drafting policies, testing controls and producing board-level reports. Analytical Mindset : Detail-oriented and resilient under pressure, able to investigate issues and translate data into actionable improvements without losing pace. Communication & Stakeholder Management : Confident communicator who can influence internal teams and engage regulators or auditors in a high-pressure trading environment. Education & Credentials : Bachelor’s degree (finance, law or related) or near completion; additional compliance or AML certifications welcomed. Growth Mindset : Proactively identifies enhancements, champions high-quality outcomes and aligns with Capital.com ’s culture of innovation. Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you -because your life outside of work matters just as much as your time on the clock. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health Benefits: We’ve got your back with a medical insurance plan. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Veeva Systems is a mission-driven organization and pioneer in industry cloud, helping life sciences companies bring therapies to patients faster. As one of the fastest-growing SaaS companies in history, they surpassed $3B in revenue in their last fiscal year with extensive growth potential ahead. The company values include Do the Right Thing, Customer Success, Employee Success, and Speed. Veeva is a public benefit corporation (PBC), legally bound to balancing the interests of customers, employees, society, and investors. They support flexible work environments, allowing employees to work from home or in the office. The Role: As a Clinical Compliance Operations Specialist, you will facilitate and manage GCP project implementation audits ensuring internal adherence to Veeva processes. You will ensure quality processes are defined, followed, and maintained across multiple product and service lines and regulated domains such as GCP, HIPAA, and CSV. The role involves working closely with cross-functional global teams to provide GCP support for Veeva products in various Services areas by promoting GCP compliance, authoring GxP documents and records, reviewing project implementation deliverables, incident management review, and performing occasional supplier assessments.

Location: São Paulo, Brazil Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. What You’ll Be Doing Independent review and challenge of fraud risk assessments conducted by 1 LoD, including RCSA validation, control effectiveness testing, and escalation of identified gaps to senior management Oversight and quality assurance of incident documentation, ensuring completeness, accuracy, and alignment with BCB regulatory standards; contribution to the BCB 260 annual fraud report Regulatory SLA oversight for participant fraud investigation requests: review 1 LoD responses for adequacy, flag deficiencies, and ensure timely escalation where SLAs are at risk BCB 343 compliance monitoring of 24-hour fraud event registrations and monthly declarations submitted by 1 LoD Independent assessment of BCB-directed investigations: evidence review, challenge of 1 LoD findings, and preparation of formal regulatory responses AML interface: independent identification and escalation of fraud patterns with potential money laundering indicators to the Compliance/AML function Ongoing independent monitoring of the Dynamic Deposit Limit scoring model and Eagle Eye controls, including periodic effectiveness reviews and recommendation of adjustments to 1 LoD Fraud data analytics: analysis of platform fraud patterns to identify emerging typologies, assess control gaps, and produce findings for senior management and regulatory reporting 2 LoD policy ownership: drafting, maintaining, and periodically reviewing fraud risk policies and procedures; providing binding guidance to 1 LoD on control design and implementation standards What We Look For In You Minimum 3 years of experience in risk management in the financial services industry Strong familiarity with AI tools and a practical understanding of how to apply them to analysis, experimentation, personalization, and productivity. A highly data-driven and results-oriented mindset. Exceptional communication and stakeholder-management skills. An entrepreneurial mindset, with strong ownership, adaptability, and bias toward action. Excellent organization and project-management capabilities. Bachelor's degree or equivalent years of experience Flexibility to adapt working hours to collaborate effectively across multiple time zones. Fluency in Portuguese and English. