Risk & Audit Lead

Kast; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

KAST is seeking a Risk & Audit Lead to establish and own an independent function across the organization, with an enterprise-wide remit beyond technology. You will build the risk framework, drive RCSA and KRIs, and lead internal audits, providing neutral validation of controls while collaborating with Engineering, Security, Legal, Compliance and Finance.

The role requires 8+ years in risk, audit, cybersecurity or controls, with strong stakeholder management and a track record of addressing

Qualifications

• 8+ years of experience in risk, audit, cybersecurity, or controls with enterprise-wide scope
• Strong understanding of enterprise risk management alongside information security and technology risk
• Experience auditing across business and technology environments and identifying control gaps
• Led or managed compliance certification projects (ISO and others) and/or tech compliance certifications such as SOC 2 and PCI DSS
• Good understanding of access management, data controls, secrets/API keys, and security testing
• Strong stakeholder management with senior leaders, auditors and regulators

Responsibilities

• Build and run an independent, enterprise-wide risk and audit function across KAST.
• Own the enterprise risk framework: identify, assess, and track risks across all business areas.
• Define and drive risk management activities including RCSA and KRIs.
• Drive internal audit activities across the full audit lifecycle and report to leadership.
• Provide neutral validation of controls and compliance work to avoid duplication.
• Review security and technology controls, policies, and processes with focus on high-risk areas.
• Assess cybersecurity practices, conduct penetration testing, vulnerability assessments, and remediation.
• Own enterprise resilience practices such as BCP/DR and annual tests.
• Partner with Engineering, Security, Legal, Compliance, Finance and others while staying independent.
• Develop and maintain risk and audit frameworks, policies, and processes.

Skills

Enterprise risk management

Information security

Technology risk

Audit across business and tech

Compliance certifications (ISO/SOC 2/P

Job description

We re looking for a Risk & Audit Lead to build and own an independent risk and audit function across KAST. This is an enterprise-wide remit covering risk across the whole organisation, not just technology.

Department Security & Platforms
Employment Type Full Time
Location London
Workplace type Hybrid

What You ll Be Doing

• Build and run an independent, enterprise-wide risk and audit function across KAST. Own the enterprise risk framework: identify, assess, and track risks across all business areas, not just technology.
• Define and drive risk management activities, including Risk and Control Self Assessment (RCSA) and Key Risk Indicators (KRIs).
• Drive internal audit activities enterprise-wide and across the full audit lifecycle, including management reporting and closure of audit findings.
• Provide neutral, independent validation of controls and compliance work already underway rather than duplicating it.
• Review and assess security and technology controls, systems, policies and processes, including data access, data sharing, system access workflows and other high-risk processes.
• Assess cybersecurity practices and identify potential risks and gaps; ensure appropriate penetration testing, vulnerability assessments, and remediation are in place.
• Own enterprise resilience practices such as business continuity and disaster recovery (BCP/DR) and business impact assessments.
• Conduct annual BCP and DR exercises.
• Partner with Engineering, Security, Legal, Compliance, Finance, and other teams to address identified risks and improve controls, while remaining independent of them.
• Develop and maintain risk and audit frameworks, policies, and processes across the org.
• Provide regular risk and audit updates to the leadership team.

What You ll Bring

• 8+ years of experience in risk, audit, cybersecurity, or controls, with an enterprise-wide, not purely technical, lens.
• Strong understanding of enterprise risk management alongside information security and technology risk.
• Experience auditing across business and technology environments and identifying control gaps.
• Has led or managed organisations through compliance certification projects (ISO and others) and/or technology compliance certifications such as SOC 2 and PCI DSS.
• Good understanding of access management, data controls, secrets/API keys, and security testing.
• Strong stakeholder management skills and the ability to work with senior technical,business leaders, external auditors and regulators while holding an independent line.
• Experience in fintech or payment companies is a big plus.

About KAST

KAST is redefining stablecoin banking for global citizens, crypto professionals, Web3-native businesses, and high-inflation markets hungry for USD-backed banking. Backed by top-tier global investors and led by the ex-APAC CEO of Circle, our leadership team spans Circle, Airwallex, Revolut, Wise, Grab, Zoom, AWS, and leading OTC desks. We ve scaled from zero to nearly a million users at ridiculous speed.