Tech Risk Assurance Lead: AI, Cloud & Compliance

Airwallex; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Airwallex is seeking an experienced technology risk and assurance leader to strengthen Second Line defenses across ITGCs, cloud controls, and AI/ML environments. You will design automated, evidence-driven testing, collaborate with auditors and regulators, and translate complex risk into practical guidance for engineers and executives.

You will mentor a high-performing team, drive control framework improvements, and ensure alignment with frameworks such as SOC 1/2, ISO 27001, and NIST.

Qualifications

• 8+ years in technology risk, IT audit, or security assurance, with Second Line of Defence exposure.
• Big Four background preferred.
• Experience building and testing risk controls and leading technical risk teams.
• Strong knowledge of ITGCs, application controls, and SOX within complex architectures.
• Hands-on cloud risk assessment and API security experience.
• Proficiency with SQL, Python, or API scripting for evidence extraction.

Responsibilities

• Lead the Second Line of defence across ITGCs, app controls, and cloud infrastructure.
• Develop an automation-first assurance approach using AI agents and scripts.
• Coordinate with external auditors and regulators to validate automated testing methodologies.
• Translate technical risk into actionable guidance for engineers and executives.
• Establish risk controls for AI/ML, LLMs, and automated decision engines.
• Partner with governance, risk, and compliance teams to defend the control environment.

Skills

Technology risk

IT audit

Information security

SOX compliance

Cloud risk (AWS/GCP)

SQL

Python

APIs

AI/ML risk

Regulatory frameworks

Tools

AWS

GCP

Tableau/Looker

Job description

Airwallex is seeking an experienced technology risk and assurance leader to strengthen Second Line defenses across ITGCs, cloud controls, and AI/ML environments. You will design automated, evidence-driven testing, collaborate with auditors and regulators, and translate complex risk into practical guidance for engineers and executives.

You will mentor a high-performing team, drive control framework improvements, and ensure alignment with frameworks such as SOC 1/2, ISO 27001, and NIST.