Location: Ebene
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
Checkout.com http://Checkout.com is actively looking for a highly skilled and proactive Senior Associate, Third-Party Risk Management (TPRM) to join our growing global team.
In this role, you will be at the forefront of protecting our business by conducting thorough due diligence and risk assessments on our external suppliers
You will also work alongside a team of experienced TPRM Associates, reporting to the TPRM Manager, driving best practices, ensuring high-quality risk assessments, and spearheading strategic process improvements.
If you have a strong foundation in vendor risk, a deep understanding of information security, and a passion for continuous improvement in a fast-paced environment, we want to hear from you.
What You Will Be Doing
- Risk Assessments & Due Diligence: Conduct end-to-end third-party risk assessments, minimum due diligence, and control evaluations.
- Evidence Validation: Review and analyze vendor compliance documentation, including control reports, certifications and security policies to validate their cybersecurity and operational resilience postures.
- Gap Analysis & Remediation: Identify control gaps in vendor controls. Work directly with vendors to agree on appropriate remediation actions and track them to completion.
- Workflow & SLA Management: Manage a continuous pipeline of vendor assessments, ensuring that reviews are completed efficiently, accurately, and within agreed-upon service level expectations.
- Stakeholder Collaboration: Act as a key point of contact for internal business owners and Procurement, guiding them through the TPRM process and escalating complex risks to internal Subject Matter Experts (SMEs) when necessary.
- Process Improvement & AI Integration: Support the wider TPRM team in strategic initiatives, leveraging AI and automation tools to drive process improvements, execute system migrations, maintain data hygiene, and continuously enhance our risk management frameworks.
- Ad Hoc Initiatives: Take ownership of agile, ad hoc risk management projects as they arise, adapting quickly to business needs and delivering prompt, high-quality results.
About You
- Experience: 5+ years of proven experience in Third-Party Risk Management, IT Risk, IT Audit, or a closely related Information Security Governance role.
- Framework Knowledge: Strong working knowledge of global security and risk frameworks, including ISO standards and SOC reporting, alongside a strong foundation in Third-Party Risk Management (TPRM) methodologies, cybersecurity principles, data privacy regulations amongst others.
- Accountability & Time Management: Highly organized with a strong sense of ownership. You effectively shoulder responsibility for multiple concurrent workloads, manage your time seamlessly, and consistently deliver prompt results.
- Leadership Skills: A proactive self-starter with experience mentoring peers, managing complex workloads, and acting as an escalation point for junior team members.
- Communication: Excellent written and verbal communication skills. You excel at taking complex technical or compliance concepts and explaining them in plain, actionable language for business stakeholders.
- Problem Solver: Highly analytical with a track record of driving process standardization and adapting to evolving regulatory landscapes.
- AI & Technical Skills: Experience with, or a strong aptitude for, utilizing Artificial Intelligence (AI) and automation to optimize risk assessment workflows, streamline data analysis, and scale TPRM operations
- Work Environment: Ability to work independently and as part of a team, with flexibility to align working hours to support the UK time zone.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
ОфисseniorEbene; Work Environment: Ability to work independently and as part of a team, with flexibility to align working hours to support the UK time zone
Location: Metro Manila
Workplace: Hybrid
The Non-Financial Risk Officer supports the Non-Financial Risk Manager in executing the Bank's Non-Financial Risk (NFR) Management Framework. Operating as part of the Second Line of Defense, the role provides analytical support for the identification, assessment, monitoring, and reporting of operational, compliance, IT, reputational, and other non-financial risks across Salmon Bank's business units. The analyst works closely with First Line of Defense (1LOD) process owners and risk officers, and contributes to materials presented to the Risk Oversight Committee (ROC) and Senior Management.
KEY RESPONSIBILITIES
Risk Identification & Assessment
- Assist in conducting risk and control self-assessments (RCSA) for existing and new products, processes, and systems in coordination with 1LOD process owners.
- Maintain and update the Bank's risk register, ensuring accuracy of risk ratings, control effectiveness assessments, and residual risk exposures.
- Support the review of new product and process approvals by identifying and documenting key non-financial risks and corresponding controls prior to go-live.
- Assist in conducting risk assessments for outsourcing arrangements.
Monitoring & Reporting
- Track and monitor key risk indicators (KRIs), operational loss events, control exceptions, and near-misses across business units.
- Prepare periodic risk reports and dashboards for review by the Non-Financial Risk Manager, including materials for the Risk Oversight Committee (ROC).
- Monitor action plans arising from audit findings, regulatory examinations (BSP), and self-identified risk issues; escalate overdue or unresolved items to the NFR Manager.
- Support the production of trend analysis and thematic risk reporting to surface emerging risk patterns requiring management attention.
Business Partnering
- Serve as a risk resource for 1LOD business units, providing guidance on risk identification and control design during process changes or new initiatives.
- Coordinate with business units to collect risk data, validate control documentation, and support risk awareness activities.
- Participate in cross-functional working groups and project teams as the 2LOD risk representative.
Documentation & Governance
- Maintain risk management documentation, including risk policies, procedures, risk frameworks, and governance records.
- Assist in preparing materials for risk committees and governance forums, including ROC reports, management packs, and meeting minutes.
QUALIFICATIONS
Education
- Bachelor's degree in Business Administration, Finance, Accounting, Economics, Law, Information Technology, or a related field.
Experience
- Minimum 3 years of experience in risk management, internal audit, compliance, or a related function within a bank or financial institution.
- Exposure to BSP regulatory requirements and the Philippine banking regulatory environment is a plus.
- Experience supporting risk reporting for senior management or board-level committees is an advantage.
Knowledge
- Working knowledge of the BSP Manual of Regulations for Banks (MORB) and relevant BSP circulars on operational risk, IT risk, and outsourcing.
- Familiarity with the Data Privacy Act of 2012 (RA 10173) and NPC issuances as they apply to banking operations.