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependents More that we love to tell you along the process! #LI-SK1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Задачи: — Точно и внимательно проводить проверку биографических данных (background checks), обеспечивая соответствие платформы Instacart местным, государственным и федеральным нормативам. — Расследовать и своевременно разрешать внутренние и внешние эскалации, связанные с проверками биографических данных, поддерживая безопасность и стабильность платформы для всех пользователей. — Выявлять, исследовать и полностью решать проблемы с проверками биографических данных, а также выявлять и реализовывать возможности для улучшения процессов. — Выполнять повторяющиеся операционные задачи с точностью и вниманием к деталям, выявляя возможности для повышения эффективности и масштабируемости команды. Требования: — 1-2+ года профессионального опыта, желательно в быстро меняющейся среде, связанной с проверками биографических данных, обработкой данных или поддержкой. — Сильные устные и письменные коммуникативные навыки. — Позитивное отношение и способность работать в условиях постоянно меняющихся и динамичных операционных условий. — Способность быстро принимать критические решения по чувствительным вопросам в быстром темпе. — Работа с высоким уровнем конфиденциальности. — Готовность работать по выходным и праздничным дням. Условия: — Удалённая работа с гибким графиком в рамках политики Flex First. — Конкурентоспособная заработная плата, зависящая от места постоянной работы кандидата. — Для кандидатов из США указаны ориентировочные почасовые ставки в долларах США в зависимости от штата. Дополнительно: — Instacart предоставляет конкурентоспособные компенсации и льготы в каждом регионе, где работают сотрудники. — Вакансия ориентирована на обеспечение безопасности и стабильности платформы Instacart для покупателей и клиентов.

Задачи: — Быть назначенным ответственным офицером по противодействию отмыванию денег (SMF17) для британского подразделения, с учетом организационных и регуляторных утверждений. — Обеспечивать второй уровень контроля программы соответствия финансовым преступлениям в Великобритании, включая AML, санкции, управление подозрительной активностью и связанные контрольные рамки. — Контролировать эскалацию подозрительной активности, внутренние направления и отчетность для британского подразделения, включая рассмотрение и эскалацию вопросов, требующих решения MLRO. — Поддерживать разработку, поддержание и постоянное улучшение AML и финансовых преступных рамок Великобритании в соответствии с требованиями FCA и регуляторными ожиданиями. — Руководить разработкой программы мониторинга соответствия финансовым преступлениям (CMP), обеспечивая ее соответствие аппетиту к риску компании, регуляторному ландшафту и рынку Великобритании. — Руководить и выполнять оценку рисков соответствия бизнесу (BWRA) и инвентаризацию контроля, выявляя риски финансовых преступлений, пробелы в контроле, регуляторные изменения и приоритеты управления. — Сотрудничать с отделом соответствия Великобритании и глобальными лидерами по финансовым преступлениям для поддержания эффективной контрольной среды. — Контролировать управление вопросами финансовых преступлений, включая выявление, отслеживание исправлений, эскалацию и закрытие. — Подготавливать ежегодный отчет MLRO для высшего руководства и совета директоров с деталями эффективности систем AML, отчетов о подозрительной активности, мошенничества, обучения, рисков и регуляторного положения. — Поддерживать внутренние и внешние аудиты, регуляторные проверки и обзоры банковских партнеров, включая подготовку материалов и координацию ответов. — Поддерживать и улучшать политики, процедуры, стандарты и документацию по финансовым преступлениям в Великобритании. — Готовить регулярные отчеты для директора по соответствию Великобритании и других старших заинтересованных лиц. — Сотрудничать с юридическим отделом по вопросам регуляторной интерпретации и с первыми линиями по внедрению, сохраняя независимость второго уровня и эффективный вызов. — Поддерживать готовность к взаимодействию с регуляторами Великобритании и другими внешними заинтересованными сторонами. — Работать с глобальной командой по управлению финансовыми преступлениями для разработки и реализации глобальной рамки. Условия: — Удаленная работа из Великобритании. — Годовая базовая зарплата от £120,000 до £168,000. — Медицинское страхование с покрытием всех премий для сотрудника и его иждивенцев. — Стипендии на технологии, питание, образ жизни и расходы на создание семьи. — Отпуск и праздничные дни. — Программа покупки акций сотрудниками (ESPP).

