Senior Risk Analyst
Who we are:
TrueLayer is Europe’s fastest-growing Pay by Bank network. We power smarter, safer and faster payments by combining real-time bank payments with financial and identity data. E-commerce, iGaming and Financial Services businesses use our products to onboard new users, accept money and make payouts in seconds, and at scale. Live across 22 countries and with 1 new user joining TrueLayer’s Pay by Bank network every 3 seconds, we’re in a very exciting growth stage. This is why we’re expanding the team across our offices in London, Milan, and Dublin.
Listed in Sifted as one of the 100 fastest growing start-ups in UK & Ireland, and CNBC’s World Top Fintech Companies, we’re trusted by industry leaders like RyanAir and Just Eat Takeaway for continued innovation within our payment products. To date, we’ve raised over $300 million from world-renowned investors including Stripe, Tiger Global, Northzone, and Tencent. But this is just the beginning.
We’re looking for people who are excited about joining the Pay by Bank revolution and helping us change the way the world pays. Could this be you?
Description
As a Senior Risk Analyst at TrueLayer, you'll play a critical role in ensuring we can innovate, scale and expand our Pay by Bank products safely across the UK and Europe. Reporting to the Head of Compliance, you'll work across our Risk and Compliance function and the wider business to identify, assess and manage the risks that come with operating a growing, multi-jurisdictional payments business.
This is a hands-on, second-line risk role with meaningful ownership and visibility. You'll lead key risk assessment activities, challenge existing controls and work with teams across the business to ensure material risks are understood, appropriately mitigated and escalated where necessary. Your work will help protect customer funds, maintain regulatory confidence and ensure that business growth is supported by effective risk management.
You'll be expected to go beyond documenting risks. You'll turn complex risk information into clear, actionable insight, influence decisions and follow through to ensure that agreed controls and mitigations are effective. You'll help the business understand not only where risks exist, but what they mean, what needs to change and how we can manage them within our risk appetite.
What success looks like
Risk visibility: Material risks across our products, operations and customer portfolio are identified, assessed and clearly understood by the right stakeholders.
Effective controls: Risk assessments and control testing lead to practical improvements, with weaknesses escalated and remediation tracked through to completion.
Safer innovation: New products, payment methods and material business changes are assessed early, enabling informed decisions before implementation.
Stronger customer risk management: Customer and counterparty exposures are assessed and monitored, with appropriate risk ratings, limits and mitigations in place.
Confident decision-making: Senior management and relevant governance committees receive clear, evidence-based reporting that supports timely and informed decisions.
What we expect from you as a Senior Risk Analyst
Risk Self-Assessments & Frameworks
Facilitate RCSAs: Lead and coordinate the Risk & Control Self-Assessment (RCSA) process across business units to map, evaluate, and challenge operational and product-level risks.
Maintain Risk Registers: Own the maintenance and quality of the corporate risk register, ensuring material risks, KRIs, owners and mitigation actions are current and actionable.
Control Testing: Execute or coordinate independent control testing, assess design and operating effectiveness, and track remediation of identified weaknesses.
Impact Analyses & Governance
Change Risk Impact Analysis: Execute detailed risk impact analyses for structural business adjustments, major system updates, or shifting regulatory mandates (such as DORA or FCA Operational Resilience rules).
Scenario Analysis & Stress Testing: Model potential "tail-risk" events, assessing how extreme merchant defaults, system outages, or fraud spikes would impact the firm's capital and operational capacity.
Board & Regulatory Reporting: Translate complex risk insights into concise, data-driven dashboards and reports for the Audit & Risk Committee (ARC), regulated Board, and authorities.
Product Risk Management
New Product Risk Assessment (NPAP): Conduct end-to-end risk assessments for new payment features, rails, and cross-border capabilities before deployment.
Product Safeguarding: Evaluate the structural risk of payment flows to ensure compliant isolation and safeguarding of user funds under FCA, CBI, and Swedish FSA rules.
Vendor & Third-Party Risk: Perform risk assessments on critical third-party product dependencies, including payment gateways, and cloud infrastructure.
Customer Risk Management
Customer Risk Profiling: Work with FinCrime and relevant business teams to maintain effective customer risk segmentation, ensuring risk ratings inform appropriate monitoring, limits and mitigation measures.
Credit & Exposure Monitoring: Monitor ongoing customer portfolio health, evaluating settlement cycles, and potential exposure to consumer credit or liquidation risks.
Threshold & Limit Management: Work with FinCrime to define and adjust transactional velocity limits and reserve requirements for high-risk customer categories.
About You
Curious, pragmatic and independent-minded. Comfortable challenging constructively and working in a fast-moving environment.
