Комплаенс и риски вакансии — гибрид

Задачи: — проводить проверки на финансовые преступления — управлять последующими действиями по кейсам — улучшать процессы и инструменты комплаенса Требования: — знание SQL, n8n, Looker, Google Sheets, Apps Script — опыт работы с проверками PEP, KYB, KYC, AML, санкционным контролем и мониторингом транзакций Условия: — гибридный формат работы в Берлине

Location: Taguig, National Capital Region Workplace: Hybrid THE BUSINESS RESILIENCE OFFICER SUPPORTS THE DEVELOPMENT, IMPLEMENTATION, AND OVERSIGHT OF THE BANK’S BUSINESS CONTINUITY MANAGEMENT AND OPERATIONAL RESILIENCE PROGRAM. THE ROLE HELPS ENSURE COMPLIANCE WITH MORB SECTION 149, BSP BUSINESS CONTINUITY REQUIREMENTS, AND BSP CIRCULAR NO. 1203 ON OPERATIONAL RESILIENCE. KEY RESPONSIBILITIES - Maintain the Bank’s business continuity and operational resilience frameworks, policies, standards, and procedures. - Coordinate periodic Business Impact Analyses and continuity risk assessments. - Facilitate the identification of critical operations and their end-to-end dependencies, including people, processes, technology, facilities, information, and third parties. - Assist business units in establishing recovery objectives and tolerances for disruption. - Review and challenge business continuity, crisis management, emergency response, and recovery plans. - Coordinate tabletop exercises, call-tree tests, disaster recovery tests, simulations, and severe-but-plausible scenario exercises. - Evaluate test results, document identified gaps, and monitor corrective actions to completion. - Assess whether critical operations can remain within approved disruption tolerances. - Coordinate with IT on system resilience, disaster recovery, cybersecurity incident response, and recovery readiness. - Assess the continuity and resilience arrangements of critical service providers and outsourced operations. - Support the activation of continuity and crisis management plans during actual disruptions. - Facilitate post-incident reviews and ensure lessons learned are incorporated into policies, plans, and controls. - Maintain escalation and communication procedures for significant disruptions. - Support the timely preparation of regulatory incident reports and notifications. - Conduct training and awareness programs for employees, plan owners, and business continuity coordinators. - Prepare regular resilience reports, dashboards, and recommendations for senior management and the Board. - Maintain complete documentation for BSP examinations, internal audits, and independent reviews. - Monitor regulatory developments and recommend enhancements to maintain compliance. - Perform other operational-risk and resilience responsibilities assigned by the Chief Risk Officer. QUALIFICATION REQUIREMENTS - Bachelor’s degree in Business Administration, Finance, Information Technology, Engineering, or a related field. - At least 3 years of relevant experience in banking, financial services, or a related industry where BCP is important. - Experience in one or more of the following areas: - Business continuity management - Operational resilience or operational risk - Disaster recovery - Crisis or incident management - Banking operations - Information technology or cybersecurity - Audit, compliance, or risk management - Working knowledge of Business Impact Analysis, continuity planning, recovery strategies, and resilience testing. - Familiarity with BSP regulations, particularly MORB Section 149 and Circular No. 1203. - Knowledge of ISO 22301 or similar business continuity standards is preferred. - BCM, operational resilience, risk management, or disaster recovery certification is an advantage. - Strong analytical, documentation, project coordination, and report-writing skills. - Strong communication skills and ability to coordinate across business units, IT, management, and external service providers. - Ability to remain composed and work effectively during disruptions and crisis situations. - Willingness to provide support outside regular working hours during exercises or actual incidents, if warranted only.