- Understanding of operational risk frameworks (e.g., RCSA, KRI, loss event management) and internal control concepts.
- Basic understanding of the Three Lines of Defense model and its application in financial institutions.
Skills
- Strong analytical and critical thinking skills; able to identify risk themes from large data sets or process documentation.
- Proficient in MS Office (Excel, Word, PowerPoint)
- Strong written and verbal communication skills; able to prepare clear reports for management and committee consumption.
- Detail-oriented with strong documentation habits and ability to manage multiple tasks under deadlines.
- Collaborative and able to build working relationships with diverse business unit stakeholders.
Location: Москва
Workplace: Гибридный
О компании
МТС — ведущий технологический оператор связи в России*. Мы развиваем телеком нового поколения: объединяя связь, цифровые и финансовые сервисы с возможностями ИИ, формируем новые стандарты пользовательского опыта.
МТС — лидер технологий**.
Обязанности
Управлением полным циклом инцидент-менеджмента: speak-up культура, управление каналами, работа с сообщениями, определение мандата, инициирование или участие в проверках и расследованиях, подготовка заключений и рекомендаций, эскалация, отчетность, непрерывное улучшение.
Управлять Единой горячей линией и функцией проведения внутренних проверок и расследований в части мандата подразделения комплаенс, включая операционное планирование и стратегия развития функции;
Контролировать планы, ход, сроки и результаты расследований; участвовать в ключевых интервью; согласовывать заключения, включая контроль за качеством (логика, причинно-следственные связи, доказанность фактов и обстоятельств, применимость рекомендаций, учёт ограничений и рисков);
Управлять командой: определять приоритеты, КПЭ, давать обратную связь, развивать сотрудников;
Проводить обучающие или коммуникационные кампании на темы, касающиеся функционала;
Обеспечивать работу ИТ-решений: Единой горячей линии и Системы кейс-менеджмента (СКМ), включая планирование их развития;
Готовить материалы для отчетности Департамента комплаенс на органы управления;
Обобщать практику, инициировать изменения процедур, участвовать в разработке комплаенс-документов, обучать и консультировать подразделения и дочерние общества.
Требования
Высшее юридическое или экономическое образование.
Не менее 8 лет в корпоративных расследованиях, антикоррупционном комплаенс или противодействии мошенничеству; опыт сложных и чувствительных расследований, включая нарушения топ-менеджмента; опыт применения инструментов e-discovery.
Не менее 5 лет руководства командой;
Преимущество: сертификаты ICA, CFE, CCEP-I, CIA, опыт сертификации на соответствие ISO 37001/37301; работа в крупной публичной группе компаний или аудиторско-консалтинговой фирме; опыт применения ИИ.
Знание антикоррупционного законодательства (применительно к деятельности публичной группы компаний), трудового и законодательства о персональных данных в части внутренних проверок; понимание деловой этики, конфликта интересов и комплаенс-контролей
Условия
программа ДМС с первого месяца работы - это 100% покрытие расходов в частных клиниках, включая стоматологию. Застраховать близких родственников можно со скидкой 50%. Для любителей путешествий - страховка в поездках за границу. А еще есть страхование жизни;
очное и онлайн-обучение в Корпоративном университете, у внешних провайдеров, если это полезно для работы, обмен опытом во внутренних профессиональных сообществах, а также доступ к онлайн-библиотеке в полезными книгами и периодикой;
оплачиваемые выходные на значимые события в жизни сотрудника;
материальная помощь в сложных жизненных ситуациях;
корпоративная мобильная связь + интернет, а так же единая подписка МТС Premium (онлайн кинотеатр KION, сервис МТС Music, МТС Строки и т.д.);
предложения от партнёров для путешествий, развлечений и занятий спортом;
возможность участия в волонтерских программах: мы организуем благотворительные ярмарки, образовательные проекты для детей, конкурсы социальных проектов и экологические проекты;
внутренняя спортивная программа «В движении»: забеги, марафоны, турниры по разным видам спорта, медитации и занятия на баланс.
Location: Москва
Workplace: Гибридный
О компании
Отдел комплаенс экспертизы в МТС — это центр компетенций в области антикоррупционного комплаенса и деловой этики. Команда занимается разработкой и внедрением системы комплаенс, которая поддерживает лидерство компании в цифровой отрасли. Мы активно улучшаем процессы и обучаем сотрудников, чтобы каждый понимал важность соблюдения Кодекса делового поведения и этики Группы МТС, и мог применять его в повседневной работе.
Ищем стажера, который готов начать карьеру в сфере антикоррупционного комплаенса и деловой этики и открыт к новым задачам, развитию и обучению. Специалисту предстоит участвовать в мониторинге законодательства, правоприменительной практики, разработке локальных актов и контрольных процедур, автоматизации процессов, подготовке отчетов, презентаций и заключений, в анализе сделок, а также организации обучения.
Обязанности
организовывать и сопровождать проекты и активности по развитию культуры деловой этики и комплаенс;
координировать организацию эфиров с топ-менеджментом компании;
участвовать в разработке и актуализации антикоррупционных локальных нормативных актов компании;
разрабатывать обучающие материалов и проводить тренинги для сотрудников;
готовить аналитические и отчетные материалы, заключения, в том числе с использованием Word, Excel, PowerPoint;
участвовать в автоматизации процессов, включая работу с искусственным интеллектом;
проводить мониторинг изменений законодательства и правоприменения;
участвовать в сопровождении сделок, мониторинге транзакций и оценке рисков.
Требования
ты – студент или выпускник профильного направления (юриспруденция, экономическая безопасность или смежные отрасли - экономика, финансы, менеджмент);
активно работаешь с искусственным интеллектом и нейросетями (например, можешь собрать своего агента);
умеешь составлять сводные таблицы, диаграммы, презентации; опыт работы с дашбордами будет плюсом;
знаком с принципами антикоррупционного комплаенс согласно законодательству РФ или готов изучать эту сферу;
умеешь анализировать нормативно-правовые акты и судебную практику;
можешь на уверенном уровне читать и общаться в деловой переписке на английском языке.
