Senior Security Risk Officer

Company: Mollie
Apply for the Senior Security Risk Officer
Location: London
Job Description:

Overview

In this role you drive risk governance for Mollie’s expanding product portfolio, balancing compliance with business agility. You will partner with Risk, Compliance and product teams to embed regulatory controls across new and existing offerings. You’ll translate complex rules into actionable guidance and help shape how security risk is managed as Mollie grows. You’ll also mentor colleagues and support audits, certifications, and a growing AI-enabled operations environment.

Responsibilities

  • Partner with product and risk teams to implement risk and security controls across new/updated products while ensuring regulatory alignment (DORA, PSD2, GDPR, AI Act, CRA, NIS2)
  • Drive governance and ensure adherence to policies across the organization
  • Set second line risk priorities and initiatives with senior Risk and Compliance stakeholders
  • Foster a strong risk culture and support growth of the organization in relevant areas
  • Collaborate on internal/external audits and certifications (PCI-DSS, SOC2) and help achieve successful outcomes
  • Translate complex regulations into practical guidance and champion a balance between commercial goals and compliance

Key requirements

  • 7-10 years of relevant experience
  • Technical fluency across platforms; ability to read technical docs and system architectures
  • Strong written and verbal communication to explain risk decisions to technical and business stakeholders
  • Proactive problem-solver with a can-do attitude for security in a growing org
  • Customer focus in risk decisions and impact considerations
  • Curiosity towards new technologies, including AI
  • Payments/fintech experience (preferred)
  • Certified CISSP or CISM, and/or cloud certification (GCP) or other security/technical cert
  • Advanced University Degree in Information Technology or related field
  • excellent communication
  • creative problem solving
  • customer-focused
  • risk management and governance
  • security controls implementation
  • regulatory frameworks (DORA, PSD2, GDPR, AI Act, CRA, NIS2)

…

Posted: October 10th, 2026