Risk and Internal Control Officer – Remote-First

EPI Company; United States; Remote; USD 80,000 - 120,000; Full time

Benefits offered by this job

Remote-first culture

In-person meetups

Work from another EU country up to 3 m

Competitive compensation package

Training budget €5,000 per year

Job summary

EPI is seeking a风险 and internal control professional to strengthen the risk and internal control framework at a growing European payments company. You will monitor controls, engage with stakeholders across the three lines of defense and help ensure regulatory compliance.

This remote-first role offers exposure to risk governance topics in a regulated European setting and the chance to work with teams across multiple functions.

Qualifications

• 2-5 years of professional experience in a similar Risk and/or Internal Control role.
• Proficient in English.
• Thrive in a remote-first, multicultural environment.

Responsibilities

• Monitor level 1 controls results and support managers in execution.
• Design and perform level 2 controls using a risk-driven approach.
• Maintain risk register, KRIs and risk mitigation plans.
• Monitor risk appetite thresholds and trigger mitigations.
• Contribute to risk reporting to committees and boards.
• Oversee third-party risk assessments and external risks.
• Promote risk awareness across the organization and drive improvements.
• Collaborate with Compliance, BCP and Risk & Compliance across lines.

Skills

Risk management

Internal controls

Three lines of defense

COSO framework

Risk reporting

Stakeholder management

Analytical thinking

Regulated environments

Job description

Be part of a movement to change the way Europe pays

In today’s digital Europe, payments still feel too complicated. Random delays, confusing rules, extra apps and accounts make it harder than it should be to pay and get paid.

The European Payments Initiative is changing that with Wero, a proudly European digital wallet to make payments easier, clearer and more secure. Online, in store, at home and across borders, with your money and data protected under European laws and regulations.

Wero is live in Belgium, France, Germany, the Netherlands and Luxembourg and launching very soon in Austria. Backed by 17 major banks and the two largest European acquirers, we’re building a brand new, proudly European payment system.

What's in it for you

• Play a key role in strengthening the risk and internal control framework of a growing European payments company.
• Get exposure to a broad range of risk, internal control and governance topics in a regulated environment.
• Work closely with stakeholders across the three lines of defense and contribute directly to how risks are identified, monitored, mitigated and reported.

At EPI, we embrace a remote-first culture, enabling our teams to work remotely from the country they are based in, with in-person meetings at least once a quarter to foster collaboration and connection.

About the team

You’ll report directly to the EPI Group Risk & Internal Control Officer and work closely with key stakeholders across the three lines of defense.

Your impact

• Monitor level 1 controls , collect their results and support managers in their execution and follow-up.
• Design, plan and perform level 2 controls using a risk-driven approach, while monitoring other level 2 controls performed by the Group DPO and Group CISO.
• Contribute to the continuous identification, assessment and documentation of risks , maintaining the risk register, Key Risk Indicators and risk mitigation plans.
• Monitor risk appetite thresholds and ensure appropriate mitigation actions are raised when required.
• Contribute to risk reporting presented to EPI Committees and Supervisory Boards.
• Monitor third-party service provider risk assessments and contribute to effective oversight of external risks.
• Promote risk and internal control awareness across the organisation and contribute to continuous improvement initiatives.
• Collaborate with relevant stakeholders across the three lines of defense , including Compliance, Business Continuity and Risk & Compliance.

Technology stack

Primary: Outlook, Slack, Teams, JIRA, Confluence

To succeed, you should meet at least 70% of these requirements

• 2-5 years of professional experience in a similar Risk and/or Internal Control role
• Proficient in English
• Thrive in a remote-first, multicultural environment

Job specific requirements

• Strong knowledge of Enterprise Risk and Internal Control , including risk framework set-up and the Three Lines of Defense model
• Hands-on experience with Level 1 / Level 2 control execution and testing
• Strong understanding of risk reporting and governance , including knowledge of COSO and experience working in regulated environments
• Excellent communication and stakeholder management skills, combined with analytical thinking, attention to detail and a proactive, continuous improvement mindset
• Knowledge of ICT risk management, outsourcing risk management and DORA compliance would be great
• Experience with GRC tools would be nice to have

Turn back if …

• You’re looking for an already highly structured environment with no ambiguity
• You’re looking for a role focused only on control execution rather than a balance of controls, risk monitoring, stakeholder engagement and reporting
• You’re not comfortable working proactively with multiple stakeholders across the three lines of defense

What we can offer

• Remote-first culture with quarterly and annual all-staff in-person meetups to keep teams connected and collaborative
• Possibility to work from another EU country for up to 3 months per year
• Competitive compensation package, featuring salary, performance-based bonus, and a thoughtfully designed, high-quality benefits program
• The opportunity to be part of a multicultural European company
• Learning & development budget : €5,000 training budget per year

Our commitment to equal employment opportunities

EPI offers the same job opportunities to all, without distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age. EPI promotes the development of an inclusive work environment that mirrors the diversity of the clients our product is serving.