Условия
занятость 30-40 часов в неделю;
развитие в командах профессионалов и опытный наставник, готовый делиться опытом;
мобильная связь за счет компании;
подписка на онлайн-кинотеатр KION, сервис МТС Музыка, книжный сервис Строки от МТС, безлимитные мессенджеры и соцсети;
специальные предложения от партнеров и скидки от продуктов экосистемы МТС;
непрерывное развитие — доступ к курсам и вебинарам корпоративного университета и онлайн-библиотеке.
Location: Краснодар
Workplace: В офисе
О компании
МТС — ведущий технологический оператор связи в России*. Мы развиваем телеком нового поколения: объединяя связь, цифровые и финансовые сервисы с возможностями ИИ, формируем новые стандарты пользовательского опыта.
МТС — лидер технологий**.
Ищем руководителя направления экономической безопасности и противодействия коррупции.
Обязанности
проводить документальные проверки бизнес-процессов для выявления правонарушений в сфере экономической безопасности, включая выездные проверки и анализ на местах;
анализировать ситуации и выявлять системные проблемы, предоставлять рекомендаций и практическую помощь подразделениям в Южном и Кавказском федеральных округах;
проверять контрагентов на благонадежность и соответствие внутренним стандартам компании.
Требования
опыт службы в МВД / ФСБ / СК / ФСНП / ФТС / СБ коммерческой структуры / в области экономической безопасности и противодействия коррупции от 6 лет;
высшее образование в области экономики, юриспруденции или аналогичной сфере будет преимуществом;
навыки проведения аналитической работы и выявления правонарушений;
аналитический склад ума, обучаемость, энергичность, инициативность.
Условия
оформление в штат компании;
совокупный доход: оклад + премия по результатам выполнения KPI;
график 5/2 с 8.30 до 17.30, в пятницу сокращенный день до 16.15;
офисный формат: г. Краснодар, ул. Гимназическая, 61Г;
ДМС с первого месяца работы, включая стоматологию. А еще оплачиваем 50% стоимости полиса ДМС для родственников;
страхование от несчастных случаев с 1 месяца работы. Материальная помощь в сложных жизненных ситуациях;
консультация психологов и программа поддержки сотрудников;
отпуск 28 календарных дней + 3 дня за ненормированный рабочий день;
компенсация расходов на выбор сотрудника, например, на спорт, ипотеку или питание. Специальные предложения от партнеров и скидки от продуктов экосистемы МТС;
мобильная связь за счет компании и льготные тарифы для близких;
подписка на онлайн-кинотеатр KION, сервис МТС Музыка, книжный сервис Строки от МТС, безлимитные мессенджеры и соцсети;
собственный корпоративный университет, онлайн-библиотека и оплачиваемое внешнее обучения для карьерного развития;
развитие в командах профессионалов, которые готовы делиться опытом;
волонтерское движение, поддержку хобби и интересов сотрудников.
Location: Limassol, Cyprus
Workplace: hybrid
We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.
As Senior Operational Risk Analyst, you will be a core member of Capital.com's risk function, reporting to the Head of Risk Management. You will run the operational risk cycle across the Group's Cyprus-regulated investment firms: the risk register, the business-wide risk assessment, the RCSA, the operational risk event register, and relevant reporting. ICT and digital operational resilience under DORA sit alongside that work, with framework direction and regulatory sign-off set by the Head of Risk.
Responsibilities:
Operational Risk Framework and RCSA: Run the risk register, business-wide risk assessment and risk and control self-assessment cycles for each entity: collect and challenge first-line input, score likelihood and impact, assess control effectiveness, and carry each risk from inherent through to residual.
Operational Risk Event Management: Maintain the operational risk event register: capture and classify events against the risk taxonomy, complete root-cause analysis, identify repeat patterns, and track first-line remediation through to closure.
Operational Risk Reporting: Produce the monthly operational risk event report and the operational risk sections of the Risk Committee pack. Monitor key risk indicators against stated appetite and flag adverse trends before a threshold is reached.
ICARA Contribution: Provide the operational risk input to the ICARA for each entity: loss data, scenario analysis, and the operational risk element of the additional own funds and liquidity assessment.
Control Assessment and Testing: Test whether controls work rather than whether they exist: query platform and warehouse data directly to evidence risk positions, assess control performance, and substantiate event impact instead of relying on first-line summaries.
DORA and ICT Resilience: Support delivery of the DORA programme across each regulated entity: maintain the ICT risk management artefacts, prepare the material for the ICT risk workstream, and track remediation actions through to closure, under the direction of the Head of Risk.
ICT Incident Classification and Reporting: Prepare major-incident assessments against the DORA classification criteria.
CT Third-Party and Outsourcing Risk: Carry out vendor and outsourcing risk assessments, prepare critical-or-important-function assessments, and track concentration across ICT service providers.
Assurance Support: Prepare responses to internal audit findings, external readiness reviews and supervisory observations, assemble the supporting evidence, and track action dates with the owners.
Cross-Functional Coordination: Work closely with Operations, Technology, Information Security, Compliance, Legal and Finance so that risk outputs land in the governance process and escalate on the right trigger.
Requirements:
At least 3 years in risk management within a regulated financial services environment, with a material part of it in operational risk: investment firm, bank, payment institution, or a consulting or audit practice serving them.
Hands-on experience running operational risk framework cycles, including the risk register, business-wide risk assessment and RCSA, with likelihood and impact scoring, control effectiveness assessment and the inherent-to-residual step.
Experience managing an operational risk event register: capture, classification against a taxonomy, root-cause analysis, and remediation tracking with first-line owners.
Experience producing operational risk reporting and governance deliverables that reach a committee, a board or a supervisor, including key risk indicators measured against stated appetite, and readiness to own them as you grow into the role.
