SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: EUR 4,400 - 5,170 / monthly
Lightspark is building the Money Grid, modern open financial infrastructure for global payments. The company is seeking a Risk Manager to lead the risk management function of its Estonian regulated entity, an e-money institution and crypto-asset service provider.
In this role, you will report to the Management Board and own the company's risk management framework end-to-end. You will be responsible for building out and running a comprehensive risk framework that keeps pace with fast-growing business operations, covering risk appetite, key risk indicators, ICT risk, business continuity, and safeguarding of client funds.
Key responsibilities include:
- Develop and maintain risk management policies, procedures, and annual review cycles
- Map company risks to first-line owners and define measurable key risk indicators with ongoing monitoring
- Build and maintain risk and control registers with documented annual review processes
- Finalize and run the Risk Appetite Statement, including quarterly reporting to Management and Supervisory Boards
- Lead company-wide risk assessments for new products, business lines, and material changes
- Develop card payment fraud risk processes in collaboration with Operations
- Lead ICT and security risk management in line with DORA requirements, including ICT risk registers and vendor management
- Own business continuity management, maintaining business impact analyses and plans as the business evolves
- Manage ICT third-party risk and vendor compliance with DORA requirements
- Lead risk-related supervisory reporting, including operational risk and DORA reporting
- Oversee finance-related risks including own funds calculations and safeguarding account flows
- Prepare risk management reports for governance bodies
- Build risk awareness culture through training and internal workshops
- Collaborate with Compliance, AML, Legal, Operations, Product, Engineering, and Finance teams
This is a second-line function role requiring independent judgment and the ability to translate regulation into working processes. You will work closely with the Management Board, Supervisory Board, and cross-functional teams, providing practical risk guidance that supports sustainable growth.
REQUIREMENTS:
- 3+ years of risk management experience at a credit institution, e-money institution, payment institution, investment firm, crypto-asset service provider, or equivalent financial sector/public authority experience
- Ideally, experience working closely with and/or coordinating communication with the Estonian FSA
- University degree in finance, economics, business, law, or comparable field (preferred)
- Solid knowledge of EU and Estonian risk management regulation and guidelines, including DORA, EBA guidelines on internal governance, ICT and security risk, outsourcing, and own funds/safeguarding requirements under EMD and PSD2
- Hands-on experience building risk frameworks such as risk appetite statements, key risk indicators, risk and control registers, business impact analyses, and business continuity plans
- Good understanding of ICT risk, information security, and third-party risk management
- Strong project management skills and structured working approach with ability to manage multiple workstreams against regulatory deadlines
- Proactive attitude and independence to operate as a second-line function, proposing initiatives and developing ideas
- Good communication skills to present risk matters to governance bodies and explain to non-risk audiences
- Plus: knowledge of virtual assets, blockchain technology, crypto-asset custody, card payments and fraud, AML/CFT and sanctions, data protection, or embedded finance and banking-as-a-service
- Working proficiency in Estonian and English
- On-site 5 days per week, full-time, permanent position