Role Description The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms. Key Responsibilities and Duties — Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts. — Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing. — Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial. — Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. — Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress. — Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. — Assume responsibility for the identification of technological risks and the formulation of control design proposals. — Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering. — Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company. — Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines. — Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment. — Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives. — Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working. — Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed. — Stay current with emerging cyber threats and security best practices in DevOps environments. Knowledge and Skills — Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4 — Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments — Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4 — Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4 — Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3 — Understanding of cybersecurity risks and data protection principles - L3 — Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus — Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools) — Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture — Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses — Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time — Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com Level of Education: Bachelor/Master Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years) Benefits & Perks — Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam. — Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide. — Be part of a truly international fast‑paced environment and performance‑driven culture. — Full relocation support for you and your family to move to Amsterdam. — We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years. — Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential. — Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits. — Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture. — Diverse and creative colleagues from every corner of the world. — Health, life, and disability insurance*. — Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave. — Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country). — Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit. — Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership. — On‑site meals, coffee, and snacks, including healthy and vegan options, daily*. — Benefits may vary slightly depending on location and contract type.

Location: Sliema, Malta Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity A unique and highly-impactful role at one of the fastest-growing global cryptocurrency exchanges. In this role, you will be working alongside the KYB team and you will be responsible for customer Know Your Business (KYB) cases that have been identified through our onboarding systems for potential money laundering, terrorist financing, Bank Secrecy Act violations and other AML or fraud related. This individual must have prior know-your-business and sanctions compliance experience. What You’ll Be Doing Complete comprehensive reviews of incoming customer onboarding cases and ensuring that the application of KYB principles are consistent with the Company’s KYB policy and customer risk assessment . Reviewing KYB documents obtained from the customer, utilising our validation tools and reputable sources to verify the AML documentation. Requesting appropriate CDD / EDD documentation from customers to ensure that the AML onboarding process is complete in line with our AML policies and procedures. Follow up on pending CDD/EDD requests ensuring that communication is issued with the relevant SLA's. Investigating possible matches generated by the scanning application that the Company uses to screen customers against sanctions , PEP 's and adverse media news and ensuring the appropriate action is taken. Provide information to management in respect of AML/CDD issues arising. Maintain delivery of a high quality service level to customers and other departments ensuring all queries are dealt with in a professional manner and escalating where appropriate. Support the enhancement of our CDD function and maintain procedures Manage specific projects, which may arise from time to time. What We Look For In You Completion of tertiary higher education such as Higher Diploma, Degree and onwards. You have two or more years’ experience in AML and CDD/EDD review or in a KYB work domain You are a ‘team player’ who can work well within the function to deliver a quality service. You have excellent communication and writing skills, and are attentive to details. Willing to work on a shift schedule between Monday to Friday and some late finishes of up to 10:00 PM. Excellent command of spoken and written English is required. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-GB1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Dubai Workplace: hybrid About the role: IT  Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Compliance work. Responsibilities: Take ownership of preparation and coordination of IT audits, supervisory reviews, and regulatory information requests, ensuring timely, accurate, and complete delivery of required evidence. Conduct IT compliance and control gap assessments against local regulatory requirements, internal policies, and recognized industry best practices. Identify compliance gaps, control weaknesses, and technology risks; define, execute, and track remediation and corrective action plans in collaboration with IT, Security, Risk, and Compliance teams. Support the development, implementation, and ongoing maintenance of IT, cybersecurity, and information security policies, standards, and procedures aligned with regulatory expectations. Act as a subject-matter expert on IT compliance and technology risk requirements, translating regulatory and supervisory expectations into practical, implementable controls. Maintain accurate, complete, and audit-ready documentation for all IT compliance activities, including policies, procedures, risk assessments, and evidence repositories. Support ongoing interactions with regulators and external auditors on technology, cybersecurity, and operational resilience topics. Requirements: 4–6+ years of experience in IT compliance, IT audit, technology risk management, or related fields within regulated environments. Strong understanding of regulatory expectations applicable to financial institutions in the UAE, particularly in the areas of: IT governance and oversight, Information security and cybersecurity controls, Technology risk management, Data protection and data residency, Access management, change management, and incident management, Business continuity and disaster recovery (BCP / DR). Proven hands-on experience conducting IT and cybersecurity gap assessments and defining remediation plans aligned with regulatory and supervisory expectations. Solid knowledge of internationally recognized IT and security frameworks (e.g. ISO 27001, NIST, COBIT) and ability to apply them in a regulatory context. Experience supporting regulatory inspections, supervisory reviews, or external IT audits, including evidence preparation and issue remediation. Ability to work independently on complex compliance topics, manage multiple priorities, and drive remediation activities to completion. Strong communication and stakeholder management skills, with the ability to clearly explain technical and regulatory requirements to non-technical audiences. Fluent English is required; Strong analytical and risk-based mindset with high attention to detail. What you will get in return: Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: London, England, United Kingdom Workplace: hybrid We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. The Head of Risk will be the accountable risk leader for the UK entity, responsible for ensuring that all material risks affecting UK clients, regulatory posture, and operational resilience are identified, assessed, monitored, and reported effectively. This is a broad role covering financial risk (excluding direct dealing oversight), operational risk, conduct risk, and third party/outsourcing risk. A defining characteristic of this role is its operating model. Many core risk functions are delivered by the Group Risk team on an outsourced or shared services basis. The Head of Risk does not need to build and staff every capability locally. Instead, they must be skilled at managing outsourced service delivery: defining what the UK entity requires, holding Group Risk accountable for quality and timeliness, identifying gaps or conflicts between Group delivery and UK regulatory obligations, and escalating where service levels or outputs fall short. This creates a dual mandate. The role holder must be a credible, senior risk professional who can engage substantively with risk content (frameworks, stress tests, MI, regulatory submissions). They must also be an effective governance operator who can manage intra group outsourcing relationships with the same rigour the FCA would expect for any outsourced critical or important function. The role reports directly to the UK CEO with a functional dotted line to the Group CRO. The Head of Risk will be the primary risk voice in UK governance forums and the lead point of contact for FCA supervisory engagement on risk matters. Responsibilities UK Risk Accountability and Framework Ownership Own the UK enterprise risk management framework end to end, ensuring it is proportionate, current, and aligned with FCA expectations under SYSC, PRIN, and Consumer Duty Maintain the UK Risk Register with clear ownership, assessment methodology, defined review cycles, and escalation triggers Own the UK risk management framework and RAS, translating Group risk appetite into UK specific decision boundaries that reflect local regulatory constraintsProvide independent 2nd line oversight and challenge to 1st line risk owners across operations, technology, client services, and commercial functions (excluding dealing, which reports separately) Outsourced Risk Service Management Act as the intelligent client for risk services delivered by the Group Risk team, including but not limited to: market risk monitoring, credit/counterparty risk assessment, quantitative risk modelling, stress testing, and risk MI production Define and document what the UK entity requires from Group Risk in terms of scope, quality, timeliness, and regulatory standard, formalised