Working knowledge of DORA (Regulation (EU) 2022/2554), with exposure to at least one area: ICT risk management artefacts, incident classification and reporting, ICT third-party risk and the register of information, or resilience testing.
An organised approach to tracking regulatory developments across CySEC, ESMA and the EBA, and the ability to set out what a new rule means for the firm.
A degree in a numerate discipline: economics, finance, mathematics, engineering or similar. CySEC Advanced certification, or willingness to obtain it, is an advantage, as is an operational risk, operational resilience or information security certification.
What you will get in return:
• Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
• Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
• Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
• Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team.
• Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!
• Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!
• Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.
Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.
Location: London
At Upvest, we are on a mission to make investing as easy as spending money. Upvest empowers businesses to offer a wide range of investment products and the best experience in the field of capital market investment and retirement planning. Upvest’s Investment API is easy to integrate so that fintechs and financial institutions can save resources and fully focus on their core business.
We are proud to partner with Europe’s leading Fintechs and financial institutions such as DKB, Revolut, N26 and Raisin. Founded in 2017 by Martin Kassing, Upvest now brings together over 270 talented professionals from more than 70 nationalities. Upvest is backed by €280M in total funding from world-class investors, including BlackRock, Tencent, Sapphire Ventures, and Bessemer Venture Partners, Earlybird, Notion Capital, and Motive. Our latest €105M funding round in March 2026 - led by Sapphire and Tencent - serves as a massive catalyst for our growth, allowing us to offer premier investment experience.
ABOUT THE ROLE:
As the CASS Oversight Manager, you are responsible for ensuring that client money and custody assets held by Upvest Securities are protected, segregated and accounted for in full compliance with the FCA’s Client Assets Sourcebook (CASS).
You will act as the primary day-to-day authority on CASS, bridging the gap between complex regulatory requirements, our operational processes, our client’s needs and our scalable investment API. You will work closely with Product, Engineering, Compliance, Client and Operations teams to ensure our client asset framework remains robust, evidenced and audit-ready, enabling Upvest to scale its financial infrastructure to millions of end-users while maintaining the highest levels of integrity and trust with regulators, clients, and partners.
WHAT YOU’LL DO:
- Own the CASS oversight framework: Maintain and continuously improve Upvest's CASS risk assessment, controls matrix, policies and procedures across CASS 6, 7, 8, 9 and 10, providing clear guidance to the business on what is and isn't permitted.
- Work with our B2B clients, sales and client impact teams to actively shape solutions and provide advice that enables Upvest to support engaging and accessible investing for millions of end users in a CASS compliant way.
- Oversee reconciliations and client money calculations: Oversee daily client money calculations and internal and external reconciliations of client money and custody assets, ensuring breaks are investigated promptly, shortfalls are funded and root causes are addressed.
- Manage breaches and regulatory reporting: Maintain the CASS breach register, assess materiality, drive remediation and support FCA notifications where required. Own the monthly CMAR submission and act as the primary contact for the annual CASS audit, closing out findings to completion.
- Keep the CASS Resolution Pack live: Ensure the resolution pack is complete, current and retrievable within regulatory timeframes, and that it is updated whenever banks, custodians, key vendors or critical staff change.
- Embed CASS into how we build: Partner with Product and Engineering teams to assess the client asset impact of new products, features and system changes, and to ensure our ledgers, payment flows and custody integrations do what the rules require by design.
- Enhance governance and culture: Produce clear CASS MI for the board and risk committees, deliver CASS training across the organisation, and track FCA developments to assess their impact on Upvest.
- Manage external relationships: Support due diligence and periodic reviews of banks, custodians, and maintain acknowledgement letters and mandate registers in the prescribed form. Feed into TISA and other appropriate forums to gain further industry insights.
WHAT YOU BRING:
- Deep CASS Expertise: Thorough working knowledge of CASS 6, 7, 8, 9 and 10, including client money calculations, reconciliation methods, acknowledgement letters, resolution pack requirements and the SMCR context in which the SMF18 operates.
- Hands-on Client Asset Experience: Several years in a CASS operations, oversight or audit role in practice or at a broker, platform, custodian or wealth manager, with practical experience of breach handling, CMAR reporting and CASS audits.
- Regulatory Analysis Skills: Proven experience in interpreting FCA rules and guidance and translating them into clear actionable operational procedures and controls.
- Stakeholder Management: Strong communication of regulatory requirements to internal and external stakeholders, including engineering and product teams, external auditors and third-party custodians and banks.
- Self-Starter Mentality: A highly organised approach with the ability to work independently, prioritise appropriately, and thrive under pressure, particularly around reporting and audit deadlines.
IT’S GREAT IF YOU HAVE:
- Qualifications: Relevant industry certifications such as CISI Client Assets Specialist qualification, an accounting or audit background, or equivalent professional certification in a related discipline.
HOW WE UPVEST IN YOU:
- Best-in-class AI tools: Every Upvenger has €20,000 per year to spend on the best AI tools available — so you're always working with the most powerful models and tooling on the market.
- Impact-driven work: We’re building the infrastructure that will power the future of investing in Europe. It’s complex, ambitious, and meaningful. You’ll work with modern technologies and create something entirely new. No legacy systems, no limits.
- Wellbeing: Recharge with 30 days of annual leave and maintain a healthy lifestyle with sports benefits. Access confidential professional coaching and enjoy the flexibility to work remotely abroad for up to 183 days a year. Recharge with UpRest, a one-month fully paid sabbatical after every 4 years of working at Upvest.
- Development: Growth is in our DNA. Each Upvenger has access to a personal development budget and the freedom to decide how to use it.
- Compensation and equity: We believe that all Upvengers contribute to our success and deserve a competitive, above-market salary and a participation in our employee equity program.
- Team celebrations: Participate in company-wide events, such as UpFest, dinners, offsites and our Holiday party, to connect with colleagues and celebrate our achievements.
- Inclusion: We’re committed to a culture where everyone belongs and thrives. Our Employee Resources Groups foster inclusion and connection, like Upfem for our female Upvengers, or UpVergent supporting neurodivergent Upvengers and allies.
