PayXpert is a pioneer in omnichannel payments and a subsidiary of the Société Générale group. We serve a diverse array of local and international brands both online and in-store, spanning various sectors. At the heart of our vision is the creation of a payment ecosystem that fosters an inclusive commerce experience for all.

We have developed services that focus on revenue optimisation, performance enhancement, fraud prevention, and seamless payment orchestration. Our expertise extends to cross-border payments and alternative payment methods such as Alipay+ and WeChat Pay. Furthermore, our solutions are designed with accessibility in mind, offering features that cater to the visually impaired, ensuring everyone can engage in the modern commerce landscape.

The Risk Lead is responsible for leading the effective implementation, operation and continuous development of PayXpert’s Enterprise Risk Management Framework. The role ensures that material financial, operational, technological, third-party and strategic risks are consistently identified, assessed, monitored and reported across the organisation.

Key Responsibilities

Enterprise Risk Management Framework

- Lead the implementation, maintenance and continuous improvement of PayXpert’s Enterprise Risk Management Framework.
- Translate the organisation’s risk strategy and risk appetite into practical methodologies, processes and monitoring mechanisms.
- Ensure consistent identification, assessment, treatment and documentation of risks across departments and legal entities.
- Maintain the organisation’s risk taxonomy, risk registers, assessment criteria and supporting governance documentation.
- Recommend improvements to the Risk Framework based on regulatory developments, business evolution, incidents and control findings.
- Accountability: Accountable for ensuring that the Enterprise Risk Management Framework is operationally effective, consistently applied and appropriately adapted to PayXpert’s risk profile.

Risk Assessment Control Effectiveness

- Lead and coordinate Risk and Control Self-Assessments across business, operational and support functions.
- Provide guidance and constructive challenge to risk and control owners regarding the identification and evaluation of risks and controls.
- Assess the design and operating effectiveness of key controls and identify material control weaknesses.
- Ensure that residual risk assessments are supported by appropriate evidence and remain aligned with the organisation’s risk appetite.
- Consolidate assessment outcomes and identify systemic, cross-functional or emerging risk themes.
- Accountable for the quality, consistency and reliability of risk assessments and control evaluations across the organisation.

Risk Monitoring, Reporting and Governance

- Define and maintain appropriate Key Risk Indicators, thresholds and escalation criteria.
- Monitor the organisation’s risk exposure and identify emerging trends, deteriorating controls or risk appetite breaches.
- Prepare clear and decision-oriented Risk reports for senior management, governance committees and relevant Group stakeholders.
- Support the Chief Compliance & Risk Officer in preparing Risk Committee materials, regulatory reporting and executive-level presentations.
- Ensure that significant Risk matters are escalated promptly and supported by clear analysis and recommended actions.
- Accountable for providing senior stakeholders with accurate,



timely and meaningful visibility over the organisation’s principal risks.

Incident Management and Corrective Actions

- Provide Risk oversight of material operational incidents, control failures and significant business disruptions.
- Support root-cause analysis and assess the wider implications of incidents across processes, systems and legal entities.
- Lead the definition, monitoring and challenge of corrective action plans arising from incidents, risk assessments, audits, regulatory findings and control reviews.
- Evaluate the adequacy of remediation measures and verify that actions address the underlying risk.
- Escalate overdue, ineffective or insufficient corrective actions to the relevant governance bodies.
- Accountable for ensuring that material Risk issues are appropriately analysed, remediated and monitored through to effective closure.

Business Partnership and Independent Risk Advisory

- Act as the principal Risk partner for business, Technology, Operations, Finance, Product and corporate functions.
- Provide independent advice and constructive challenge on new products, strategic initiatives, material process changes and third-party arrangements.
- Support risk-based decision-making without assuming ownership of first-line business risks or controls.
- Ensure that Risk considerations are embedded at an early stage of projects and organisational changes.
- Communicate complex Risk matters clearly and proportionately to technical and non-technical stakeholders.
- Accountable for delivering credible, independent and commercially informed Risk advice while preserving clear first- and second-line responsibilities.

