Risk & Audit Lead (Fintech)

Location: London, hybrid

Company

hirify.global has an enterprise-wide remit covering risk and audit across the organisation, including business, technology, security, compliance, and resilience.

What you will do

• Build and run an independent, enterprise-wide risk and audit function.
• Own the enterprise risk framework, including risk assessments, Risk and Control Self Assessments, and Key Risk Indicators.
• Lead internal audit activities across the full audit lifecycle, including reporting and closure of findings.
• Assess security and technology controls, data access, data sharing, system access workflows, and other high-risk processes.
• Evaluate cybersecurity practices, penetration testing, vulnerability assessments, and remediation plans.
• Own business continuity and disaster recovery practices, including annual exercises and business impact assessments.

Requirements

• 8+ years of experience in risk, audit, cybersecurity, or controls with an enterprise-wide perspective.
• Strong understanding of enterprise risk management, information security, and technology risk.
• Experience auditing business and technology environments and identifying control gaps.
• Experience leading compliance certification projects such as ISO, SOC 2, or PCI DSS.
• Knowledge of access management, data controls, secrets, API keys, and security testing.
• Strong stakeholder management skills with senior technical and business leaders, external auditors, and regulators.

Nice to have

• Experience in fintech or payment companies.

Culture & Benefits

• Hybrid work arrangement in London.
• Independent partnership with Engineering, Security, Legal, Compliance, Finance, and other teams.
• Regular risk and audit reporting to the leadership team.