OUR VALUES:
- Make it easy for others. We simplify the complex and act with the best intentions.
- Own the outcome. We are proactive, fast and confident to get the job done, valuing progress over perfection.
- Rise to the challenge. We aim high and push the boundaries. We stay curious, learn and celebrate our wins together.
- Tell the story. We start with the Why to align on purpose. We are transparent and share knowledge to empower and inspire others.
Upvest is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Location: Remote Roles - APAC
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Team
Regulatory Change sits within OKX's central Compliance function, with a global mandate covering how OKX anticipates, shapes, and responds to regulatory developments across all markets in which we operate. The team acts as a strategic partner to the business and Compliance teams, translating the regulatory landscape into clear guidance and action.
About the Opportunity
We are looking for a Head of Regulatory Change & Policy to own and drive the regulatory change agenda globally. This person will bring vision, strategic judgment, as well as the ability to execute, translating a complex, fast-moving regulatory landscape into a clear strategy that protects and enables the business.
You will need to operate across multiple dimensions simultaneously: understanding our product landscape deeply to assess regulatory impact, engaging credibly with regulators and industry bodies, and building internal alignment across legal, risk, and local compliance teams. You will also build and lead a team, establishing the processes and judgment that junior team members will execute against over time.
This position calls for a seasoned regulatory change leader with a demonstrated track record of owning a comparable mandate — prior experience in a similar role in a complex matrix organization is essential.
What You’ll Be Doing
Regulatory change: own Compliance’s regulatory change log, assess the implications and business impact of evolving regulatory requirements on OKX's product landscape and partner with the Change Management team to ensure regulatory change is translated into business-ready action and the relevant policy framework is put into place (assign policy owner, deadline and feed content into Compliance obligation register)
In coordination with internal Risk and Compliance stakeholders manage, oversee and maintain a global regulatory obligations mapping and horizon scanning capability
Support local Compliance Teams, where required, with building and maintaining relationships with regulators and policymakers and in representing OKX in industry consultations and regulatory engagement efforts to ensure aligned positions across jurisdictions
Build out the Regulatory Change function, with the potential to add one compliance analyst within the first six months, subject to the function demonstrating measurable output and business value.
Set the operating model, priorities, and quality bar for the function
Coach and develop team members as the function scales from strategy design into steady-state execution
Build strong, trusted working relationships with Legal, Risk, and local Compliance teams across regions
What We Look For In You
Significant experience (at least 10+ years) in regulatory change, regulatory affairs, or a comparable senior compliance/ policy role, ideally within crypto, fintech, or another heavily regulated financial sector
Demonstrated experience building or significantly reshaping a regulatory change function, not just operating within an existing one
Global exposure to crypto-specific regulation, with working knowledge of multiple regulatory regimes
Track record of influencing senior internal stakeholders (Legal, Risk, Compliance) without formal authority over them
Experience building and leading a team, including hiring and developing junior talent
Excellent written and verbal communication skills; comfortable operating at executive level internally and externally
Pragmatic, execution-oriented mindset — able to move from strategic vision to operational detail
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Almaty, Kazakhstan
Workplace: hybrid
We’re looking for an Internal Investigations Manager to join our team and take the lead on fraud investigations across our business.
You’ll run investigations end to end — from gathering evidence and interviewing witnesses to analysing what happened and presenting your findings. You’ll also look beyond individual cases to spot patterns, uncover control gaps, and help make our processes stronger.
If you’re naturally curious, highly objective, comfortable handling sensitive information, and not afraid to ask the uncomfortable questions — we’d love to hear from you.
Key Responsibilities
Manage end-to-end fraud investigations across countries, ensuring timely closure
Gather, preserve, and document digital and operational evidence in line with chain-of-custody best practices
Conduct structured interviews (in-person or video) with whistleblowers, witnesses, and internal stakeholders.
Prepare clear, well-structured investigation reports and case summaries for internal stakeholders
Identify control gaps or process weaknesses through investigations and recommend remediation actions
Identify systemic fraud patterns and conduct root cause analysis on recurring case types, translating findings into actionable recommendation
Monitor implementation of controls across business units
Participate in cross-team collaboration and knowledge-sharing sessions
Contribute to the development and continuous improvement of investigation procedures, templates, and methodologies — including responsible use of AI for efficiency
Skills, Knowledge & Expertise
Bachelor’s degree.
7+ years of investigation experience
, including independently managing investigations end to end, from intake through evidence collection, interviews, analysis, and formal reporting.
Professional proficiency in
English
Strong skills in
evidence handling and chain of custody, structured interviewing and statement-taking, OSINT, link analysis and relationship mapping
.
Experience with
NUIX, Relativity, digital evidence handling, and data analytics
.
Big 4 experience is preferred.
Certified Fraud Examiner (CFE) certification — nice to have.
Strong analytical and structured thinking skills, with the ability to make sense of complex, incomplete, or contradictory information.
High standards of
integrity, objectivity, discretion, and confidentiality
.
Strong
emotional intelligence and communication skills
, with the ability to handle sensitive interviews and communicate difficult findings to senior stakeholders.
Professional courage and attention to detail
, with the ability to stand behind conclusions under pressure.
A drive to go beyond individual investigations by identifying
systemic fraud patterns, control gaps, and root causes
, and turning findings into actionable improvements.
Why join us
Help us challenge injustice by creating fair choices for millions of people across 47 countries
Develop your professional skills with access to mentoring, career consulting, and learning programs
Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program
Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects
Work alongside people who take initiative, speak openly, and challenge themselves to grow
Improve your language skills through co-financed courses and internal speaking clubs
Final benefits may vary depending on the location.
Location: Limassol, Cyprus
Workplace: hybrid
We’re looking for an Internal Investigations Manager to join our team and take the lead on fraud investigations across our business.
