pleo - Risk & Control Officer
Requirements
• You prefer operating strictly within rigid, theoretical risk models without adapting to fast-paced commercial realities. • You prefer purely administrative risk logging over proactive challenge, advisory, and stakeholder collaboration. • 2. Hiring Manager: A 45-minute chat with our Head of Risk & Control. • 3. Peer Interview: A 60-minute chat with your peers and / or senior stakeholders. • 4. Final Interview: A 30-minute chat with our SVP Risk & Compliance. • Last time we hired a Risk & Controls Officer, we received a high volume of applications, but only a selective group were invited to an intro call. Some of the key reasons why previous candidates didn’t make it past the application screening stage include: • CV writing and content: We receive a lot of CVs, and many of them are AI-generated. We love seeing people leverage AI—it’s a big focus for us internally too—but without human intervention, these CVs can sometimes become generic and fail to show a candidate in the best light. What we're really looking for is the specific details of real impact that only you know from your previous experience. A top tip from us is to use the “Achieved X, as measured by Y, by doing Z” formula to give a really clear picture of what you’ve worked on. Including links to your previous companies' websites is also a huge help! • Application care: Every single application we receive is reviewed by a human because we believe that candidates' efforts should be matched by an equal level of human care. Read and answer the application questions carefully, as they make a huge difference in our decision-making process. • Profile to role fit: For this role specifically, candidates whose backgrounds focus exclusively on professional consultancy, compliance reporting, or internal audit without hands-on 2LOD risk framework, credit risk, and RCSA execution experience often do not meet our core requirements.
Responsibilities
• Support Risk Framework Execution – Contribute to the implementation and maintenance of Pleo's 2LOD risk management framework, ensuring controls remain aligned with regulatory expectations and business strategy. • Execute Oversight Activities – Conduct RCSAs (Risk and Control Self Assessments) and control reviews across the business. Assess the quality of risk identification and control design, and challenge 1LOD findings where appropriate. • Identify & Assess Risks – Support scenario analysis and stress-testing exercises across operational, technology, product, and credit risk domains. Help surface emerging risk exposures to leadership. • Be a Reliable Risk Advisor – Support business teams with guidance on risk topics, control requirements, and regulatory change, providing practical recommendations on risk and control issues. • Support Risk Reporting & Regulatory Engagement – Contribute to the preparation of clear, data-informed risk reports for senior management and governance committees, and assist with regulator interactions on risk and control matters. • To put things into context, we currently have scaling our 2LOD oversight framework and enhancing cross-functional RCSA processes on our roadmap. You can expect to work with modern risk management platforms, GRC tools, and data analytics dashboards. • Financial Services Experience – 3+ years of experience in a regulated financial services environment (FinTech, banking, payments, or similar) with hands-on experience in risk or control management. • Essential Credit Risk Expertise – A solid, demonstrated understanding of the assessment and management of credit risk. • Core Risk Domain Knowledge – Proven experience with operational risk, technology risk, and product risk assessment. • Hands-On Risk & Control Execution – Background in ERM framework execution, control design, RCSAs, assurance activities, and remediation tracking. • Clear & Collaborative Communication – Ability to translate complex risk concepts into practical, accessible language for diverse audiences, from frontline teams to leadership. • Pragmatic, Solutions-Oriented Approach – A real-world problem-solving mindset that delivers workable answers to real risk challenges rather than defaulting to theoretical frameworks alone. • Get under the skin of Pleo's risk landscape and take ownership of key 2LOD review, RCSA, and challenge activities across priority business areas. • Play an active role in evolving our risk framework as the company continues to scale — contributing your expertise to initiatives that shape how we manage risk for years to come. • Build strong cross-functional relationships, establishing yourself as a credible, trusted advisor on risk and control matters. • Please note: We can hire on a hybrid or in-person set-up in any of the locations listed on the advert but you will need to be physically based in the country of your choice with a valid right to work. We are unable to offer visa sponsorship for this role in any of the listed locations.
Benefits
• This role is a good fit for you if: • You want to actively shape 2LOD risk maturity in a high-growth FinTech scale-up. • You enjoy a pragmatic, hands-on role where risk oversight directly enables business growth and innovation. • You thrive in a collaborative environment partnering with cross-functional teams across Product, Operations, and Finance. • This role is not a good fit for you if: • Your own Pleo card (no more out-of-pocket spending!) • Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office • Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis • We offer 25 days of holiday + your public holidays • We use MyndUp to give our employees access to free mental health and well-being support with great success so far • THE INTERVIEW PROCESS • We want to ensure you are set-up for success and understand what will be expected of you. If your application is successful, our interview process is as follows:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT