Head of Risk

We are looking for an experienced Head of Risk to lead and further develop our risk management framework in a complex and international payments environment.

This is a senior second-line role requiring strong regulatory judgement, an independent risk perspective and the ability to translate risk management principles into practical, effective and sustainable business processes.

The Head of Risk will play a key role in strengthening the organisation's risk management capabilities and developing a consistent and holistic view of risk across business activities, operating models, entities and jurisdictions.

We are looking for someone who combines strong risk management expertise with a practical understanding of the payments industry. The successful candidate will be comfortable operating in a dynamic and evolving environment, working closely with senior leadership and the Board, while remaining sufficiently hands-on to understand the processes, payment flows, controls and risk exposures behind management reporting.

Lead and continuously develop the Risk Management Framework, ensuring alignment with applicable regulatory requirements, supervisory expectations and the organisation's business strategy.

• Perform an independent second-line risk management and challenge function in accordance with the Three Lines of Defence model.
  
• Develop and maintain the risk taxonomy, Risk Appetite Framework, risk assessment methodologies, risk registers, Key Risk Indicators and risk reporting processes.
  
• Identify, assess, monitor and challenge material risks, including operational, financial, liquidity, safeguarding, counterparty, concentration, strategic and business risks.
  
• Develop and maintain a holistic view of material risk exposures, considering dependencies and risk concentrations across business lines, legal entities, jurisdictions and key third-party relationships.
  
• Lead operational risk management and support the development of a strong risk and control culture across the organisation.
  
• Assess risks arising from merchant acquiring activities, merchant business models, card payment flows, settlement arrangements and cross-border payment activities.
  
• Support the identification and management of acquiring-specific risks, including merchant risk, fraud, chargebacks, card scheme exposure, settlement risk and financial exposure arising from merchant activity.
  
• Oversee third-party and outsourcing risk management, including criticality assessments, concentration risk, ongoing oversight and exit planning.
  
• Provide risk oversight in relation to ICT, cyber and operational resilience, including DORA-related risk governance and risk management requirements.
  
• Develop consistent risk management standards, methodologies and reporting practices capable of being applied across different business areas and operating environments, while ensuring that local regulatory requirements and entity-level accountability are fully maintained.
  
• Provide independent risk opinions and constructive challenge in relation to new products, material business initiatives, operating model changes, outsourcing arrangements and strategic projects.
  
• Participate in new product and change governance processes, ensuring material risks are identified and assessed before implementation.
  
• Prepare clear, meaningful and decision-useful risk reporting for senior management and the Board.
  
• Escalate material risks, control weaknesses, risk appetite breaches and emerging risk trends to the relevant management and governance bodies.
  
• Work closely with Compliance, AML/KYC, Finance, Information Security, Internal Audit, Operations and commercial functions to ensure effective identification and management of risk.
  
• Support regulatory inspections, supervisory reviews, internal and external audits and remediation programmes.
  
• Contribute to the continuous improvement of governance and internal control arrangements.
  
• Promote a strong risk culture and provide practical risk management guidance and training across the organisation.

At least 5 years of relevant professional experience in risk management, financial services, payments, banking or regulated fintech, including at least 3 years in a senior risk or control function role.

• Strong practical experience within an Electronic Money Institution, Payment Institution, bank or another regulated financial institution.
  
• Strong practical understanding of merchant acquiring, card payments and the associated risk landscape, including merchant risk, chargebacks, fraud, card scheme requirements and acquiring-specific operational and financial risks.
  
• Experience assessing risks arising from complex payment flows, merchant business models, settlement arrangements and cross-border payment activities.
  
• Strong understanding of enterprise risk management and the Three Lines of Defence model, including the independence and responsibilities of the second line of defence.
  
• Proven experience designing, implementing or materially developing a comprehensive Risk Management Framework.
  
• Strong practical knowledge of risk appetite frameworks, risk assessments, risk registers, KRIs, control assessments, issue management and risk reporting.
  
• Strong understanding of operational risk and experience assessing financial, liquidity, safeguarding, counterparty, concentration, strategic and business risks.
  
• Practical knowledge of ICT, cyber, operational resilience and third-party risk, including DORA-related risk management requirements.
  
• Strong experience in outsourcing and third-party risk management.
  
• Ability to assess risks arising from complex operating models, cross-border activities, interconnected legal entities and international business operations.
  
• Experience developing common risk methodologies, governance standards and reporting principles across different business areas or operating environments.
  
• Strong understanding of EU financial services regulation and supervisory expectations.
  
• Knowledge of the Lithuanian regulatory environment and supervisory expectations applicable to EMIs and PIs would be a strong advantage.
  
• Experience engaging with Boards, senior management, regulators, internal and external auditors and other control functions.
  
• Strong analytical and critical-thinking skills, with the confidence to independently and constructively challenge business and management decisions.
  
• A high degree of flexibility and adaptability, with the ability to shift effectively between strategic priorities, regulatory matters and hands-on risk management activities.
  
• A flexible and pragmatic mindset, with the ability to adapt risk management approaches to evolving business models, regulatory expectations and organisational needs without compromising the independence of the second-line function.
  
• A commercially aware and solution-oriented approach to risk management.
  
• Ability to translate complex risk matters into clear and concise management and Board-level reporting.
  
• Demonstrated ability to operate effectively in a fast-growing, changing and internationally distributed organisation.
  

Excellent written and spoken English.

6000-8000 €/mėn. neatskaičius mokesčių

Saulėtekio al. 15-1 Vilnius Apskaičiuokite kelionės laiką iki darbo