Technology Risk and Controls Manager, Stripe

• 7+ years of experience in risk management or technology related positions, including time spent in IT and security risk
• Certifications related to IT risk management, e.g. CISA, CISM or CISSP
• Experienced in performing IT and security risk and control assessments, and managing regulatory requests
• Strong control mindset, with confidence acting as the go-to person on cyber and IT risk matters
• N ability to understand and interpret regulations and apply them in a practical manner in an operational environment, especially for technology and resilience regulatory requirements in the UK and Ireland
• Experience in implementing all aspects of risk management frameworks, including risk appetite setting, risk and control assessment, and remediation prioritisation
• Good communication skills in managing a high variety and seniority of stakeholders
• Hands-on, execution-focused, and caring about the day-to-day detail
• Great at asking incisive questions to pick things up and act on them quickly
• Ability to thrive in a fast paced, multi-cultural environment
• Passion about new ways of working, new technology and the value realisation of risk management

Desirable

• Be front-to-back facing, from discussing control solutions with engineers to coordinating with the Operations, Product, Risk and Compliance, and other control functions
• Prepare materials for, and represent, EMEA CIO/CTO in governance meetings, such as Boards, Monthly Risk Forums, etc
• Drive technology compliance programme to identify and remediate any control gaps with applicable regulations
• Perform risk assessments, including risk and control self assessment (RCSA) and product launch review
• Follow through remediations on findings and incidents
• Execute technology risk strategy, including setting risk appetite statements and metrics, driving risk culture in the first line, implementing forward-looking risk metrics and reporting
• Assist in operationalisation of our risk management frameworks
• Assist EMEA CIO/CTO to deliver IT governance book of work
• Be delivery focused to deliver all our IT and Security control commitments on time and to the appropriate level of quality, in particular for the EMEA regulated entities
• Be flexible and show resolve in navigating complex regulatory challenges and deliverables
• Be a change agent by making risk management relevant to everyone in a clear and succinct manner as we seek to further embed control culture
• Be open to change over time, as we in turn adopt our strategy to meet ever-changing control and regulatory landscape