Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Senior Risk and Compliance Manager

ZipRecruiter
London
5 months ago
Applications closed

Related Jobs

View all jobs

Information Security and Compliance Manager

Security Compliance Manager

Cyber Security Risk Manager

Compliance Manager

Senior Structural Engineer

Chief Digital Officer

Job Description

Paynetics is a leading fintech company, founder of the Bulgarian Fintech Association. Grounded in payment services, with offices in Bulgaria and the UK, we have built a team of passionate and enthusiastic professionals, on a mission to change the world of payments.

We have launched the first mobile payment app in Bulgaria, the first utilities payment app in the UK, one of the fist automated loyalty solutions in the US and a game changing payment acceptance solution with patent pending.

We are seeking an experienced and dynamicSenior Risk and Compliance Managerat Paynetics UK. This role is critical in driving the development and management of our enterprise-wide risk program, covering operational, compliance, financial crime, financial, and strategic risks.

To excel in this role, you will bring:

  • Proven experiencein risk management within banking or payments.
  • Deep working knowledgeof risk management frameworks for FCA-regulated firms (experience with payments or e-money is a strong advantage).
  • Strong technical understandingof the regulatory landscape.
  • Asolutions-focused mindset, with the ability to balance accuracy and speed in execution.
  • A willingness toget hands dirty, delivering pragmatic, actionable outcomes.

What you'll do:

Develop Risk framework -this includes risk events, development of a framework for the timely identification and reporting of major operational and security incidents , the development and tracking of KRIs, migration of the risk assessments to a technical solution.

Risk assessments -Management and maturing of the business wide risk assessment. This includes:

  • Owning the risk assessment process and supporting risk owners in ensuring the assessment is accurate and updated in a timely manner .
  • Providing advice and guidance to risk owners on the materiality of the risks they have.
  • Providing monthly reporting to senior management and the risk committee on the risk profile of Paynetics UK.
  • Providing the risk committee and board with consumable information about key risks affecting the firm with pragmatic and clear information on any risk treatment options available
  • Ensuring emerging risks are recorded, assessed and allocated ownership accordingly

Governance -Acting as the secretary to the risk committee (and any sub-committees). This includes:

  • Compiling comprehensive committee packs, ensuring packs are sent out in a timely manner, ensuring any actions from previous meetings are updated, creating and distributing meeting minutes
  • Supporting with strengthening the Paynetics UK corporate governance program through clear, logistically feasible and proportionate recommendations to senior management

Outsourcing:

  • Conducting risk assessments for outsourced services, both initially and on an ongoing basis
  • Scoping and agreeing with MI to ensure effective oversight of outsourced activities
  • Ensuring MI for outsourced activities feeds into the relevant risk assessments and provides senior management with a clear view as to the risks posed
  • Working closely with the compliance and operations teams to ensure that where areas of risk are found, Paynetics is able to deploy quick and proportionate risk mitigation solutions
  • Proactive review of MI to identify any potential future areas of concern
  • The development, tracking and reporting of KRIs for outsourced services

Oversight:

  • Provide robust and pragmatic risk advice and sign-off in respect of several internal projects including operational resilience, DORA, data privacy and APP fraud
  • Production of risk assessments for key Paynetics projects, and handing over to the relevant project lead to maintain and report back on

Compliance:

  • Horizon scanning
  • Consumer Duty outcomes data analysis
  • Supporting with regulatory change initiatives
  • Supporting with the production of new departmental processes
  • Supporting with the development and approval of new product initiatives

Who you are:

  • Proven experience in a similar role
  • Numerate with excellent Excel skills, and the ability toinvestigate/manipulate/modeldata quickly, find trends and provide recommendations
  • Experience producing risk committee and board reporting including dashboards, heatmaps and risk summary reporting
  • Excellent communication and presentation abilities, including strong written and verbal skills and the ability to explain issues and decisions, as well as strategy, both internally and externally
  • The ability to multitask, adapt to an ever-changing landscape of deliverables, be able to navigate ambiguity, a deep sense of ownership and attention to detail are essential
  • Experience working with card schemes preferable

What do we offer:

  • Exciting job in a premium professional environment
  • Highly competitive remuneration
  • 25 days annual paid leave + 1 day for your birthday
  • Work in a growing team with excellent perspective for professional development
  • Remote location, with occasional travel to London and Sofia

If you thrive in fast-paced environments and are passionate about delivering innovative risk solutions, we want to hear from you!

#J-18808-Ljbffr

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.