through an intra group service level framework or equivalent Monitor and challenge the quality and completeness of Group Risk outputs before they are used in UK governance forums, board packs, or regulatory submissions Identify gaps between Group Risk delivery and UK specific regulatory requirements, and escalate where those gaps create risk to the UK entity’s compliance posture Maintain an outsourcing risk assessment for Group Risk services consistent with FCA expectations for oversight of outsourced critical or important functions under SYSC 8 Ensure that the UK entity retains sufficient knowledge and capability locally to oversee outsourced risk functions, avoiding inappropriate dependency on Group without independent local scrutiny Regulatory, Prudential, and Conduct Risk Lead or substantively oversee the UK ICARA (Internal Capital Adequacy and Risk Assessment) process, coordinating with Group Risk and Group Finance on stress testing, scenario analysis, and capital/liquidity adequacy Ensure market risk, credit/counterparty risk, and concentration risk are monitored and reported to a standard that meets MIFIDPRU requirements, whether produced locally or by Group Integrate conduct risk assessment into product governance, pricing decisions, and client outcome monitoring in line with Consumer Duty (PRIN 2A) Oversee operational risk including business continuity, IT resilience, and third party risk, ensuring the UK entity maintains visibility even where platforms and infrastructure are managed at Group level Reporting and Management Information Deliver risk MI to the UK Board, UK ExCo, and relevant governance committees on a defined cadence, with clear narrative on trends, near breaches, breaches, and required actions Own and maintain Key Risk Indicators (KRIs) across all material risk domains, each with predefined thresholds and mandatory escalation actionsPrepare risk sections for board packs, regulatory returns, and FCA supervisory engagement materials Critically assess risk MI received from Group Risk before presenting to UK governance forums, ensuring it accurately reflects UK specific exposures and is not simply a Group level aggregation Stakeholder Engagement Act as the primary point of contact for risk matters with the FCA during supervisory interactions, skilled persons reviews, and thematic exercises Maintain effective working relationships with the Group CRO and Group Risk team, balancing collaborative alignment with independent challenge where UK interests diverge from Group priorities Collaborate with the Head of Compliance (SMF16/17) to ensure clear delineation of 2nd line responsibilities with no gaps or duplication Engage with internal and external auditors on risk related findings, ensuring timely remediation and structural fixes Team and Capability Building Build the UK risk function progressively as the office grows, identifying where local capability is needed versus where Group delivery remains appropriate Embed a risk aware culture across the UK office through training, practical challenge, and visible engagement with 1st line teams Requirements Substantial experience (typically 8+ years) in risk management within FCA regulated financial services, with demonstrable exposure to CFD, spread betting, or leveraged derivatives businesses Deep working knowledge of FCA regulatory expectations for risk management under SYSC, PRIN, Consumer Duty (PRIN 2A), and MIFIDPRU prudential requirements Proven experience managing outsourced or shared service risk functions, including defining service requirements, monitoring delivery quality, and escalating shortfalls. This is a critical differentiator for this role Experience designing and operating enterprise risk frameworks including risk registers, risk appetite statements, KRI frameworks, and ICARA/ICAAP processes Strong understanding of financial risk (market, credit/counterparty, liquidity), operational risk, and conduct risk in the context of a retail leveraged trading platform Experience preparing and critically reviewing risk MI for boards and senior governance forums, including the ability to identify where MI masks underlying issues Experience engaging with the FCA in a supervisory context, whether directly or as a substantive contributor to supervisory dialogue Understanding of the 3 lines of defence model and comfort operating independently within a structure where many 2nd line services are delivered centrally by a Group function Strong governance instincts: the ability to distinguish between aligned Group support and inappropriate delegation of UK regulatory accountability Desirable Experience with FCA expectations for oversight of outsourced critical or important functions under SYSC 8 and the FCA’s broader outsourcing and third party risk guidance (FG16/5) Experience with CASS client money and asset requirements, particularly CASS 7 and CASS 6 audit processes Familiarity with the Complaints, Claims, and Indemnity (CCI) regime under PS25/20 Professional qualifications: IRM Certificate/Diploma, FRM, PRM, or equivalent Experience within a multi entity group structure where local regulatory obligations must be balanced against Group efficiency and standardisation pressures Proficiency with risk analytics tools including Python/R for quantitative analysis and Tableau for risk dashboards What you will get in return: • Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. • Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! • Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Warsaw, Mazowieckie, Poland; Limassol, Cyprus; Sofia