Head of Internal Control, Operational Risk - CDI (F/H)

Lemonway is a licensed European payment institution that supports marketplaces and crowdfunding platforms in over 29 countries.

We provide secure, compliant, and scalable payment services for the new economy, including KYC, payment processing, fraud detection, fund segregation, and account management services. Our technological and regulatory expertise enables our clients to grow their business while adhering to the most demanding standards of compliance and security.

With over 150 employees, Lemonway is a dynamic and international company at the heart of the digital economy. We combine the agility of a scale-up with the requirements and responsibilities of a regulated financial institution.

The Position

Reporting to our Chief Compliance & Risk Officer, you will be responsible for Lemonway's internal control, operational risk management, and governance activities.

You will ensure that the company's risk profile is correctly identified, assessed, monitored, and communicated, while contributing to the strengthening of its control environment and risk culture.

You will manage a team of two people and work closely with the CEO, senior management, control functions, and operational teams. As a true business partner, you will support the company in its decision-making, while ensuring that its activities remain compliant with applicable regulatory requirements, internal policies, and the defined risk appetite.

This is a strategic and operational role, particularly suited for someone who enjoys building and improving systems in an international, rapidly evolving, and regulated environment.

As this role is focused on the second line of defense, we are looking for experience in operational risk and permanent control within a regulated payment institution. This position is not related to financial control, FP&A, accounting, management control, or financial reporting.

Key Responsibilities:

Internal Control and Permanent Control

• Lead and continuously improve the Level 1 and Level 2 internal control framework.

• Define, maintain, and implement the annual permanent control plan.

• Ensure that controls are properly designed, documented, performed, and justified.

• Develop relevant control indicators and reporting for management and governance bodies.

• Identify weaknesses in the control framework, assess their impact, and coordinate corrective actions.

• Promote a strong culture of control and risk management throughout the organization.

• Contribute to the implementation and optimization of GRC (Governance, Risk, and Compliance) tools and processes.
  

Operational Risks and Risk Management

• Lead the operational risk management framework, including risk identification, assessment, and monitoring.

• Coordinate the preparation and regular updating of the company's risk maps.

• Organize and maintain the Risk Appetite Framework, as well as monitor risk appetite indicators.

• Lead the incident management and reporting process, ensuring that incidents are recorded, analyzed, and followed up appropriately.

• Monitor operational, non-financial, and emerging risks, including risks related to technology, cybersecurity, fraud, outsourcing, and business processes.

• Prepare clear and actionable risk reports for senior management and relevant governance bodies.
  

Governance and Committees

• Prepare, coordinate, and lead the quarterly Risk Committee.

• Support the Chief Compliance & Risk Officer and senior management in their risk-related decision-making.

• Prepare governance materials, dashboards, and presentations that provide a clear view of the company's risk and control environment.

• Coordinate the definition and updating of roles and responsibilities, particularly through RACI matrices.

• Contribute to regulatory and internal reporting processes, including the annual report on internal control, as well as other applicable regulatory reports.
  

Audits and Regulatory Controls

• Coordinate external, regulatory, and internal audits concerning internal control, operational risks, and governance.

• Serve as the primary point of contact for auditors and competent authorities on internal control matters.

• Manage audit requests, collection of supporting documents, follow-up of findings, and associated actions.

• Coordinate the preparation and implementation of corrective and preventive action plans.

• Track the progress of remediation plans and present high-risk or delayed actions to the appropriate governance bodies.

• Coordinate the periodic control program and monitor its implementation in accordance with the defined audit plan.
  

Outsourcing, Business Continuity, and Operational Resilience

• Ensure the robustness and proper execution of the outsourcing framework.

• Contribute to the management of outsourced activities and third-party providers, in accordance with applicable regulatory requirements.

• Lead the company's business continuity and operational resilience activities.

• Maintain and regularly test business continuity plans.

• Participate in crisis management exercises and meetings when necessary.

• Identify opportunities to strengthen Lemonway's resilience and its ability to maintain critical activities in the event of a disruption.
  

Policies, Procedures, and Training

• Assess the need for creation or updating of policies, procedures, forms, and control documents.

• Coordinate the drafting, review, and implementation of internal control and risk management procedures.

• Design or contribute to the creation of training and awareness materials.

• Ensure that documentation is clear, operational, up-to-date, and aligned with the company's operating model.

Experience

• You have at least 8 years of experience in internal control, operational risk, ERM, audit, compliance, or a related field.

• You have worked in a regulated environment, ideally in the payment or fintech sector.

• You have previously managed a team and worked on structuring or transforming a risk management and internal control framework.

Required Skills

• Solid knowledge of internal control and operational risk management frameworks.

• Good understanding of the French and European regulatory environment, particularly ACPR expectations, EBA guidelines, AML/CFT requirements, and PSD2.

• Experience with the functioning of governance bodies and the preparation of reports for senior management.

• Proficiency in transformation, growth, or scale-up environments.

• Experience in implementing or evolving GRC tools.

• Very good level of French and English, both written and spoken.

• Knowledge of German or another European language is an asset.
  

Personal Qualities

• Strong leadership and good management skills.

• Structured and rigorous mindset with strong organizational skills.

• Autonomy, while also enjoying collaborative work.

• Pragmatic, solution-oriented, and results-driven approach.

• Strong analytical skills and great attention to detail.

• Excellent communication and stakeholder management skills.

• Ability to constructively challenge and persuade stakeholders at all levels.

Benefits

• Offices in the heart of Sentier (Paris 2nd)

• Hybrid role (2 days remote/week, and 3 weeks of full remote per year)

• Swile card

• Alan mutual health insurance

• 50% reimbursement of Navigo/Vélib pass

• Access to Gymlib

• Syntec holiday bonus & RTT

Lemonway is committed to promoting diversity, including by fostering gender balance and employing people with disabilities.

Find Jobs in France on Arbeitnow