Location: New York, NY (HQ); Remote (US or Canada); San Francisco, CA; Miami, FL Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Ramp is seeking an experienced Chief Compliance Officer (CCO) for Ramp Advisory LLC, our SEC-registered investment adviser. This is a high-accountability, build-and-own role. You will own and be accountable for the firm's compliance program in house, and be the gatekeeper who protects clients and the firm while keeping pace with how fast Ramp ships product. You will report to Ramp's Head of Compliance, with direct access to Ramp Advisory's senior leadership.   WHAT YOU'LL DO - Serve as Ramp Advisory LLC’s designated CCO, with independent authority over the design, execution and effectiveness of the compliance program - Act as the firm’s primary point of contact with the SEC, and represent the program, product and key compliance decisions with regulators - Maintain the firm’s policies and procedures, Code of Ethics, and Form ADV and amendments, and conduct the annual compliance review - Provide compliance advice and sign-off on marketing materials, customer disclosures, onboarding agreements and product changes - Own books and records, communications monitoring, complaints handling, employee training, and access-person and personal-trading requirements - Oversee key financial partners and vendors from a compliance standpoint - Shape customer onboarding strategy, partnering with Product, Engineering and Customer Experience to build scalable controls and monitoring - Build and maintain the firm’s anti-money laundering program   WHAT YOU NEED - 8+ years in investment adviser compliance, including prior experience as a CCO or deputy CCO of an SEC-registered adviser - Experience in the fintech space - Deep working knowledge of the Advisers Act and SEC expectations - Direct experience supporting SEC examinations and interfacing with regulators - Experience overseeing custodian, broker-dealer or sub-adviser relationships - Sound, independent judgment: the ability to make and defend compliance decisions in real time, grounded in regulatory guidance, and to hold a position with senior stakeholders - AI fluency and demonstrated experience using AI and automation to build and scale compliance programs - Comfort operating as a standalone compliance lead in a fast-moving environment - Experience building controls and leading program design initiatives in partnership with engineering teams and cross-functional partners   NICE-TO-HAVES - Experience building or scaling a compliance program at a high-growth company - Experience with cash management or fixed income strategies - Experience with digital or technology-enabled advisory models BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Задачи: — Управление процессами, обеспечивающими соблюдение правил охраны труда Объединенной ресурсоснабжающей организации (СОУТ, медосмотры, СИЗы, расследование несчастных случаев, ведение журналов, инструктажи, отчетность по охране труда в гос органы) — Поддержание в актуальном виде локальных нормативных актов по охране труда — Организация и мониторинг обязательного обучения по охране труда — Ведение договорной работы по направлению в зоне ответственности — Участие в бюджетировании (по части охраны труда) — Планирование и контроль необходимых расходов Требования: — Знание нормативно-правовых актов, правил, процедур, критериев, установленных государственными нормативными требованиями охраны труда — Умение контролировать соблюдение требований охраны труда работниками Компании и подрядных организаций — Умение обучать работников Компании по вопросам охраны труда, оказанию первой помощи, применению СИЗ — Умение разрабатывать локальные нормативные акты с соблюдением государственных нормативных требований охраны труда, оформлять протоколы обучения и проверки знаний, отчеты, создавать базы данных и электронные таблицы — Знание ПО: 1С: Документооборот — Желателен опыт работы в ресурсоснабжающих организациях (важно понимание СУОТ на котельных, КОС и ВЗУ, в электрике) — Понимание СУОТ (Система управления охраной труда) по трем направлениям: теплоснабжение, водоснабжение, электроснабжение

Компания Adyen ищет опытного Senior CDD Risk Analyst для работы в гибридном формате в Сингапуре. В обязанности входит руководство процессом сложного онбординга торговцев и усиление контроля качества в области комплаенса. Кандидат должен обладать навыками оптимизации рабочих процессов, управления рисками, обеспечения качества и проведения комплексной проверки клиентов (CDD, EDD, KYC). Важным аспектом работы является соблюдение требований по борьбе с финансированием терроризма (CFT), санкционным ограничениям и антимонопольному контролю (AML). Также требуется опыт работы с негативной информацией о клиентах (adverse media) и автоматизацией процессов due diligence. Роль предполагает активное участие в обеспечении соответствия нормативным требованиям и поддержании высокого уровня комплаенса при онбординге новых торговцев.

Задачи: — Организация и сопровождение процессов KYC, онбординга и открытия счетов юридических лиц в российских и иностранных банках, брокерских компаниях и регистраторах; — Актуализация корпоративных данных и документов в финансовых организациях, где обслуживаются компании; — Подготовка и предоставление информации по запросам подразделений Compliance банков, брокеров и регистраторов; — Проведение комплексной проверки контрагентов и участников деловых отношений, включая зарубежные компании, банки, брокеров и агентов; — Ведение и систематизация информации о контрагентах, агентах, финансовых организациях и открытых корпоративных счетах в CRM-системе; — Участие в разработке и совершенствовании внутренних процедур KYC, онбординга и открытия счетов для новых продуктов и категорий контрагентов; — Контроль полноты и актуальности данных в CRM, а также документации, используемой в рамках KYC, онбординга и открытия счетов. Требования: — От 3 лет опыта в направлениях KYC, Client Onboarding и Compliance в банках, брокерских компаниях или финансовых организациях; — Практический опыт проведения KYC-проверок российских и иностранных юридических лиц; — Понимание принципов функционирования инфраструктуры российского фондового рынка; — Английский язык на свободном уровне — устная и письменная коммуникация; — Развитые коммуникативные навыки, доброжелательность и способность эффективно взаимодействовать в распределенной команде; — Умение работать в условиях высокой нагрузки, соблюдать сроки и самостоятельно определять приоритеты. Условия: — ДМС после прохождения испытательного срока; — Гибридный график 4 дня в офисе, один - удаленно; — Интересные и разнообразные проекты; — Возможность карьерного роста.

