Risk Officer – Remote-First

EPI Company; Madrid; Remote; EUR 65,000 - 85,000; Part time

Job summary

A technology-driven financial services provider is seeking a Risk Officer for a remote-first position based in Madrid. The role requires at least 5 years of experience in risk management or internal control, ideally in the payments, banking, or fintech sectors. Key responsibilities include enhancing the risk governance framework, monitoring risk indicators, and updating the risk matrix. Applicants should be fluent in English, with relevant certifications considered an asset. This position promotes an inclusive work environment and offers a dynamic opportunity to lead risk initiatives across Europe.

Qualifications

• At least 5 years of experience in Risk Management or Internal Control.
• Proven ability to operate autonomously in a regulated European environment.
• Prior experience in governance frameworks or cross-functional risk initiatives.

Responsibilities

• Enhance the existing EPI OPS Risk Governance Framework.
• Strengthen risk monitoring by reviewing Key Risk Indicators.
• Update the EPI Operations BV risk matrix and lead assessments.

Skills

Risk Management

Internal Control

Autonomy

Communication

Collaboration

Education

Relevant certifications such as CISA, CRISC, or ISO 27001

Job description

Risk Officer – Remote‑First

Join to apply for the Risk Officer – Remote‑First role at EPI Company. Remote‑first and based in Madrid, Spain.

About the Company

In today’s digital world, payments still feel outdated: random delays and confusing rules make it harder than it should be to pay and get paid. The European Payments Initiative (EPI) is here to change all that, forever. With Wero, our digital wallet, we make sending and receiving money simple, seamless and secure across France, Belgium and Germany, with more countries and omnichannel solutions coming soon. Supported by 14 major banks and the two largest European acquirers, EPI is building a new, proudly European payment system: easy, instant and transparent, all for the greater good.

What’s in it for you

Are you tired of being one amongst many in a big financial structure, where everything has already been set up by others? Would you like to be a pioneer of a truly innovative pan European project? This job might be for you.

In this role, you will operate autonomously while collaborating with multiple highly skilled professionals across EPI. A key challenge will be to foster collaboration and ensure alignment with the Risk team.

Responsibilities

• Enhance and continuously improve the existing EPI OPS Risk Governance Framework based on COSO, ensuring its effective deployment across processes and product lines.
• Strengthen risk monitoring and controls by collecting and reviewing Key Risk Indicators (KRIs), optimizing policies and testing guidelines, and driving corrective actions with business owners, including:
• Monitoring the level 1 controls, collecting their results and supporting the managers.
• Designing, planning and performing the level 2 controls on a risk‑driven approach.
• Monitoring other level 2 controls performed in the company by the group DPO and the group CISO on the scope of EPI Operations BV.
• Update continuously the EPI Operations BV risk matrix by leading and coordinating product feature risk assessments in collaboration with Product, Tech, and Operations teams to ensure ongoing compliance of EPI SE with different frameworks (PSD2, PISA, DORA).
• Define and action risk mitigation plans.
• Promote a strong risk awareness culture, and support teams to make informed, risk‑based decisions in their daily activities.
• Support external certifications, assurance, and audit engagements, including ISO 27001 (for EPI SE), ISAE reports, and coordinate Internal Audit reviews of EPI OPS.
• Collaborate & align with the Group Risk function (2nd line) including:
• EPI SE Risk Officer & Internal Controller.
• EPI SE Compliance Officer.
• EPI SE Business Continuity Manager.
• EPI SE Chief Risk & Compliance Officer.
• Attend and participate to the EPI Risk Forum (with all Risk and Compliance officers).

Qualifications

• At least 5 years of experience in Risk Management or Internal Control, ideally within Payments, Banking, or FinTech.
• Proven ability to operate autonomously and influence at executive and board level in a regulated, multi‑entity European environment.
• Prior experience in designing and deploying governance frameworks or collaborating in cross‑functional risk initiatives.
• Relevant certifications such as CISA, CRISC, ISO 27001 Lead Implementer/Auditor, or similar are considered an asset.
• Fluent in English (both written and spoken); any additional European language is a strong plus.

Recruitment Steps

• A first call with one of our recruiters.
• An interview focused on the mission and your expertise.
• A last interview focused on our company skills.
• Hopefully, an offer you can’t refuse.

Equal Employment Opportunity

EPI offers the same job opportunities to all, without distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age. EPI promotes the development of an inclusive work environment that mirrors the diversity of the clients our product is serving.

Additional Details

Seniority level: Not Applicable

Employment type: Other

Job: Finance and Sales

Location: Madrid, Community of Madrid, Spain

Referrals increase your chances of interviewing at EPI Company by 2x.