Risk & Controls Manager

About the role

Join a remote‑first, global team rebuilding how money works. This role runs the internal posture engine including the risk register, critical control monitoring, evidence, audit operations and GRC tooling, and keeps risk state current for the Lead and Risk Committee. Drata is the register of record.

What you'll do

• Operate the risk register from the Security Programme threat model; track treatment, decisions, owners and exceptions
• Maintain the ISMS and security policy library for audit readiness and draft standards when requested
• Run Drata as the control and evidence system including the Statement of Applicability and automation
• Execute critical control monitoring, health checks, drift flags and route drift to the SOC; maintain evidence for audits
• Coordinate audits and customer questionnaires; prepare management review packs and ISMS readiness
• Track residual risk and gap closure; report register state to the Lead and Risk Committee

What they're looking for

• Hands-on experience running a risk register, control library and audit cycle (ISO 27001 and/or SOC 2)
• Proficiency with GRC platforms (Drata or equivalent) and turning monitoring into evidence
• Ability to coordinate audits and customer questionnaires with named control owners
• Precise written work; register and Statement of Applicability quality matters
• Strong stakeholder management with control owners and auditors
• CISA, ISO 27001 Lead Implementer or Auditor, or equivalent certification

For applicants in Nigeria

• The listing states worldwide eligibility, with remote regions US, LATAM and EMEA; confirm whether Nigeria is eligible
• The listing does not state a timezone requirement; confirm before interviewing
• The listing does not specify whether hires are contractors or employees
• The US pay range is 150000 USD to 206000 USD; for non‑US candidates compensation will be determined during interview and may differ