Risk Manager

Betterment; York and North Yorkshire; On-site; GBP 60,000 - 90,000; Full time

Job summary

Betterment is seeking a Risk Manager to join the Risk Management team in the United Kingdom. You will own a portfolio of risk processes end to end, perform risk assessments, and advise management to maintain a robust risk posture as the business grows.

You will collaborate with Engineering, Security, Compliance, Legal, and Operations, monitor third-party risks, run SQL queries, and use AI tools to communicate risk clearly. CISA is a plus.

Qualifications

• 4+ years of experience in financial services with exposure to one or more operational risk areas (e.g., third-party risk, fraud, incident management, governance).
• Proficient in testing controls with data (SQL, spreadsheets) and communicating conclusions clearly.
• CISA certification is a plus but not required.

Responsibilities

• Own a portfolio of risk processes end to end and perform risk assessments.
• Consult with management to maintain a strong risk posture as the business grows.
• Monitor third-party vendor risks and follow up on open issues to drive remediation.
• Provide effective challenge to product managers on new products and features.
• Operate and monitor control testing and monitoring processes.
• Run SQL queries and reports using AI tools for efficiency.
• Document complex business processes and provide evidence to auditors.
• Partner across 2nd line and with Engineering, Security, Compliance, Legal, and Operations to communicate risk.

Skills

Risk management

Data analysis

Communication

AI/automation tools

Auditing/controls

Education

CISA certification

Tools

SQL

Spreadsheets

AI tools

Job description

• This role sits on our Risk Management team — a small second line-of-defense (2LOD) function responsible for enterprise risk management (ERM) and effective challenge across operational risks such as third-party risk, fraud and identity theft, operational errors, and business continuity
• The team partners closely with Engineering and with other risk disciplines including Security, Compliance, Legal, and Operations
• As a Risk Manager, you will own a portfolio of risk processes, perform risk assessments, and consult with management to keep our risk posture strong as the business grows
• You will use AI and automation tools throughout your work to build context quickly, analyze data, and communicate risk clearly
• Own a portfolio of risk processes end to end, where success comes from a high degree of ownership over outcomes
• Proactively monitor risks related to third-party vendors
• Follow up on open issues to drive management attention and timely remediation
• Provide effective challenge feedback to product managers on new products and features
• Operate and monitor the results of control testing and monitoring processes
• Run SQL queries and reports, using AI tools for efficiency and automation
• Document complex business processes
• Provide evidence to auditors and examiners
• Partner across the second line and with Engineering, Security, Compliance, Legal, and Operations to assess and communicate risk in a way that earns buy-in

Benefits

• Compensation & Ownership: Competitive, benchmarked salary. Equity for everyone, including new hire, performance, and refresher grants.
• Retirement: 401(k) match from day one, including Student loan matching. Zero management fees.
• Health & Wellbeing: Comprehensive medical, dental, and vision coverage. One Medical membership. Fertility and LGBTQIA+ transition support.
• Time Away: Flexible time off. Paid parental leave for all parents. Four-week sabbatical in year six.
• In-Office Culture & Flexibility: An in-person, collaborative culture, with no required office days during the summer and winter holidays.
• Growth & Development: Free Coaching for everyone and continuous development.
• Community & Care: Chef lunches, guest speakers, company gatherings, heritage celebrations, and seven Employee Resource Groups.
• Employee Support: Dedicated benefits advocate and EAP access.

Comfort working with data (e.g., SQL, spreadsheets) to test controls and support conclusionsProfessional certifications such as the CISA are a plus, but no license is requiredGood judgment in ambiguous situations with limited information, while always doing what is best for our customersStrong, concise written and verbal communication, including the ability to deliver effective challenge while preserving partnershipProficiency using AI and automation tools to identify, document, and communicate risk management activitiesIntellectual curiosity and the ability to build context quickly in unfamiliar risk areas, supported by the team and by AI tools4+ years of experience in financial services with exposure to one or more operational risk areas — for example, third-party risk, fraud, incident management, identity theft, records retention, audit fieldwork and reporting, and/or governance