We would appreciate it if you could share your Gallup test or similar assessment results, if available. You can find a dedicated link in the application form on the next page.

Responsibilities

Enterprise Risk Management Framework

Operate and enhance the Enterprise Risk Management (ERM) framework, including the Risk Management Policy, Risk Appetite Statement, and supporting methodologies. Oversee the enterprise-wide risk register, ensuring all material risks are identified, assessed, monitored, and reported. Provide inputs and scenarios to the annual Internal Capital Adequacy Assessment Process (ICAAP) or equivalent own funds adequacy assessment required under EMI regulations. Ensure the risk management framework is aligned with Bank of Lithuania guidelines, EBA guidelines (including EBA Guidelines on Internal Governance), and PSD2 requirements as well as other applicable regulations. Develop and maintain risk appetite metrics and key risk indicators (KRIs) with appropriate thresholds, triggers, and escalation procedures. Serve as the primary point of contact with the regulators and strategic stakeholders (i.e. VISA, Mastercard) on all risk management, including supervisory inspections, thematic reviews, and ad-hoc information requests. Prepare and present regulatory submissions, including responses to supervisory findings, remediation plans, and cost-benefit analyses supporting risk methodology decisions. Track and assess the impact of regulatory developments across relevant jurisdictions and proactively adapt internal risk management frameworks. Prepare and deliver the Board-level Risk Reports on a periodic basis, covering the institution’s risk profile, key incidents, and risk appetite posture, risk maps. Participate in and report to relevant Board committees and internal governance bodies. Ensure risk reporting is decision-oriented, with clear escalation of material issues, consistent reporting periods, and appropriate granularity for Board consumption. Advise Boards and C-level on risk implications of strategic decisions, including product launches, market expansions, partnerships, and M&A activity.

Operational Risk Management

Oversee the operational risk management framework, including incident management, business continuity planning, and operational risk event reporting. Oversee ICT risk management framework, third-party ICT risk management, and operational resilience program. Ensure appropriate ICT risk governance, including DORA Article 13-compliant ICT risk assessment and reporting. Manage the institution’s incident management and escalation process, including regulatory notification requirements under PSD2 and DORA.

Third-Party and Outsourcing Risk Management

Own the third-party and outsourcing risk management framework, consistent with EBA Guidelines on Outsourcing Arrangements. Ensure appropriate due diligence, ongoing monitoring, and risk assessment of material outsourcing arrangements, including critical or important functions. Manage the register of outsourcing arrangements and ensure timely notification as required. Oversee vendor assessments and counterparty risk evaluations for key service providers and partners.

Card Acquiring Activities and Payment Operations Risk

Oversee risk management for card acquiring activities, including merchant risk assessment, chargeback and fraud monitoring, and card scheme compliance (Visa, Mastercard). Manage payment operations risk, including transaction limit frameworks for different customer segments (e.g., sole traders, SMEs, corporates). Ensure appropriate controls for agent and distributor networks, in line with PSD2 requirements and regulatory expectations.

Risk Governance and Oversight

Provide second-line challenge and oversight to first-line business functions on risk-related matters. Ensure the three-lines-of-defence model is operationally effective and well understood across the organisation. Own the risk-related policy suite, ensuring policies are current, Board-approved, and periodically reviewed.

Team Leadership and Development

Build, lead, and develop the Risk team, including hiring, performance management, and professional development. Foster a strong risk culture across the organisation through training, awareness, and engagement. Manage the Risk function’s budget and resource allocation.

What We Offer

• Real influence on shaping the ZEN.COM.
• Work in an environment where innovation and effectiveness truly matter.
• Competitive salary and flexible working conditions.
• Private medical healthcare.
• Internal and external training opportunities.

If you want to have a real impact on the experience of thousands of users and work with committed teams in an environment that values ownership, transparency, and pace – apply today!