Senior Product Compliance & Risk Manager - Operational Resilience and Outsourcing

About this role

Our Product Compliance & Risk (“PC&R”) team sits at the centre of Wise’s product development function, supporting our cross-functional teams in delivering exceptional financial products for our customers while ensuring they’re compliant by design. We’re seeking a highly motivated, customer-centric and proactive individual to lead on UK Operational Resilience and Outsourcing within our first line Product Compliance and Risk team.

Your Mission: You’ll own the Operational Resilience and Outsourcing framework within our first line Product Compliance and Risk team, covering Wise’s UK entities. You’ll be responsible for running our framework to comply with our regulatory obligations in the UK related to operational resilience, outsourcing and business continuity. Most importantly, you’ll work directly with Product, Engineering, Security, Risk, and Operations to ensure our products and services remain resilient, and that our reliance on third parties is governed in line with regulatory expectations and our internal standards.

Key Responsibilities: Understand and assess the full set of regulatory requirements related to UK operational resilience, outsourcing and third party risk management (TPRM) requirements. Understand the broader regulatory framework applicable to the provision of payments, e-money and retail investment services. Own the Operational Resilience and Outsourcing framework, including developing standards, controls and approaches.

Lead the identification of important business services, the definition and maintenance of impact tolerances and the mapping and testing of the people, technology, processes, and third-party dependencies to support the important business services. Lead the annual Operational Resilience Self-Assessment (ORSA) to document the operational resilience journey, own and deliver the Annual Board Paper. Clearly document and maintain our internal controls, and develop and maintain a standard for documenting and maintaining regional operational resilience and outsourcing controls.

Own and maintain the compliance approach and framework for outsourcing and critical third-party arrangements. Ensure Wise’s UK entities remain compliant with the applicable regulatory requirements on operational resilience and outsourcing including on operational reporting and third party reporting (PS 26/2) Build scalable governance for third-party lifecycle management including due diligence, risk assessment, contract requirements, ongoing monitoring, change management, exit planning.