Salary: From £80,000 to £110,000 + Equity & Benefits

Working Policy: We operate a hybrid policy with a requirement of 3 days a week in the office

About Stream

Stream was founded with the mission to provide fair financial tools to the everyday worker. Offered through destination employers like Greene King, Bupa, Burger King, Asda and the NHS, our award-winning platform helps over three million people to earn, learn, save, spend and borrow on their own terms, all in one smartphone app.

Stream is unique: VC backed and growing at scale, but with a social conscience. Some of the world's leading impact funds were our founding investors, and we operate on a social charter, which means every product and service we create must measurably improve financial wellbeing.

You’d be joining a team of over 300 passionate, ambitious people across Europe and the USA, building a category-defining product, and united by that same mission.

The Opportunity:

Stream operates across multiple regulated entities and jurisdictions (UK, US and Spain), and needs a single senior owner for risk across the whole Group - not just within one product line. You'll take ownership of the Group Risk Management Framework, the three lines of defence model and the Group and entity Risk and Compliance Committee structure, and use it to provide independent, credible second line oversight across every principal risk category the Group faces: commercial and strategic, financial (including but not limited to consumer credit), clients/product/business practices, people, legal and regulatory, and operational. This is a genuinely enterprise-wide remit: you'll be the person people will look to for an independent view on risk, wherever in the business it sits.

The Team:

You'll report into the Director of Compliance, own the Group Risk Management Framework on behalf of the Risk Committee, and be a key voice at Group and entity Risk and Compliance Committees, with periodic reporting into the Group Board of Directors. You'll work closely with first line business leaders and risk owners across all Group entities providing constructive challenge across all risk categories, and make sure the three lines of defence model works in practice, not just on paper. You'll also support risk sub-committees (for example on credit risk) and act as a key contact for regulators on risk-related matters.

What will you be doing?

• Own the Group Risk Management Framework on behalf of the Risk Committee, keeping it current, embedded and reviewed at least annually.
• Maintain and evolve the Group's risk categorisation model - commercial and strategic, financial, clients/product/business practices, people, legal and regulatory, and operational risk - ensuring consistent use across all Group entities.
• Design, propose and monitor Key Risk Indicators (KRIs) across principal risk domains, defining thresholds in line with risk appetite; track performance monthly, challenge first line data, and escalate breaches or adverse trends to Committees and Boards with recommended remediation.
• Maintain and evolve the Group Risk Assessment Matrix, ensuring it reflects the current risk landscape and appetite; lead the introduction of entity-level risk assessments to reflect the distinct regulatory permissions and risk profiles.
• Oversee the enterprise risk register and entity-level risk registers and RCSAs, ensuring risks are identified, scored (likelihood and impact), owned and appropriately reviewed.
• Set and monitor risk appetite, and oversee risk treatment decisions (accept, reduce, transfer or avoid) made by risk owners, including review of risks accepted outside appetite.
• Provide independent second line oversight and effective challenge across all principal risk categories Group-wide.
• Run the escalation and issue management process from entity Risk and Compliance Committees up to the Group Risk Committee and entity/Group Boards, including risk event and incident theme reporting.
• Assist the Director of Compliance with the creation and delivery of the Compliance Monitoring Plan ensuring findings feed back into the risk register and treatment plans.
• Deliver clear, decision-useful risk MI and reporting to Group and entity Risk and Compliance Committees, entity Boards and, where relevant, regulators.
• Build out the risk function as the Group scales, recruiting and developing specialist second line capability.