City, Bulgaria Workplace: hybrid IT Assurance & Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Assurance & Compliance work. Responsibilities: Own end-to-end preparation for IT audits and regulatory reviews — evidence gathering, coordination with tech teams, and timely delivery of complete audit packages; Conduct gap assessments against new regulatory requirements — document findings and propose remediation plans with clear owners and deadlines; Act as the subject-matter expert for IT compliance questions across the Company — translate regulatory requirements into practical implementation guidance for technical teams; Maintain audit-ready documentation across all IT Assurance & Compliance activities, including evidence repositories and compliance registers; Review and contribute to IT and Security policies, standards, and procedures — providing IT compliance input to ensure alignment with regulatory requirements and practical applicability across teams. Requirements: 4+ years in IT compliance, IT audit, or information security governance; Experience in FinTech, banking, or another regulated industry; Hands-on experience conducting gap assessments and building remediation plans — not just documenting findings, but driving them to closure; Working knowledge of at least two of: DORA, PCI DSS, SOC 2, or similar frameworks; awareness of how they interact in a multi-jurisdiction environment is a plus; Ability to work independently on complex, ambiguous IT compliance tasks; Strong communication skills — able to translate regulatory requirements into practical terms for technical teams and present compliance positions clearly to regulators and senior stakeholders; Attention to detail that extends to documentation: evidence packages, policy versions, control registers. What you will get in return: Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Budapest, Hungary About Wolt At Wolt, we create technology that brings joy, simplicity and earnings to the neighborhoods of the world. In 2014 we started with delivery of restaurant food. Now we’re building the delivery of (almost) everything and you’ll find us in over 500 cities in 30 countries around the world. In 2022 we joined forces with DoorDash and together we keep on dreaming big and expanding across the globe. Working at Wolt isn’t always easy, but it’s definitely exciting. Here you’ll learn more, build more, and ship more than in most other companies. You’ll be challenged a lot, but also have a lot of fun on the way. So, if you’re a self-starter with drive and entrepreneurial spirit, this could be the ride of your life. Are you detail-oriented and enjoy working with data? Do you like solving problems and collaborating across teams? If so, we’d love to hear from you! Role background Our Merchant Services and Compliance Operations teams ensure Wolt meets regulatory requirements across all markets. As part of this, we’re strengthening our KYC/KYB processes to support scalable and compliant operations. As a Merchant Compliance Administrator, you’ll review merchant information and make sure everything is accurate, complete, and compliant. This role is based in Budapest, Hungary, and works closely with our in-market teams. We offer flexibility - the position is available full time, part-time (20 or 30 hours per week) and is also suitable for students, with a minimum commitment of 20 working hours per week. What you’ll be doing Review and validate merchant-submitted KYC/KYB documents (e.g. ID, business details) Check for accuracy and completeness based on internal guidelines Flag missing or incorrect information for follow-up Use internal tools to manage and track tasks Support quality checks and maintain high data accuracy Collaborate with Operations, Compliance, and Product teams Our humble expectations 1+ year of experience in operations, admin, compliance, data validation, or similar Strong attention to detail and ability to work with structured data Comfortable handling sensitive information Able to follow processes and work accurately at scale Experience with tools such as Google Workspace or similar Good organizational and time management skills Clear communication and collaboration skills Fluent in English (additional languages are a plus) You have the right to work in Hungary Nice to have: basic understanding of legal or business documents What we offer 🌍 Independent work in a dynamic, international team 💳 SZÉP-card* 🏥 Private health insurance* 🏋️ All You Can Move card (self-financed)* 💙 Employee Assistance Programme - therapy and wellbeing* % Discount on your Wolt orders* 👶 Extended parental leave for fathers: 16 weeks total* 💻 Modern work equipment 🫶 Volunteer day 🍿 Snacks & drinks in the office 🎓 Please note: Student contracts work a bit differently, benefits marked with * are available only to non-student employees If you are excited about working in a high-growth environment, taking ownership, and being part of an extremely ambitious team, then click below to apply and get the conversation going! Our Commitment to Diversity and Inclusion We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel. Beware of recruitment scams: DoorDash, Deliveroo, and Wolt will never ask you to pay money or share sensitive financial information during hiring — learn more about our legitimate recruiting process at Recruitment Scam Awareness - DoorDash .