Задачи: — вести сложные расследования — оптимизировать правила мониторинга — создавать масштабируемые контроли по финансовым преступлениям Требования: — опыт в fraud prevention, AML, transaction monitoring — знание SQL — опыт работы с Visa, Mastercard, Elliptic, Chainalysis, Flagright, Unit21 — навыки работы с blockchain analytics и data visualization — понимание SAR и STR Условия: — гибридный формат работы — локации: Малайзия, Тайвань, Филиппины

Location: Taguig, National Capital Region Workplace: Hybrid We are looking for a detail-oriented Investigation Specialist to support anti-fraud operations and case handling. In this role, you will manage incoming cases, perform client callouts, validate data, and conduct initial investigations to ensure accuracy and proper case routing. You will also collaborate with investigation and forensic teams to support evidence collection and analysis, playing a key role in maintaining the integrity of our fraud detection and prevention processes. KEY RESPONSIBILITIES: - Manages cases received thru Shared Mailbox and Hotline. - Perform callouts according to the antifraud workflow. - Review client information before and during calls using the Bank’s system and other resources provided by the department. - Conduct Initial Investigation of Cases Triggered or received from other departments. - Communicate with clients or related parties with the main goal to proof correctness of data. - Check correctness of triggers and filter it to which department it should be sent to procced - Ensure that all data were gathered for the following End to End investigation. - Provides direct technical support to investigation, litigation, and forensic analyst to collect, preserves, process, analyze and interpret digital evidence from broad range of data available on open sources (social media, etc). REQUIREMENTS AND EXPECTATIONS - Bachelor’s Degree in Criminology or any related four year courses - Law enforcement/Military background preferred - At least 1-year experience in Investigation preferably in Financing, Banking and Security Industry prefered. - Proficient in Microsoft Applications (Excel, Word, Powerpoint) - Excellent written and verbal communications

Location: Taguig, National Capital Region Workplace: Hybrid About Salmon Salmon Bank (Rural Bank) Inc., the banking arm of Salmon Group Ltd., is a technology-driven challenger bank in the Philippines operating under a BSP license. We combine the trust of a licensed institution with the speed and convenience of a modern financial product. Work within regulated financial infrastructure, where product, risk, compliance, operations, technology, and customer experience are closely connected.   WHAT YOU’LL DO Regulatory monitoring and interpretation - Monitor and interpret BSP circulars, memoranda, the MORB and other issuances. - Prepare concise impact assessments covering requirements, affected units, implementation actions and deadlines. Regulatory advisory - Advise business and support units on regulatory requirements across deposits, lending, loan purchases, payments, electronic financial services, cards, treasury, branches, outsourcing and related-party transactions, as applicable to the Bank’s activities. Product and process design - Give guidance at the design stage so products and processes include the right requirements and controls. - Review proposed products, customer journeys, process changes, partnerships, contracts, marketing materials and customer disclosures. Identify compliance gaps, approval or notification requirements, and conditions to meet before launch. Submissions and supervisory engagement - Prepare or review regulatory submissions and responses. - Support examinations by consolidating information, drafting responses, preparing briefing materials and coordinating evidence requests. Policy and governance review - Review policies, procedures and governance documents against requirements, and help business units turn regulatory obligations into workable controls. Management and Board updates - Prepare regulatory updates and Compliance inputs for Management, the Audit and Compliance Committee and the Board. Coordination and records - Work with Risk, Legal, Finance, Operations, IT, Information Security, Data Privacy, AML Compliance and Compliance Testing to give consistent guidance, and maintain documented advice with supporting references. WHAT WE’RE LOOKING FOR - Bachelor’s degree in Accountancy, Finance, Business, Economics, Law or a related discipline - At least 5 years of experience in banking compliance, regulatory advisory, regulatory affairs, audit, risk or legal work, preferably including BSP-supervised institutions - Working knowledge of the MORB, BSP regulatory processes, corporate governance, financial consumer protection and other relevant regulations - Experience reviewing policies or products, interpreting regulations and coordinating responses to examination findings - Strong analytical judgment, clear business writing and attention to detail, with the ability to explain regulatory requirements in practical terms - Ability to manage competing deadlines, coordinate across functions, challenge constructively and handle confidential information with integrity - Advantage: experience with digital banking, outsourcing, credit operations or treasury. Relevant certifications or legal qualifications are desirable.

