ICT Risk & Vendor Specialist

Qred; Stockholms kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

Qred is seeking an ICT Risk & Vendor Specialist to own the 1st Line risk across IT vendors, procurement processes, and critical financial systems within the CTO organization. You will bridge technical oversight, vendor project management, and regulatory compliance to ensure our scaling infrastructure operates securely under European banking standards.

You’ll work with Legal, Operations, Cyber Security, and leadership to align stakeholders, develop robust onboarding playbooks, and support audits.

Qualifications

• Several years of IT vendor governance, procurement, ICT risk experience.
• Experience with regulatory frameworks impacting financial tech, esp. DORA.
• Proven track record in software onboarding and vendor mapping.
• Experience in Banking/FinTech regulated environments.

Responsibilities

• Build and operate 1st Line Third-Party Risk Management (TPRM) for ICT vendors.
• Lead procurement processes and monitor vendor contracts and SLAs.
• Map risk, classify providers, and support DORA compliance readiness.
• Create onboarding, integration, cutover, and offboarding playbooks.
• Collaborate with Legal, Operations, Cyber Security and leadership for audits.

Skills

Third-party risk management

Project management

Regulatory compliance

Vendor governance

Stakeholder collaboration

Tools

CRISC

CISA

DORA Certification

Job description

At Qred, we’re building the world's best bank for small businesses. Since launching 11 years ago, we’ve grown from startup to profitable fintech scale-up, now generating over 1 billion SEK in annual revenue and supporting 50,000+ entrepreneurs across Northern Europe. We combine smart technology, real data, and human judgment to make financing simple, fast, and fair. With bold growth plans and strong momentum across multiple markets, we’re now looking for a ICT Risk & Vendor Specialist for the next phase of growth.

About The Role

You will take 1st Line ownership of Qred’s IT vendor landscape, procurement processes, and critical financial systems within the CTO organization. This role bridges technical operational oversight, vendor project management, and regulatory compliance to ensure our scaling infrastructure operates securely and efficiently under European banking standards.

Key Responsibilities

• Build and execute Qred’s 1st Line Third-Party Risk Management (TPRM) framework, capability mapping, and feature cataloguing to optimize total cost of ownership.
• Lead operational readiness for DORA compliance by mapping, risk-classifying, and monitoring all critical ICT third-party service providers.
• Manage end-to-end procurement processes and implementation projects, ensuring full capability utilization and clear understanding of system boundaries.
• Establish implementation playbooks for onboarding, integration, cutover, and offboarding while translating contract terms into active SLA monitoring workflows.
• Facilitate cross-functional alignment across Legal, Operations, Cyber Security, and executive leadership, serving as the 1st Line point of contact for ICT audits.

What we’re looking for

We are looking for someone with a structured approach to third-party risk, strong project management skills, and a drive to build scalable frameworks. You bring the ability to evaluate system capabilities, manage implementation risks, and align technical, legal, and business stakeholders around clear operational standards.

Qualifications

• Several years of experience within IT vendor governance, procurement, ICT operational risk, or third-party risk management.
• Direct working knowledge of regulatory frameworks impacting financial systems and fintech scale-ups, specifically DORA requirements.
• Proven track record in project management for software onboarding, implementation planning, and vendor capability mapping.
• Professional background in regulated environments such as Banking, Financial Services, or Fintech.
• Industry certifications such as CRISC, CISA, or Certified DORA Compliance Specialist are considered a strong plus.

Why Qred?

This is the place to be if you’re looking for a place to grow. Qred is growing fast, and our Qredsters along with it. With a non-bureaucratic organization and delegated responsibilities, we make sure there’s a short path from idea to action. In addition to our great culture, you get to work with the latest cutting-edge techniques, full ownership, and last but not least a bunch of great competent colleagues to learn from!

One Last Thing

This is a full-time, permanent position based in our headquarters in Stockholm. We believe our culture thrives when we work together, which is why we have an office-first approach. To balance this with some flexibility, we have the option of working remotely one day per week. We review applications on a rolling basis and while the start date is flexible, the right candidate can join us immediately.

Qred celebrates diversity and does not discriminate based on ethnicity, religion, national origin, gender, sexual orientation, age, disability status, or any other applicable characteristics protected by law. Qred is an international FinTech scale-up that specializes in digital financing solutions for small businesses, with operations in the Nordics, Benelux, Germany and Brazil. We are passionate about helping small businesses thrive and grow, by providing them with business loans and credit cards. Right now we’re in an exciting phase of our journey that focuses on growth through smart product development and technology fueled by international expansion.