Risk & Control Officer

Overview

Join Pleo as a Risk & Controls Officer in our Risk & Control team to strengthen the 2nd line of defence and embed robust risk management across product, operations, and regulatory interfaces. You will partner with First Line teams to challenge risk findings, support regulatory engagement, and help scale risk maturity as we grow. The role blends risk expertise with practical business partnership to drive actionable controls and governance. This is an opportunity to shape risk culture in a fast-growing FinTech that values collaborative problem-solving and tangible impact.

Pay / Benefits

• Your own Pleo card
• Lunch on us or lunch allowance
• Comprehensive private healthcare
• 25 days of holiday + public holidays
• Mental health and well-being support
• Paid parental leave

Responsibilities

• Support the implementation and maintenance of the 2LOD risk management framework aligned with regulatory expectations and business strategy
• Conduct Risk and Control Self Assessments (RCSAs) and control reviews; challenge 1LOD findings where appropriate
• Assist in risk identification, scenario analysis, and stress-testing across operational, technology, product, and credit risk domains
• Provide guidance on risk topics, control requirements, and regulatory change to business teams
• Contribute to risk reporting for senior management and governance, and assist with regulator interactions on risk and control matters
• Work with risk management platforms, GRC tools, and data analytics dashboards as part of ongoing framework scaling

Key requirements

• 3+ years in a regulated financial services environment with hands-on risk or control management experience
• Solid understanding of credit risk assessment and management
• Experience with operational, technology, and product risk domains
• Hands-on experience with ERM framework execution, control design, RCSAs, assurance activities, and remediation tracking
• Clear and collaborative communication; ability to translate risk concepts for diverse audiences
• Pragmatic, solutions-oriented approach to real risk challenges

• Clear & collaborative communication
• Pragmatic problem-solving
• Cross-functional collaboration
• ERM framework execution
• RCSAs and control design
• Regulatory change management

…