Lead information security GRC strategy and complex assurance initiatives, advise senior stakeholders on risk and compliance decisions, and strengthen security controls across a regulated fintech environment.
Tech Risk & Controls Lead
๐ Description
- Own the technology risk and control register across ICT, Data, AI and third-party technology services.
- Translate risk and security policies into owned, evidence-backed controls across Azure, Azure DevOps/GitHub, Jira and Microsoft 365.
- Oversee ICT third-party risk, including due diligence, provider monitoring, exit planning and DORA information requirements.
- Coordinate technology risk, governance and regulatory reporting, and track audit findings and supervisory actions through to closure.
- Manage technology AI risk controls, including use case inventory, data classification and model or agent change monitoring.
- Automate evidence collection and reporting, and partner with Engineering to embed controls in CI/CD and technology delivery.
๐ ๏ธ Requirements
- 5+ years of experience in Cloud Engineering, Platform Engineering, SRE, DevSecOps, Technology Risk or Technology Audit within a regulated environment, ideally banking, fintech or payments.
- Working knowledge of DORA, ICT risk management frameworks and third-party risk management principles.
- Hands-on experience with Azure, Microsoft 365 security and compliance tooling, and the ability to work with scripts, APIs or automation tools.
- Practical experience using AI tools, agents or LLM-based workflows to improve operational processes.
- Strong written and verbal communication skills in both English and Greek.
- CISA, CRISC or similar professional certifications.
- Experience with GRC platforms, risk data models or workflow-management tools.
- Experience in vendor management, outsourcing oversight or service-level monitoring.
โจ Benefits
- Competitive salary
- Hybrid work flexibility
- 37-hour work week
- Extra paid time off
- Medical & Life insurance coverage
- 24/7 Mental Health support for you and your family
- Employer-sponsored pension plan
- Exclusive perks with special rates on banking products
- Ongoing learning & career development opportunities
- Team activities & events to foster bonding, well-being, and a strong company culture
Full job description
At Snappi, we're building a neobank from the ground up. Our mission is to empower financial freedom through technology, offering innovative and transparent digital banking solutions.
Join us in reshaping the financial landscape!
About the Role
As Tech Risk & Controls Lead, you will help embed risk, controls and regulatory compliance into Snappi's technology environment, ensuring evidence is generated through automation, live data and AI-enabled workflows rather than manual reporting. Partnering with Engineering, Security, Data and Risk teams, you will drive a scalable, technology-first control framework that enables effective governance, regulatory compliance and audit readiness in a cloud-native banking environment.
What youโll do
- Own the Technology risk and control register, including risks, controls, owners, testing results and remediation actions across ICT, Data, ML Ops, Predictive AI, PMO and third-party delivered technology services.
- Translate approved ICT risk and security policies into concrete controls in Azure, Azure DevOps/GitHub, Jira and Microsoft 365, ensuring each control has clear ownership and an identifiable evidence source.
- Lead ICT third-party risk oversight activities, including provider classification, due diligence coordination, SLA and KRI monitoring, exit planning and maintenance of DORA Register of Information requirements.
- Produce and coordinate Technology's contribution to recurring risk, governance and regulatory reporting, including third-party risk reporting, RCSAs, ICT risk indicators, incident reporting and committee materials.
- Track Technology's actions in the ECB AI-enabled cyber threats plan, audit findings, regulatory actions and supervisory requests through to closure, ensuring appropriate evidence is captured and maintained.
- Manage the control aspects of Technology's AI risk framework, including AI use case inventory, data classification and monitoring of model or agent changes.
- Serve as the primary point of contact for Audit, Operational Risk, Compliance and CISO requests into Technology, ensuring they are routed to the appropriate owners and tracked to completion.
- Partner with Technology leaders to strengthen risk ownership and control accountability, providing coordination, visibility and evidence while keeping ownership with the business and engineering teams.
AI-Driven & Automation-Focused Approach
This role will leverage automation, data and AI-enabled workflows to strengthen control monitoring, regulatory reporting and technology governance.
You will contribute to:
- Automating control evidence collection from platforms such as Azure Policy, Microsoft Defender, Entra ID, Purview, Azure DevOps, GitHub and Jira.
- Generating risk, third-party and governance reporting from live data sources rather than manual quarterly exercises.
- Leveraging AI-enabled assessments to support vendor due diligence, control gap analysis and regulatory reviews.
- Mapping new regulatory and policy requirements to existing controls to identify gaps and overlaps more efficiently.
- Working with Engineering teams to embed controls within CI/CD pipelines and technology delivery processes, ensuring governance, segregation-of-duties and security requirements are evidenced by design.
Requirements
Required
- 5+ years of experience in Cloud Engineering, Platform Engineering, SRE, DevSecOps, Technology Risk or Technology Audit within a regulated environment, ideally banking, fintech or payments.
- Working knowledge of DORA, ICT risk management frameworks and third-party risk management principles.
- Hands-on experience with Azure, Microsoft 365 security and compliance tooling, and the ability to work with scripts, APIs or automation tools.
- Practical experience using AI tools, agents or LLM-based workflows to improve operational processes.
- Strong written and verbal communication skills in both English and Greek.
Nice to Have
- CISA, CRISC or similar professional certifications.
- Experience with GRC platforms, risk data models or workflow-management tools.
- Experience in vendor management, outsourcing oversight or service-level monitoring.
Why Join Snappi?
We foster a culture of innovation, trust, and continuous development. We focus on solutions and results. Your work will directly shape the future of banking, making financial services more accessible and impactful. If you're ready to make a difference, weโd love to hear from you!
Benefits
At Snappi, we invest in your well-being, growth, and work-life balance with a benefits package designed to support both your personal and professional journey:
- Competitive salary
- Hybrid work flexibility
- 37-hour work week
- Extra paid time off
- Medical & Life insurance coverage
- 24/7 Mental Health support for you and your family
- Employer-sponsored pension plan
- Exclusive perks with special rates on banking products
- Ongoing learning & career development opportunities
- Team activities & events to foster bonding, well-being, and a strong company culture
Plus, for parents:
- Daycare allowance to help cover preschool costs
- Additional school monitoring days
- Savings plan for your children
We believe diversity makes us stronger. Here, everyone belongs -no matter your background, beliefs, or identity. We hire and support people of all races, religions, colors, nationalities, genders, sexual orientations, ages, marital statuses, and abilities. Your uniqueness is an asset for Snappi.
Similar jobs
Search more Compliance Specialist jobsLead partner onboarding and due diligence across banking, payment, and financial institution relationships, coordinating risk reviews, documentation, approvals, and cross-functional follow-up across geographies.
Own the day-to-day responsible gambling program for an Ontario casino, monitoring player risk, handling sensitive cases, improving interventions, and keeping practices aligned with regulatory requirements.
Europe Trade Compliance Lead
Build and lead Europeโs trade compliance program, overseeing customs operations, cross-border routes, regulatory relationships and controls while partnering across Legal, Tax and Supply Chain to improve execution.
Own and operate Ontarioโs AML/ATF program, leading transaction monitoring, investigations, regulatory reporting, risk assessments, and controls while shaping product and payments decisions.