You’ll run investigations end to end — from gathering evidence and interviewing witnesses to analysing what happened and presenting your findings. You’ll also look beyond individual cases to spot patterns, uncover control gaps, and help make our processes stronger.
If you’re naturally curious, highly objective, comfortable handling sensitive information, and not afraid to ask the uncomfortable questions — we’d love to hear from you.
Key Responsibilities
Manage end-to-end fraud investigations across countries, ensuring timely closure
Gather, preserve, and document digital and operational evidence in line with chain-of-custody best practices
Conduct structured interviews (in-person or video) with whistleblowers, witnesses, and internal stakeholders.
Prepare clear, well-structured investigation reports and case summaries for internal stakeholders
Identify control gaps or process weaknesses through investigations and recommend remediation actions
Identify systemic fraud patterns and conduct root cause analysis on recurring case types, translating findings into actionable recommendation
Monitor implementation of controls across business units
Participate in cross-team collaboration and knowledge-sharing sessions
Contribute to the development and continuous improvement of investigation procedures, templates, and methodologies — including responsible use of AI for efficiency
Skills, Knowledge & Expertise
Bachelor’s degree.
7+ years of investigation experience
, including independently managing investigations end to end, from intake through evidence collection, interviews, analysis, and formal reporting.
Professional proficiency in
Russian and English — mandatory.
Strong skills in
evidence handling and chain of custody, structured interviewing and statement-taking, OSINT, link analysis and relationship mapping
.
Experience with
NUIX, Relativity, digital evidence handling, and data analytics
.
Big 4 experience is preferred.
Certified Fraud Examiner (CFE) certification — nice to have.
Strong analytical and structured thinking skills, with the ability to make sense of complex, incomplete, or contradictory information.
High standards of
integrity, objectivity, discretion, and confidentiality
.
Strong
emotional intelligence and communication skills
, with the ability to handle sensitive interviews and communicate difficult findings to senior stakeholders.
Professional courage and attention to detail
, with the ability to stand behind conclusions under pressure.
A drive to go beyond individual investigations by identifying
systemic fraud patterns, control gaps, and root causes
, and turning findings into actionable improvements.
Why join us
Help us challenge injustice by creating fair choices for millions of people across 47 countries
Develop your professional skills with access to mentoring, career consulting, and learning programs
Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program
Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects
Work alongside people who take initiative, speak openly, and challenge themselves to grow
Improve your language skills through co-financed courses and internal speaking clubs
Annual salary from 58 000 EUR gross
Final benefits may vary depending on the location.
Location: Remote (Canada)
Workplace: Remote
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
ABOUT THE ROLE
Ramp is seeking an experienced Money Laundering Reporting Officer (MLRO) for its FINTRAC-registered Money Services Business entity. Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and its Regulations, this role is the legally-appointed compliance officer responsible for implementing RBCC's AML/ATF compliance program and for reporting suspicious transactions to FINTRAC. This is a standalone, high-accountability compliance leadership role: you will own Ramp Canada’s AML program end to end, act as the primary point of contact for FINTRAC and Ramp’s financial partners in the region, and serve as the gatekeeper protecting Ramp's Canadian entity from financial crime.
WHAT YOU'LL DO
- Serve as RBCC's MLRO, with authority over AML/ATF program design, execution, and effectiveness
- Act as primary regulatory contact with FINTRAC, managing supervisory correspondence, reporting, and exam readiness
- Make STR (Suspicious Transaction Report) filing determinations and file STRs
- Run day-to-day transaction monitoring and sanctions screening triage and investigation for the Canadian book
- -Own and maintain RBCC's AML/ATF risk assessment, refreshing it as products, geography, and risk profile evolve (including Quebec's onboarding)
- Develop, document, and deliver RBCC's ongoing compliance training program
- Define and stand up the operational workstreams for Canada, including case types, SLAs, escalation paths, tooling.
- Negotiate and clarify AML/compliance requirements directly with BMO (our Canadian banking partner) and other partners as new products and use cases come online
- Partner with Ramp's broader Compliance, Legal, and Regulatory Affairs teams (US) on cross-border projects and Canada's continued expansion
- Partner with the Global team and the Engineering team to identify areas of opportunity for automation, and operational efficiency and lead AI-driven initiatives.
WHAT YOU NEED
- 8+ years of financial services experience in compliance, AML, or related regulatory advisory roles, preferably in fintech or at an MSB
- Deep working knowledge of FINTRAC's supervisory expectations and regulations
- Direct experience interfacing with regulators and bank partners
- AI Fluency and demonstrated experience leveraging AI to build and scale AML programs
- Comfort operating as a standalone compliance lead with independent judgment on filing/escalation decisions
- Experience building an AML program from a nascent/early stage, not only maintaining an established one
- Fintech or payments domain experience (card issuing, corporate expense, high-velocity digital transaction monitoring) strongly preferred over traditional retail-branch compliance background
NICE-TO-HAVES
- Fluency in French
- Experience supporting an MSB registration/licensing process (e.g., provincial registrations such as Quebec)
- Prior cross-border/group compliance structure experience
- Data analysis skills
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: Cairo, Egypt
Workplace: onsite
About Us:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the Role:
The role supports the Enterprise Risk Management (ERM) function by keeping its core processes running to a reliable cycle — risk and incident records, policy administration, new product approval coordination and the reporting calendar — so that the risk information reaching senior management and committees is complete, accurate and on time. The role works closely with the ERM Manager and first-line stakeholders across the business.
Key Responsibilities
Support the quarterly risk reporting cycle, including collection and validation of metrics, pack production and committee materials.
Maintain risk registers, incident records and action trackers, ensuring entries are complete, current and supported by evidence.
Administer the policy programme — tracking review and approval status, formatting, version control and the governance calendar.
Support the risk and control self-assessment cycle — scheduling checks, chasing evidence, and populating workpapers and trackers.
Support the maintenance of the risk appetite framework and key risk indicators, including data sourcing and validation with metric owners.
Support ERM training and awareness activity, including delivery logistics, materials and completion records.
