Risk Management Director (Worldwide/Remote)

ZEN.COM is a smart financial app designed for your everyday life – at home and on the go. It enables fast, secure, and effortless payments, online shopping, and personal finance management, offering cashback on purchases, spending control, and purchase protection. The built-in multi-currency account supports spending abroad or international shopping with great exchange rates and no hidden fees.

• Minimum 8 years of experience in risk management within regulated financial services.
• Senior-level experience in Electronic Money Institutions (EMIs) and/or Payment Institutions / Payment Service Providers (PSPs).
• Experience in a multi-jurisdictional environment covering EU/EEA markets with passporting exposure.
• Experience interacting directly with financial regulators and Boards on risk matters.
• Experience building or significantly developing a risk function including team hiring and structuring.
• Comprehensive understanding of PSD2, PSD3 developments, EMI licensing, own funds calculations, and safeguarding.
• Practical experience implementing EBA Guidelines on Internal Governance, Outsourcing Arrangements, and ICT Risk Management (DORA).
• Strong understanding of acquiring risk models, merchant risk management, chargeback frameworks, and Visa/Mastercard scheme requirements.
• Experience with operational risk event management, business continuity planning, and incident management.
• Expertise in outsourcing risk assessment, vendor due diligence, and monitoring critical service providers.
• Ability to operate independently as a second-line function providing challenge to senior management and the Board.
• Commercial awareness balancing risk rigor with pragmatism.
• Excellent written and verbal communication with ability to produce board-ready reports, regulatory submissions, and policies.
• Strategic thinking anticipating regulatory trends and emerging risks.
• Experience managing relationships across business units, regulators, auditors, card schemes, and partners.
• Proven ability to recruit, develop, and retain talent in a lean, high-performing team.
• Openness to leveraging technology for risk management including automation and data analytics.
• Sharing of Gallup test or similar assessment results is appreciated.

• Operate and enhance the Enterprise Risk Management (ERM) framework, including Risk Management Policy and Risk Appetite Statement.
• Oversee the enterprise-wide risk register to identify, assess, monitor, and report all material risks.
• Provide inputs to the Internal Capital Adequacy Assessment Process (ICAAP) or equivalent under EMI regulations.
• Ensure alignment with Bank of Lithuania guidelines, EBA guidelines, PSD2, and other applicable regulations.
• Develop risk appetite metrics and key risk indicators (KRIs) with escalation procedures.
• Serve as primary contact for regulators and strategic stakeholders such as VISA and Mastercard.
• Prepare and present regulatory submissions, remediation plans, and cost-benefit analyses.
• Track regulatory developments across jurisdictions and adapt risk frameworks accordingly.
• Deliver Board-level Risk Reports covering risk profile, key incidents, and risk appetite posture.
• Participate in Board committees and internal governance bodies.
• Advise Boards and C-level on risk implications of strategic decisions including product launches and M&A.
• Oversee operational risk management including incident management and business continuity planning.
• Manage ICT risk framework and operational resilience program, ensuring DORA compliance.
• Manage incident management and escalation processes, including regulatory notifications.
• Own third-party and outsourcing risk management framework consistent with EBA guidelines.
• Ensure due diligence, monitoring, and risk assessment of material outsourcing arrangements.
• Manage outsourcing registers and timely notifications.
• Oversee vendor assessments and counterparty risk evaluations.
• Manage risk related to card acquiring activities including merchant risk and fraud monitoring.
• Manage payment operations risk including transaction limit frameworks.
• Ensure controls for agent and distributor networks per PSD2 requirements.
• Provide second-line challenge to first-line business functions on risk matters.
• Ensure the operational effectiveness of the three-lines-of-defence model.
• Own risk-related policies, ensuring they are current and Board-approved.
• Build, lead, and develop the Risk team including hiring and performance management.
• Foster a strong risk culture through training and engagement.
• Manage Risk function’s budget and resource allocation.