Risk and Internal Control Officer – Remote-First

About this role

🚀 Be part of a movement to change the way Europe pays In today’s digital Europe, payments still feel too complicated. Random delays, confusing rules, extra apps and accounts make it harder than it should be to pay and get paid. The European Payments Initiative is changing that with Wero, a proudly European digital wallet to make payments easier, clearer and more secure. Online, in store, at home and across borders, with your money and data protected under European laws and regulations.

Wero is live in Belgium, France, Germany, the Netherlands and Luxembourg and launching very soon in Austria. Backed by 17 major banks and the two largest European acquirers, we’re building a brand new, proudly European payment system. 🔎 What's in it for you Play a key role in strengthening the risk and internal control framework of a growing European payments company. Get exposure to a broad range of risk, internal control and governance topics in a regulated environment.

Work closely with stakeholders across the three lines of defense and contribute directly to how risks are identified, monitored, mitigated and reported. At EPI, we embrace a remote-first culture, enabling our teams to work remotely from the country they are based in, with in-person meetings at least once a quarter to foster collaboration and connection. 🐝 About the team You’ll report directly to the EPI Group Risk & Internal Control Officer and work closely with key stakeholders across the three lines of defense.

💥 Your impact Monitor level 1 controls , collect their results and support managers in their execution and follow-up. Design, plan and perform level 2 controls using a risk-driven approach, while monitoring other level 2 controls performed by the Group DPO and Group CISO. Contribute to the continuous identification, assessment and documentation of risks , maintaining the risk register, Key Risk Indicators and risk mitigation plans.

Monitor risk appetite thresholds and ensure appropriate mitigation actions are raised when required. Contribute to risk reporting presented to EPI Committees and Supervisory Boards. Monitor third-party service provider risk assessments and contribute to effective oversight of external risks. Promote risk and internal control awareness across the organisation and contribute to continuous improvement initiatives. Collaborate with relevant stakeholders across the three lines of defense , including Compliance, Business Continuity and Risk & Compliance.