Work closely with first-line stakeholders to collect, chase and quality-check risk information, escalating gaps and delays promptly.
Support internal audit and regulatory requests by preparing documentation and audit-ready evidence.
Support ERM governance and tooling, including use and administration of GRC tools and maintenance of documentation.
Skills, Knowledge & Expertise
2–4 years' experience in risk, GRC, compliance, audit support or a related operational role within Financial Services, FinTech, Payments or another regulated environment.
Working knowledge of risk registers, risk reporting and control documentation, with the ability to apply concepts pragmatically.
Strong organisational skills and attention to detail, with the ability to run several recurring cycles in parallel and keep each to deadline.
Confident coordinating across functions and seniority levels, including remotely, and comfortable chasing stakeholders for information.
Excellent written and verbal communication skills in English, including experience preparing clear risk reports and presentations.
Proficiency in Excel and PowerPoint; hands-on experience using or supporting GRC tools a strong advantage.
Job Benefits
2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment.
Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically.
Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage.
Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively.
Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.
Location: Dubai, UAE
Workplace: onsite
About Us:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the Role:
The role supports and independently delivers key elements of the business continuity and operational resilience programme across Tabby's UAE entities, helping the business understand which services must keep running, how long they can be disrupted before customers are harmed, and whether the firm could recover within that time. The role works closely with first-line owners across the business and supports the firm's response to regulatory expectations on operational resilience.
Key Responsibilities
Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework.
Run the business impact analysis cycle with departments — gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly.
Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management.
Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable.
Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions.
Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies.
Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions.
Support third-party and technology dependency work where it affects the resilience of critical operations.
Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions.
Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience.
Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence.
Skills, Knowledge & Expertise
2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment.
Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically.
Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage.
Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively.
Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.
Job Benefits
A working environment that gives you autonomy and responsibility from day one.
You should be comfortable with the idea that the quality of your work will influence the shape of your career.
Participation in the company’s employee stock options program.
Health Insurance
Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!
Location: Riyadh, KSA
Workplace: onsite
BNPL businesses don't run on a single core system — they run on a chain of vendors: KYC providers doing identity
checks in milliseconds, bureau data feeding underwriting decisions, processors moving money at checkout, and
collections agencies chasing missed payments on our behalf. When any link in that chain fails, it isn't an internal
inconvenience — it's a customer who can't check out, a credit decision made on bad data, or a regulator asking why
a critical service went down with no warning.
As Vendor Risk Manager, you will own our third-party risk program end to end, from the first due diligence
questionnaire to the day a vendor is offboarded. You will be the person who can tell leadership, in plain terms,
which vendors carry the most risk and why, and you will make sure vendor failures never become customer failures.
Key Responsibilities
Due Diligence & Onboarding
Run due diligence on new vendors before contracts are signed, including financial health checks, SOC 2 / ISO 27001 review, breach history, and subprocessor mapping.
Issue a clear risk rating for every prospective vendor, with conditions attached rather than a simple pass or
fail, covering KYC, identity verification, fraud detection, credit bureau, payment processing, card issuing,
banking, and collections partners.
Sit inside the contracting process with Legal and Procurement to secure the terms that matter: audit rights,
breach notification windows, data localization commitments, exit assistance clauses, and SLAs tied to real penalties.
Risk Assessment & Ongoing Monitoring
Own vendor risk assessments across our active third-party portfolio, prioritizing critical and high-risk vendors for annual deep-dive reviews.
Build and run tiered monitoring cadences — quarterly for critical vendors such as KYC, payment processing, and banking partners, annual for the rest — tracking control drift, subprocessor changes, and
adverse media.
Maintain the concentration risk and critical-vendor register, and be ready to explain single points of failure, such as one bureau covering the majority of underwriting volume, and what the contingency plan actually
is.
Cross-Functional Partnership
Work with Product before new vendor integrations go live — you're in the room when a new checkout partner or fraud model vendor is being evaluated, not brought in after the contract is signed.
• Prepare vendor risk reporting for the Risk Committee and Board, translating control gaps and incident
trends into decisions leadership can act on.
Offboarding & Exit Management
Manage the offboarding process for exited vendors, confirming data deletion, access revocation, and transition continuity for anything customer-facing.
Ensure regulatory and contractual exit obligations are met and documented, particularly for vendors
classified as critical or important.
Skills, Knowledge & Expertise
3–4 years in third-party risk management, vendor risk, or operational risk, ideally at a payments company, lender, bank, or fintech where vendor failure has direct customer or regulatory consequences.
Working knowledge of NIST CSF, ISO 27001, SOC 2, and standardized assessment tools like SIG or
CAIQ — you know how to read a SOC 2 report and spot what's missing, not just file it away.
Familiarity with the regulatory landscape vendors sit inside: consumer credit rules, data privacy obligations
(GDPR/CCPA depending on footprint), PCI-DSS for anything touching card data, and
outsourcing/operational resilience expectations for critical third parties.
Comfort negotiating directly with vendors — you've pushed back on a processor's standard MSA, gotten a
fraud vendor to commit to a real SLA, and know when “our legal team will follow up” means the deal
needs to walk.
Ability to translate risk findings for people who don't think in risk terms, including explaining to a
commercial lead why a cheaper KYC vendor isn't worth the onboarding delay it will cause six months later.
Strong analytical skills with the ability to interpret vendor performance and control data to support
operational decisions.
Excellent communication and interpersonal skills, with the ability to interact effectively across all levels of
the organization.
Full professional proficiency in English required; Arabic is a plus.
Nice to have:
Direct BNPL or consumer credit experience — you've worked with bureau data, alternative credit scoring
vendors, or collections agencies specifically.
Hands-on experience with a GRC platform such as OneTrust, ProcessUnity, or Archer for assessment
workflows and vendor inventory.
CTPRP, CRISC, CISA, or CISM certification.