Location: Taguig, National Capital Region Workplace: Hybrid About Salmon Salmon Bank (Rural Bank) Inc., the banking arm of Salmon Group Ltd., is a technology-driven challenger bank in the Philippines operating under a BSP license. We combine the trust of a licensed institution with the speed and convenience of a modern financial product. Work within regulated financial infrastructure, where product, risk, compliance, operations, technology, and customer experience are closely connected. ABOUT THE ROLE Salmon is hiring a Regulatory Affairs Officer to support the Compliance function in monitoring the Bank's regulatory environment. You will track BSP circulars, AMLC advisories and other issuances, assess how they affect our products and operations, and help the business implement them. You will also draft submissions and responses for regulators, and support Compliance leadership in engaging with the BSP. WHAT YOU'LL DO Regulatory monitoring - Monitor BSP circulars, AMLC advisories and other relevant issuances, and follow forthcoming consultations and proposed rules. - Assess whether new issuances apply to the Bank's products, services and operations, and escalate significant developments to the Head of Regulatory Affairs. Submissions and applications - Assist with regulatory submissions, license amendment applications and other filings, for review and approval by the Head of Regulatory Affairs and other signatories. - Prepare responses to supervisory inquiries and examinations, working with business units and Compliance. - Keep organized records of submissions to, and correspondence from, regulators. Obligations register and deadlines - Maintain the regulatory obligations register and track compliance deadlines. Impact assessment and implementation - Coordinate with business units on implementing new regulatory requirements and follow up on open action items. - Monitor the Bank's committed BSP action plans, and review the evidence that each remediation item is complete. - Review customer-facing materials and disclosures for regulatory compliance. Regulator engagement support - Support Compliance leadership with documentation, logistics and follow-through for supervisory meetings and examinations. WHAT WE'RE LOOKING FOR - Bachelor's degree in Law, Business Administration, Finance, Accountancy or a related field - 2-3 years of experience in regulatory affairs, compliance, legal or a related banking control function (experience in a BSP-supervised institution, especially digital banking, is an advantage) - Working knowledge of the MORB, AMLC issuances and other BSP issuances for digital banking, or the ability to be trained in them - Strong drafting and written communication skills - Strong coordination and follow-through skills - Sound analytical skills, including the ability to assess the business impact of proposed regulations - Ability to meet the Bank's fit and proper standards for Officer-rank positions, including pre-employment screening

Задачи: — анализировать бизнес-процессы и выявлять риски; — разрабатывать и внедрять контрольные процедуры; — готовить для менеджмента результаты диагностики и рекомендации; — контролировать устранение замечаний по итогам аудита; — консультировать бизнес по внутреннему контролю и аудиту. Требования: — опыт во внутреннем контроле или аудите от 5 лет; — знание COSO, COBIT, ITIL, методологии аудита финансовой отчётности, бизнес-процессов и IT; — плюс — хорошее знание РСБУ и МСФО. Условия: — гибридный формат работы; — ДМС со стоматологией с первого дня; — компенсация питания; — корпоративное обучение и английский; — офис в двух минутах от метро Белорусская.

Задачи: — Руководство комплаенсом на уровне всей группы компаний — Управление выполнением регуляторных обязательств — Контроль по борьбе с отмыванием денег (AML) и финансовыми преступлениями Требования: — Опыт и знания в области CTF, управления рисками, финансовых преступлений, технологий комплаенса, регулирования, CRCM, санкций, AML, мониторинга транзакций, due diligence — Знание стандартов и сертификатов CCEP, MLRO, ACAMS — Понимание комплаенс-фреймворков и законодательства по ценным бумагам Условия: — Гибридный формат работы — Зарплата от $230,000 до $360,000 в год

Задачи: — развивать функцию международного комплаенс: AML, Sanctions, FATCA/CRS, Privacy; — контролировать KYC, транзакционный мониторинг и комплаенс-расследования; — работать с трансграничными расчётами и альтернативными платёжными решениями; — проводить экспертизу новых продуктов, включая цифровые финансовые инструменты; — управлять международной командой из 5 Compliance Officers. Требования: — опыт Compliance / AML/CFT от 5 лет, включая 1–2 года руководства; — знание 115-ФЗ, FATF и санкционного регулирования US / EU / UK; — английский от Upper-Intermediate; — плюсом будут CAMS / ACAMS / ICA, а также знание MiCA и регулирования виртуальных активов. Условия: — офис в центре Москвы + гибрид; — ДМС со стоматологией; — обучение; — сокращённая пятница.

