Lead IT Risk Manager

Join Upvest, a fast-growing fintech company, as the Lead IT Risk Manager. In this pivotal role, you will own and evolve our IT Risk Framework, provide oversight to the first-line IT GRC team, and lead comprehensive risk assessments. You will also mature our Information Security Management System (ISMS), drive second-line assurance reviews, and lead regulatory alignment and stakeholder management. Enjoy flexibility, development opportunities, and a focus on wellbeing in a hybrid work environment.

• Own and evolve the IT Risk and Business Continuity Management Framework within the second line, ensuring scalability as the business grows.
• Provide independent second-line oversight and challenge to the first-line IT GRC team on the design and effectiveness of IT controls, leading comprehensive risk assessments.
• Lead Upvest's DORA obligations, including ICT risk management, incident classification, and third-party ICT risk oversight, while tracking the regulatory landscape.
• Technical Depth: Deep operational understanding of IT governance standards (e.g., ISO 27001), regulatory risk requirements (BaFin BAIT/MaRisk), and modern resilience standards like DORA
• Experience: Minimum of 5+ years of progressive professional experience in IT Governance, Risk, Compliance, and Security (IT GRC / IT Security) within a regulated financial institution, bank, fintech, or fast-scaling B2B platform environment
• Mindset: A strong product engineering and security-focused mindset, combined with commercial pragmatism and the ability to operate confidently under ambiguity
• Education: University degree in Computer Science, Information Technology, Information Security, or an equivalent academic/professional background
• Communication Skills: Exceptional verbal and written articulation skills in English, with a proven ability to engage credibly with a multilingual international stakeholder base, technical engineering leads, and C-level executives