Senior Manager, Technology Risk Assurance
Job description
Lead a Second Line of Defence technology risk assurance function at a regulated fintech, building an automation-first assurance engine and leading a team of technology risk engineers and assurance specialists. The role covers ITGCs, cloud, IAM, CI/CD, AI/ML controls and regulatory engagement.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · Amsterdam, Netherlands
- Languages
- English
What you'll do
- Build and scale a practical Second Line of Defence technology risk assurance function for a fast-growing, regulated fintech
- Recruit, mentor, and lead a lean, high-performing team of technology risk engineers and assurance specialists
- Lead second-line assurance across ITGCs and IT application controls, cloud infrastructure and database management, CI/CD and change enablement, IAM and privileged access, API and automated data pipeline integrity, and business continuity and disaster recovery
- Build an automation-first assurance engine using AI agents, automated workflows, and custom Python and SQL scripts for continuous control testing, evidence retrieval, and remediation validation
- Establish automated finding lifecycle and remediation governance, surfacing control failures to engineering leads and validating fixes
- Design and execute control frameworks for generative AI, LLMs, agentic workflows, machine learning models, and automated decision engines
- Partner with external auditors and global regulators to defend autonomous testing scripts and AI-agent methodologies
- Translate complex technology risk into clear recommendations for engineers, senior executives, and board-level risk committees
What we're looking for
- 8+ years of progressive experience in technology risk, IT audit, information security assurance, or technology compliance, including proven experience in a Second Line of Defence risk assurance capacity
- Big Four background
- Experience building and testing risk controls
- A track record of recruiting, mentoring, and leading high-performing technical risk or assurance teams
- Deep practical expertise in ITGCs, IT application controls, automated business controls, and SOX compliance within complex distributed architectures
- Hands-on experience assessing cloud risks across AWS or GCP, particularly IAM, privileged access and segregation of duties, Firefighter workflows, CI/CD pipelines, database controls, and modern API security
- Practical ability to write and use SQL, Python, or API scripts to query databases, automate evidence extraction, and reduce manual sampling
- Strong conceptual and practical understanding of risks and controls around AI/ML systems, LLMs, and automated decision engines, including data drift, access guardrails, and model integrity
- Proven ability to constructively challenge First Line engineering leads while maintaining the credibility to defend automated testing methodologies to external auditors and regulatory examiners
- Solid working knowledge of industry control frameworks such as SOC 1/2, ISO 27001, and NIST CSF
Nice to have
- Direct experience building or deploying AI agents, LLM-driven audit assistants, or automated compliance and testing pipelines
- Fintech experience, particularly within a high-growth fintech, payments platform, digital bank, or cloud-native technology company
- People management experience
- Familiarity with international financial technology regulations and expectations, including MAS TRM, FCA, HKMA, DORA, ASIC, and FinCEN
- Experience integrating GRC platforms, BI dashboards such as Tableau or Looker, and continuous compliance monitoring tools
- Relevant certifications such as CISA, CISSP, CRISC, CISM, or AWS/GCP certifications
Your team
Regulatory & Compliance
Risk is part of Regulatory & Compliance at Airwallex. The team builds the trust, discipline, and operational resilience required to scale a generational financial platform, turning regulatory complexity into strategic control across 30+ markets.
Apply
Direct apply at Airwallex
Opens the job posting at Airwallex
About Airwallex
The AI-native financial operating system for a real-time, intelligent economy
Airwallex is the AI-native financial operating system for a real-time, intelligent economy. More than 675,000 businesses, including McLaren Racing, Qantas, SHEIN, and TikTok, use Airwallex, directly or through its platform partners, to run their financial operations or build and monetize financial products of their own. Founded in Melbourne in 2015, Airwallex is a regulated backbone behind global payments with 85+ licenses and financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific.
Mission
To build the infrastructure global commerce runs on.
Key facts
- more than 2,700 people
- 2015
- San Francisco and Singapore (co-headquartered)
- Financial technology / payments
- More than 675,000 businesses use Airwallex
- 85+ licenses
- Financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific
- More than 2,700 people across 27 offices
- Started in Melbourne in 2015
- Co-headquartered in San Francisco and Singapore
- Operates across 30+ markets
Partners & customers
What they value
- Builders with founder-level energy
- Move fast with good judgment
- Dig in with real curiosity
- Make calls from first principles
- Own the outcome
- Comfortable with ambiguity
- Say what you mean, lead with respect
- Simplify complexity