WHO WE ARE

At Trustly, we're building a smarter, faster, and more secure financial future by revolutionizing the world of payments. As a global leader in Open Banking Payments, we are establishing Pay by Bank as the new standard at checkout, providing unparalleled freedom, speed, and ease to millions of consumers and merchants worldwide.

Our Ambition: To build the world’s most disruptive payment network and redefine what the payment experience should feel like.

Trustly is a global team of innovators, collaborators, and doers. If you are driven by a strong sense of purpose and thrive in a dynamic, entrepreneurial, and high-growth environment, join us and be part of a team that’s transforming the way the world pays.

ABOUT THE ROLE

The Assurance Risk Manager will provide an independent, entity-level assurance opinion across Trustly's UK and EU licensed entities, covering all material controls relevant to each entity.

The remit extends to all material risk and control domains, including financial crime, safeguarding, consumer protection, operational resilience and ICT, financial risk, outsourcing, and governance. The role holder will work within a community of assurance managers, some focused on specific domains and others on individual regulated entities, and will own the entity-level assurance view, including understanding local regulatory requirements, ensuring findings reach the entity Board and local management, and supporting the entity Chief Compliance Officer's attestations.

The role holder will confirm the local applicability of domain testing scope and technique, agree the reports that reach the entity Board, and serve as a primary point of contact for assurance matters toward the relevant EU and UK regulators and supervisors. The role requires close collaboration with domain assurance managers, Enterprise Risk Management, and Internal Audit to ensure that assurance over Trustly's controls is evidenced consistently.

The role is suited to a seasoned assurance, risk, or second-line professional with experience in regulated financial institutions and a firm grasp of the independence boundaries that keep assurance credible.

What you'll do

• Maintain an independent entity assurance opinion across all material risk areas for Trustly's EU and UK licensed entities, ensuring that assurance results are comparable, aggregated consistently, and mapped to the Enterprise Risk Management risk taxonomy.
• Jointly develop with domain assurance managers and Enterprise Risk Management (ERM), Internal Audit, a control and testing plan across domains and entities and agree how findings are rated and reported methodologies.
• Own the entity assurance opinion and the reporting of findings to the entity Board and local management, and support the entity CCO's attestations. Conduct limited independent testing only for agreed gaps in specialist domain coverage or entity-specific local requirements, and independently review resulting findings before they are finalised.
• Contribute to the annual assurance plan and the single master testing plan through the assurance forum, jointly reviewing and signing off scope with domain assurance managers before testing commences to prevent duplicate or gapped coverage. Aggregate and reconcile domain assurance results into a consistent entity-level view, applying a unified issue taxonomy, rating framework, closure criteria, evidenced audit trail, Key Risk Indicators (KRIs), and remediation tracking aligned with Internal Audit standards.
• Map applicable UK and EU regulatory requirements to controls, prepare regulatory assurance reporting, and serve as a primary point of contact toward the relevant EU and UK regulators and supervisors on assurance matters.
• Report to entity Boards and local management teams, clearly distinguishing between domain testing results, own independent testing results, and areas that remain untested, and maintain a disciplined independence boundary, providing independent oversight only and refraining from first-line operational activity.
• Support the Risk Management Framework, Risk Appetite Framework, and Group methodologies by ensuring entity-level assurance outputs feed into the broader governance and risk reporting structure. Track findings using the shared issue taxonomy and closure criteria aligned with Internal Audit standards.
• Support Internal Audit's reliance assessment by maintaining a transparent, evidenced audit trail per test and documenting any risk-accepted changes to testing cadence.
• Document and promptly disclose to the Chief Compliance Officer any actual or perceived conflict of interest that could compromise the independence or objectivity of assurance activities.