Location: Paris, France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. ⭐️ THE RISK & INTERNAL CONTROL ROLE ⭐️ Alan's Corporate team brings together Risk, Internal Control, Legal, Compliance, Corporate Governance and Security around a shared mission: building the infrastructure that lets Alan operate at scale, safely and responsibly. Internal Control helps design, implement and monitor controls within the business so operations run in line with members' interests, the strategy, our objectives and the law. We are looking for a high-potential risk and internal control professional who can identify and manage risks, define and own control activities end-to-end, and grow into ownership of more complex control scopes over time. This is not a traditional, box-checking control role. We build solutions and act as genuine business partners on risks. This is an opportunity to be part of the next generation of risk professionals: developing automated controls, documentation and using AI to detect emerging risks early. ⭐️ YOUR MISSIONS ⭐️ - Risk Management - You will help strengthening our system for identifying and monitoring risks on an international scope - You will co-build the next generation of risk tooling - Internal Control - You will define and implement control frameworks on processes, leveraging Alan’s culture of transparency and distributed ownership, and pushing for reliability and scalability: AI and automation, smart processes - You will perform second-level reviews on high-risk areas - You will drive efforts to ensure proper controls documentation and communicability to third parties partners - You will support the management of audits from commercial partners and supervisors - Team growth - You will help expand risk management reflexes throughout the company, and assist teams such as Insurance, Operations, Security and Legal to design and implement action plans to mitigate our risks - You will create resources to raise awareness and empower the team for risk management, internal control and regulatory compliance; - You will support the identification and hiring of new talents for the team. ⭐️ IS IT WHAT YOU ARE LOOKING FOR? ⭐️ You may be a great fit if you have: - At least two years of experience in internal control or a risk function - in insurance, a Big Four, or a regulated / fast-growing environment - Fluent in both French and English - A solid understanding of Solvency II and domain expertise (e.g. insurance operations, reserving, underwriting, reporting frameworks) - Comfort with AI and automation tools to scale controls, as well as anticipation of how AI reshapes controls - A builder's mindset: you're excited to build something differentiated, you don't thrive solely on established processes - A business-partner attitude: you act as a true partner to product teams, helping solve their control issues and risks rather than acting only as a controller - A written-first and rigorous working style: you’re structured, precise and at ease with Alan's async communication culture As a plus: - Multi-jurisdiction exposure (France, Belgium, Spain, Canada/OSFI) - Exposure to the DORA framework - Exposure to HDS and ISO 27001 For this role, we are looking to hire within the C0 to C1 level range https://alan.com/en/careers/a/salary-equity. 🌍 HOW WE WORK Location: You must be legally eligible to work from France. Role will preferably be based in Paris. Remote work: We offer remote work flexibility, but we value in-person collaboration 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application! 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Role Description The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms. Key Responsibilities and Duties — Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts. — Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing. — Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial. — Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. — Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress. — Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. — Assume responsibility for the identification of technological risks and the formulation of control design proposals. — Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering. — Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company. — Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines. — Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment. — Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives. — Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working. — Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed. — Stay current with emerging cyber threats and security best practices in DevOps environments. Knowledge and Skills — Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4 — Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments — Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4 — Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4 — Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3 — Understanding of cybersecurity risks and data protection principles - L3 — Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus — Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools) — Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture — Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses — Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time — Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com Level of Education: Bachelor/Master Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years) Benefits & Perks — Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam. — Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide. — Be part of a truly international fast‑paced environment and performance‑driven culture. — Full relocation support for you and your family to move to Amsterdam. — We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years. — Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential. — Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits. — Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture. — Diverse and creative colleagues from every corner of the world. — Health, life, and disability insurance*. — Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave. — Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country). — Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit. — Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership. — On‑site meals, coffee, and snacks, including healthy and vegan options, daily*. — Benefits may vary slightly depending on location and contract type.