Functional Leadership and Risk Capability

- Coordinate the day-to-day priorities and delivery of the Risk function under the strategic oversight of the Chief Compliance & Risk Officer.
- Establish consistent working practices, standards and documentation across Risk activities.
- Provide technical guidance, coaching and knowledge sharing to colleagues involved in Risk and control activities.
- Promote strong Risk ownership and awareness across all levels of the organisation.
- Contribute to the future development, capability and organisational maturity of the Risk function.
- Accountable for strengthening Risk capability, coordination and technical standards across the organisation.

Requirements

- Bachelor’s degree in Risk Management, Finance, Economics, Business Administration, Law or another relevant discipline. A postgraduate qualification in Risk Management, Financial Services, Business Administration or a related field would be considered an advantage.
- Relevant professional qualifications, such as IRM, FRM, PRM, CISA, CRISC or equivalent, would be highly desirable.
- Minimum of 8–10 years of progressive experience in Enterprise Risk Management, Operational Risk, Internal Controls or Risk Governance within financial services, payments, banking or fintech environments. Minimum of 6 years performing responsibilities comparable to those described in this role, including Enterprise Risk Management, Risk and Control Self-Assessments, operational risk oversight, internal control evaluation, risk reporting,



corrective action management and second-line-of-defence activities.
- Proven experience supporting senior governance committees, regulatory inspections, internal or external audits and the management of material incidents or control deficiencies.
- Previous experience within a regulated Payment Institution, Electronic Money Institution or banking environment would be considered a strong advantage.
- Familiarity with relevant frameworks and regulatory requirements, including DORA, PSD2 and applicable EBA guidance.
- Professional fluency in English is required. Professional proficiency in French or Spanish would be highly desirable.

Our Culture & Ways of Working Our culture is built around people, ownership and continuous progress. We strive to create an environment where individuals feel trusted, supported and challenged to grow, with regular feedback and meaningful follow-up.

We value collaboration over hierarchy. Ideas can come from anywhere, and every voice matters; we expect our teams to contribute, challenge and shape the way we work.

We are strongly product-oriented, with a hands-on mindset and a genuine openness to new ideas. Innovation is not limited to specific teams; it is a shared responsibility.

We believe in continuous improvement over perfection. Each quarter, we actively look for ways to optimise our processes, enhance our solutions and raise the bar as an organisation.

At PayXpert, we want you to grow, feel valued and enjoy your work experience. Here’s what we bring to the table:

Compensation & Stability

- Competitive salary package with a permanent contract
- Flexible working hours and a wellbeing-focused intensive summer schedule.

Work Environment & Flexibility

- Hybrid working model
- International, diverse and collaborative teams across Spain, France & the UK
- Regular engagement events to build strong connections

Growth & Career Development

- Real ownership and visible impact on key HR initiatives
- Continuous learning opportunities tailored to your development plan
- Free language courses (Spanish, French, English) to support your global career
- Involvement in exciting and innovative fintech projects

Recognition & Rewards

- Employee referral bonus program

Apply now and let’s build the future of payments together. We believe in equal employment opportunity, a culture built around gender-balanced development opportunities for our professionals, a adaptable and healthy working environment, and general equality in the workplace.

The personal data collected is intended for PAYXPERT and used to process your application with a view to possibly offering you an employment contract. It is intended for use by the departments responsible for recruitment. This information will be kept for a maximum of 2 years if your application is not successful.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, you have the right to access, rectify, delete, portability and limit the Processing of Data concerning you. You may also, for legitimate reasons, object to the Processing of your Data. You may exercise your rights by contacting our DPO at the following address [email protected] or at the following postal address Av.

Diagonal 440, 08037 BARCELONA,SPAIN. For more information on the Processing of your Personal Data by PAYXPERT, please consult our privacy policy available on our website at the following address: https://www.payxpert.com/privacy-policy/

.

📌 Risk Lead (Barcelona)
🏢 Payxpert
📍 Barcelona