Enterprise Risk & Controls Manager

Pleo; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Your own Pleo card

Lunch provided or lunch allowance

Private healthcare

25+ days holiday + public holidays

Hybrid and fully remote options

Mental health and well-being support

Paid parental leave

Job summary

Pleo is seeking a Risk and Controls Manager to join our Second Line of Defence. You will build and run our enterprise risk management framework and own oversight of security, technology, and operational resilience risk.

This is a broad role with a technology risk focus, ideal for someone who can challenge the First Line and contribute to regulatory engagement. You'll partner with Product, Engineering, Operations, Finance and Compliance to strengthen governance, risk controls, and reporting

Qualifications

• Hands-on ERM/operational risk framework experience in regulated financial services (FinTech, banking, payments).
• Ability to challenging technology and security teams credibly.
• Experience with ITGC testing or similar controls testing.
• Strong stakeholder engagement and communication skills.
• Pragmatic, solutions-focused mindset in risk management.
• Experience in shaping risk frameworks in scaling businesses.

Responsibilities

• Build and run the ERM framework and risk reporting to senior management.
• Own 2LOD oversight of information security, technology and operational resilience risk.
• Test IT general controls with technology and security teams.
• Lead incident-driven testing in high-risk areas with cross-functional teams.
• Run risk assessments and RCAs across the business.
• Shape GRC tooling and automation for risk management.
• Advise First Line on risk and regulatory changes.

Skills

ERM framework

Tech risk know-how

Controls testing

Influence & stakeholder engagement

Clear communication

Pragmatic mindset

Tools

GRC tooling

Job description

Pleo is seeking a Risk and Controls Manager to join our Second Line of Defence. You will build and run our enterprise risk management framework and own oversight of security, technology, and operational resilience risk.

This is a broad role with a technology risk focus, ideal for someone who can challenge the First Line and contribute to regulatory engagement. You'll partner with Product, Engineering, Operations, Finance and Compliance to strengthen governance, risk controls, and reporting