Location: Сыктывкар
Команда ПАО Сбер в г. Сыктывкар приглашает на работу специалиста по экономической безопасности. На 50% занятости, 4 рабочих часа в день. Мы предлагаем вам приобрести уникальный опыт в сфере экономической безопасности в крупном коммерческом банке.
Обязанности
### **Основный задачи:**
* мониторинг заемщиков ЮЛ и ИП на предмет выявления критериев проблемности, в целях принятия своевременных мер для
* предотвращения и митигации потенциальных рисков
* подготовка и направление в правоохранительные органы заявлений о возбуждении уголовных дел в отношении менеджмента предприятий должников, должников ФЛ, а также их дальнейшее сопровождение
* взаимодействие с правоохранительными, контролирующими и другими государственными органами, подразделениями ПАО Сбербанк, службами безопасности иных коммерческих банков и организаций
* взаимодействие с правоохранительными органами при проведении следственных действий в подразделениях Банка
* исполнение запросов правоохранительных, контролирующих и иных внешних организаций
* участие в мероприятиях, направленных на снижение уровня проблемной, просроченной и дебиторской задолженности
* сбор, накопление, анализ и автоматизированная обработка информации по вопросам обеспечения экономической безопасности банка, ведение аналитического учета проблемной и просроченной ссудной задолженности ЮЛ и ИП, формирование отчетов
* проведение мероприятий по противодействию мошенничеству в отношении клиентов Банка.
Требования
### **Нам необходимы:**
* высшее образование – юридическое (желательно) или экономическое
* опыт работы в правоохранительных органах по направлению борьбы с экономическими преступлениями
* понимание законодательства РФ, процедур взаимодействия с правоохранительными и контролирующими органами
* навыки системного мониторинга и анализа финансового состояния заёмщиков (ЮЛ и ИП), выявления признаков проблемности и оценки рисков
* уверенное владение инструментами сбора, анализа и автоматизированной обработки информации, опыт ведения аналитического учёта и формирования отчётности по проблемной задолженности
* развитые коммуникативные навыки, стрессоустойчивость и способность эффективно вести переговоры при взаимодействии с внешними организациями, госорганами и внутренними службами банка.
Условия
### **Мы предлагаем:**
* трудоустройство согласно ТК РФ
* стабильный оклад - указан с учетом 50% занятости
* рабочее место находится по адресуг г.Сыктывкар, ул Морозова, 89
* уникальная система онлайн обучения Сбера для карьерного развития и роста
* расширенный ДМС и льготное страхование для семьи
* подписка Прайм с возможностью совместного использования на трёх близких
* вознаграждение за рекомендацию друзей в команду Сбера
* гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ
* корпоративная пенсионная программа.
Location: Москва
В Отдел оценки рисков и урегулирования убытков ищем эксперта-универсала, способного в одном лице закрыть несколько ключевых функций страхового брокера.
Обязанности
* участие и проведение осмотров объектов клиентов в различных отраслях (промышленность, коммерческая недвижимость, логистика, энергетика и др.)
* идентификация и оценка страховых рисков, определение вероятности и потенциального ущерба (подготовка отчетов об оценке рисков и рекомендаций по их снижению)
* разработка методологий оценки рисков и риск- моделей (описание логик, входных и выходных параметров и пр.)
* консультирование клиентов по вопросам управления рисками, продуктов страхового брокера и страхованию в целом
* проведение презентаций и обучающих семинаров, участие в экспертных рабочих группах
* кросс-функциональное взаимодействие: риск-инженеры, IT, андеррайтеры, юристы, проектные и продуктовые менеджеры, клиенты Брокера.
Требования
* высшее образование: экономическое, техническое, юридическое
* опыт работы в страховании или риск-менеджменте – не менее 3 лет
* практический опыт в риск-инжиниринге (проведение осмотров, оценка рисков, митигация)
* опыт разработки методологий/моделей оценки рисков
* навыки бизнес-анализа: описание требований, ТЗ, взаимодействие с IT
* знание страхового законодательства РФ, практики страхового рынка
* опыт проведения осмотров, технических аудитов систем пожарной безопасности: автоматическое пожаротушение, автоматическая система пожарной сигнализации, насосные станции пожаротушения и т.д.
* опыт использования ИИ-инструментов.
Условия
* официальное трудоустройство по ТК РФ
* льготные ипотечные условия кредитования
* подписка Прайм с возможностью совместного использования на трёх близких
* ДМС с первого дня и скидки на страхование для близких
* корпоративная пенсионная программа
* детский отдых и подарки за счет Компании
* обучение за счет Компании: онлайн курсы, неограниченный доступ к библиотеке и обучение на базе Корпоративного университета, тренинги, митапы и возможность получить новую квалификацию
* скидки на отдых в курортном комплексе «Mriya Resort & SPA» в Ялте.
Location: Makkah, Saudi Arabia; Dubai, United Arab Emirates; New Delhi, India; Cairo, Egypt
Job Summary
We are looking for a Governance Senior Specialist with 3–6 years of experience in governance framework development and implementation. The ideal candidate should have experience with governance structures, decision rights, policies and procedures, committee governance, monitoring, reporting, and action tracking, supported by Microsoft Power BI reporting.
Experience:
3–6 years
Key Responsibilities
Develop and implement governance frameworks.
Establish and maintain governance structures and decision rights.
Support policy and procedure governance.
Support committee-level governance activities.
Monitor and report governance activities.
Track actions and decisions.
Maintain governance documentation.
Engage with stakeholders and prepare dashboards/reports.
Requirements
Relevant Expertise
Governance Framework Development
Governance Structures & Decision Rights
Policy & Procedure Governance
Committee Governance
Governance Monitoring & Reporting
Action & Decision Tracking
Documentation
Microsoft Power BI
Stakeholder Engagement
Preferred Certifications
GRCP, CIA, or other relevant Governance/GRC certification.
seniorMakkah, Saudi Arabia; Dubai, United Arab Emirates; New Delhi, India; Cairo, Egypt
ГибридMetro Manila
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.