The posting
WHO WE ARE
At Trustly, we're building a smarter, faster, and more secure financial future by revolutionizing the world of payments. As a global leader in Open Banking Payments, we are establishing Pay by Bank as the new standard at checkout, providing unparalleled freedom, speed, and ease to millions of consumers and merchants worldwide.
Our Ambition: To build the world’s most disruptive payment network and redefine what the payment experience should feel like.
Trustly is a global team of innovators, collaborators, and doers. If you are driven by a strong sense of purpose and thrive in a dynamic, entrepreneurial, and high-growth environment, join us and be part of a team that’s transforming the way the world pays.
ABOUT THE ROLE
The Assurance Risk Manager will provide an independent, entity-level assurance opinion across Trustly's UK and EU licensed entities, covering all material controls relevant to each entity.
The remit extends to all material risk and control domains, including financial crime, safeguarding, consumer protection, operational resilience and ICT, financial risk, outsourcing, and governance. The role holder will work within a community of assurance managers, some focused on specific domains and others on individual regulated entities, and will own the entity-level assurance view, including understanding local regulatory requirements, ensuring findings reach the entity Board and local management, and supporting the entity Chief Compliance Officer's attestations.
The role holder will confirm the local applicability of domain testing scope and technique, agree the reports that reach the entity Board, and serve as a primary point of contact for assurance matters toward the relevant EU and UK regulators and supervisors. The role requires close collaboration with domain assurance managers, Enterprise Risk Management, and Internal Audit to ensure that assurance over Trustly's controls is evidenced consistently.
The role is suited to a seasoned assurance, risk, or second-line professional with experience in regulated financial institutions and a firm grasp of the independence boundaries that keep assurance credible.
What you'll do
- Maintain an independent entity assurance opinion across all material risk areas for Trustly's EU and UK licensed entities, ensuring that assurance results are comparable, aggregated consistently, and mapped to the Enterprise Risk Management risk taxonomy.
- Jointly develop with domain assurance managers and Enterprise Risk Management (ERM), Internal Audit, a control and testing plan across domains and entities and agree how findings are rated and reported methodologies.
- Own the entity assurance opinion and the reporting of findings to the entity Board and local management, and support the entity CCO's attestations. Conduct limited independent testing only for agreed gaps in specialist domain coverage or entity-specific local requirements, and independently review resulting findings before they are finalised.
- Contribute to the annual assurance plan and the single master testing plan through the assurance forum, jointly reviewing and signing off scope with domain assurance managers before testing commences to prevent duplicate or gapped coverage. Aggregate and reconcile domain assurance results into a consistent entity-level view, applying a unified issue taxonomy, rating framework, closure criteria, evidenced audit trail, Key Risk Indicators (KRIs), and remediation tracking aligned with Internal Audit standards.
- Map applicable UK and EU regulatory requirements to controls, prepare regulatory assurance reporting, and serve as a primary point of contact toward the relevant EU and UK regulators and supervisors on assurance matters.
- Report to entity Boards and local management teams, clearly distinguishing between domain testing results, own independent testing results, and areas that remain untested, and maintain a disciplined independence boundary, providing independent oversight only and refraining from first-line operational activity.
- Support the Risk Management Framework, Risk Appetite Framework, and Group methodologies by ensuring entity-level assurance outputs feed into the broader governance and risk reporting structure. Track findings using the shared issue taxonomy and closure criteria aligned with Internal Audit standards.
- Support Internal Audit's reliance assessment by maintaining a transparent, evidenced audit trail per test and documenting any risk-accepted changes to testing cadence.
- Document and promptly disclose to the Chief Compliance Officer any actual or perceived conflict of interest that could compromise the independence or objectivity of assurance activities.
WHO YOU ARE
- 5–7 years' experience in second-line compliance assurance, risk, regulatory control, internal audit, or a comparable independent control function within a regulated financial services environment, with experience in the payments sector preferred.
- Demonstrated independence and a firm grasp of the authorities and model, with the judgement to maintain a clear boundary between second-line assurance and first-line operational activity.
- Broad understanding of payments risk and the EU and UK regulatory landscape relevant to payment and e-money institutions, including financial crime, safeguarding, consumer protection, operational resilience, ICT, financial risk, outsourcing, and governance.
- Proven ability to design risk-based assurance test plans and lead end-to-end assurance reviews, from planning and scoping through to reporting and issue validation.
- Advanced knowledge of control testing methodologies, sampling, issue rating, and evidence standards, with the ability to connect control failures to the firm's risk taxonomy first-line appetite.
- Experience engaging with EU and/or UK financial supervisory authorities, with the ability to represent an assurance or compliance function credibly toward regulators and build productive relationships.
- Experience working with GRC platforms, unified issue registers, and issue-management workflows, with attention to detail in the preparation of control findings and management-level documentation.
- Proven ability to work effectively in a matrix environment, collaborating across business teams and with stakeholders at various levels, including senior management and Board members.
- Strong written and verbal communication skills, with the ability to present complex assurance findings clearly to non-specialist stakeholders, senior leadership, Boards, and regulators, and to deliver projects to agreed timelines.
- Familiarity with payments schemes, card networks, and open-banking ecosystems is desirable.
WHAT WE OFFER
At Trustly, you will have the chance to solve meaningful challenges alongside some of the brightest minds in FinTech. Together, we are shaping the future of payments in an environment that celebrates curiosity, collaboration, and innovation. You will be challenged and empowered to grow, making a real impact every step of the way.
Our team is as diverse as the global footprint we serve. At Trustly, we foster a workplace where everyone feels they belong—a place where teamwork thrives, ideas flourish, and we never forget to have fun along the way. We are proud and committed to being an Equal Opportunity Employer and believe an open and inclusive environment enables people to do their best work.
Our Fantastic Benefits (varies by location)
🌴 20 to 30 days of holiday to support a healthy work-life balance
🥳 Monthly team outing allowance to enjoy social events with your colleagues
👶 Parental leave top-up additional support for new parents
☕ On-site perks to make your workday smoother
💚 Well being support our health allowance covers gym memberships, massages, and much more to help you feel your best
PLUS additional benefits designed to enhance your work-life experience!
Shape Your Role and Make an Impact
Join a dynamic environment where you can take ownership, drive change, and continuously embrace new challenges. We’re looking for dedicated and highly motivated individuals who thrive in a fast-paced environment and enjoy collaborating across different areas of the organisation.