О ПРОЕКТЕ Мы — международная финтех-команда, создающая инновационный продукт на пересечении традиционных финансов и криптоактивов. Ищем сильного лидера, который проведет глубокий аудит нашей compliance-функции, пересоберет процессы и выведет безопасность продукта на новый уровень. ВАШИ КЛЮЧЕВЫЕ ЗАДАЧИ — Полная ревизия текущих compliance-процессов и выявление точек роста. — Пересборка систем AML / KYC и мониторинга транзакций с нуля или до идеала. — Определение риск-логики и настройка decision rules для минимизации угроз. — Взаимодействие с банками, PSP и крипто-партнерами по вопросам соответствия. — Формирование сильной команды и выстраивание устойчивой комплаенс-культуры. ЧТО МЫ ЖДЕМ ОТ ВАС — 5–8+ лет опыта в Compliance / AML / Risk. — Релевантный бэкграунд в Fintech, Crypto, Payments или iGaming. — Глубокое понимание KYC/AML, санкционных списков и мониторинга. — Умение самостоятельно принимать сложные решения и нести за них ответственность. — Опыт успешной трансформации или построения процессов в динамичных компаниях. Условия: — Гибкий формат работы (Fractional) с перспективой полноценного лидерства. — Стабильные выплаты в твердой валюте или стейблкоинах.

Location: Home based - Worldwide In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do. To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making. In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will not only work within the team but also cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical. The security risk management team’s mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies. What you will do in this role: Define Canonical's security risk management  standards and playbooks Analyse and improve Canonical's security risk practices Evaluate, select and implement new security requirements, tools and practices Grow the presence and thought leadership of Canonical security risk management practice Develop Canonical security risk learning and development materials Work with Security leadership to present information and influence change Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others) Participate in risk management, decision-making, and collaborative discussions Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action Develop templates and materials to help with self-service risk management actions Monitor and identify opportunities to improve the effectiveness of risk management processes Launch campaigns to perform security assessments and help mitigate security risks across the company Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities. What we are looking for An exceptional academic track record Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path Drive and a track record of going above-and-beyond expectations Deep personal motivation to be at the forefront of technology security Leadership and management ability Excellent business English writing and presentation skills Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management Expertise in threat modelling and risk management frameworks Broad knowledge of how to operationalize the management of security risk Experience in Secure Development Lifecycle and Security by Design methodology What we offer you We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues Priority Pass, and travel upgrades for long haul company events About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-remote

Location: Limassol; Nicosia Workplace: hybrid The role:    Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey! The main responsibilities of the position include: Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks Maintain the risk register and the Information Security Risk Management Program Identify information security risks and make recommendations that are appropriate, practical, and cost-effective Manage and monitor the progress of remediation steps on risk assessment findings Prepare comprehensive reports summarising the actions taken for to remediate identified risks Provide regular reports and metrics on the security posture of the company Act as the escalation point of the information security department for any information security related risks Main requirements: BSc/MSc in Information Security or any other relevant degree At least 3 years of work experience in information security risk management and information security risk assessment Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus Ability to work autonomously with minimum supervision and to integrate well within a team Ability to articulate security risks and communicate effectively to various levels of management Self-motivated, proactive, and efficient Ability to work under pressure in a fast paced environment Strong interpersonal, organisational, and project management skills Excellent communication skills with the ability to explain technical concepts to a non-technical audience. Excellent written and verbal skills in English Benefit from: Attractive remuneration package Private health insurance Corporate pension fund Intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy Policy and the Confidentiality Undertaking.