Experience: Relevant and demonstrable experience in risk management (Second Line of Defence) within a regulated payment institution, Electronic Money Institution (EMI), or fintech .
Domain Expertise: Proven track record of independently running RCSA cycles , conducting product risk reviews, and designing customer risk matrices.
Regulatory Acumen: Strong familiarity with European and UK payment regulations, including PSD2/PSD3, FCA operational resilience guidelines, and safeguarding requirements.
Analytical Skills: Advanced Excel to pull transactional data, analyse risk trends, and build automated KRI dashboards.
Education: Bachelor’s degree in Risk Management, Finance, Business, Law, or a related analytical discipline.
Group collaboration: Comfortable operating within a matrixed, multi-jurisdictional risk and compliance function.
Governance : Confident presenting to Boards and Senior Management, providing clear, evidence-based reporting on risks.
Language : Fluent English, both written and spoken.
Don’t meet all the requirements?
Multiple studies have shown that women and people of underrepresented groups are sometimes less likely to apply to jobs unless they meet every single requirement. At TrueLayer, we are committed to building a diverse workforce, so if you are excited about this role and have the essential skills, but not the entire checklist - we’d still love to hear from you!
Benefits
What you can expect from us:
UK
Meaningful equity in the company 💰
Flexible hours and hybrid working. Split your time 50/50 between working from home and our welcoming offices in London and Milan , spending 2-3 days per week in the office.
Need to collect the kids from childcare? Love a workout in the gym first thing? No worries, we trust you to do your best work within our hybrid framework 🧘
24 days holiday as standard ✈️ with flexible bank holidays, so you can take those days whenever you like 🌍
12 fully-paid wellbeing days a year and your birthday off (on top of the holiday allowance) 🕊️
2 volunteering days to support causes important to you
90 day ‘work from abroad’ policy 👩💻☀️
Generous parental leave, above and beyond statutory requirements 👪
Competitive pension contribution at 4% & 4% 🧓
Private health insurance from the day you start 🧑⚕️
Membership of mental wellbeing platform Spill 🧘🏽♀️
A £1000 budget to spend on learning & development each year 📚
Free lunch from Just Eat 🥙 3 days a week when you are in the office
ITALY
Competitive salary and meaningful equity in the company 💰
Flexible hours and hybrid working. Split your time 50/50 between working from home and our welcoming offices in London and Milan , spending 2-3 days per week in the office.
Flexible holiday policy, with 24 days as standard ✈️
2 volunteering days to support causes important to you 🌳
Life Cover as part of our benefits package, offering financial protection and peace of mind for you and your loved ones 🛟
Generous parental leave, above and beyond statutory requirements and with no minimum tenure 👩👩👦
Meal vouchers for every day you’re working, including while remote
Free lunch from Deliveroo 🥙 (If you choose to work from the office on Tuesdays, Wednesdays and Thursdays)
Budget to spend on learning & development each year 📚
12 fully-paid wellbeing days a year and your birthday off (on top of the holiday allowance) 🕊- these are extra days of leave focused on your wellbeing - you just book them off and spend them how you wish!
Membership of mental wellbeing platform Spill 🧘
DUBLIN
Meaningful equity in the company 💰
Flexible hours and hybrid working. Split your time 50/50 between working from home and our welcoming offices in Dublin 🇮🇪 spending 2-3 days per week in the office.
Need to collect the kids from childcare? Love a workout in the gym first thing? No worries, we trust you to do your best work within our hybrid framework 🧘
24 days holiday as standard ✈️ with flexible bank holidays, so you can take those days whenever you like 🌍
12 fully-paid wellbeing days a year and your birthday off (on top of the holiday allowance) 🕊️
2 volunteering days to support causes important to you
Life Cover as part of our benefits package, offering financial protection and peace of mind for you and your loved ones 🛟
90 day ‘work from abroad’ policy 👩💻☀️
Generous parental leave, above and beyond statutory requirements 👪
Competitive pension contribution at 4% & 4% 🧓
Private health insurance from the day you start 🧑⚕️
Membership of mental wellbeing platform Spill and premium Calm subscription
A €1000 budget to spend on learning & development each year 📚
Free lunch from Just Eat 🥙 up to 3 days a week when you are in the office
At TrueLayer, we don’t just do inclusion and diversity. We embrace people that have different opinions, perspectives and personalities. Because we believe that by seeing the world from all sorts of angles, we can make life better for all the people who live in it. We strongly encourage applications from underrepresented groups (e.g. people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from all socio-economic backgrounds). If you’d like to discuss alternative working patterns, please let us know.
We will always aim to make appropriate adjustments to ensure we are fully inclusive to people with different needs during our interview process. So if you need us to make any adjustments to suit your individual needs please let us know - we’ll be happy to support you.