Who we are:TrueLayer is Europe’s fastest-growing Pay by Bank network. We power smarter, safer and faster payments by combining real-time bank payments with financial and identity data. E-commerce, iGaming and Financial Services businesses use our products to onboard new users, accept money and make payouts in seconds, and at scale. Live across 22 countries and with 1 new user joining TrueLayer’s Pay by Bank network every 3 seconds, we’re in a very exciting growth stage. This is why we’re expanding the team across our offices in London, Milan, and Dublin.
Listed in Sifted as one of the 100 fastest growing start-ups in UK & Ireland, and CNBC’s World Top Fintech Companies, we’re trusted by industry leaders like RyanAir and Just Eat Takeaway for continued innovation within our payment products. To date, we’ve raised over $300 million from world-renowned investors including Stripe, Tiger Global, Northzone, and Tencent. But this is just the beginning.
We’re looking for people who are excited about joining the Pay by Bank revolution and helping us change the way the world pays. Could this be you? DescriptionAs a Senior Risk Analyst at TrueLayer, you'll play a critical role in ensuring we can innovate, scale and expand our Pay by Bank products safely across the UK and Europe. Reporting to the Head of Compliance, you'll work across our Risk and Compliance function and the wider business to identify, assess and manage the risks that come with operating a growing, multi-jurisdictional payments business.
This is a hands-on, second-line risk role with meaningful ownership and visibility. You'll lead key risk assessment activities, challenge existing controls and work with teams across the business to ensure material risks are understood, appropriately mitigated and escalated where necessary. Your work will help protect customer funds,



maintain regulatory confidence and ensure that business growth is supported by effective risk management.
You'll be expected to go beyond documenting risks. You'll turn complex risk information into clear, actionable insight, influence decisions and follow through to ensure that agreed controls and mitigations are effective. You'll help the business understand not only where risks exist, but what they mean, what needs to change and how we can manage them within our risk appetite.
What success looks likeRisk visibility: Material risks across our products, operations and customer portfolio are identified, assessed and clearly understood by the right stakeholders.
Effective controls: Risk assessments and control testing lead to practical improvements, with weaknesses escalated and remediation tracked through to completion.
Safer innovation: New products, payment methods and material business changes are assessed early, enabling informed decisions before implementation.
Stronger customer risk management: Customer and counterparty exposures are assessed and monitored, with appropriate risk ratings, limits and mitigations in place.
Confident decision-making: Senior management and relevant governance committees receive clear, evidence-based reporting that supports timely and informed decisions.
What we expect from you as a Senior Risk AnalystRisk Self-Assessments & FrameworksFacilitate RCSAs:



Lead and coordinate the Risk & Control Self-Assessment (RCSA) process across business units to map, evaluate, and challenge operational and product-level risks.
Maintain Risk Registers: Own the maintenance and quality of the corporate risk register, ensuring material risks, KRIs, owners and mitigation actions are current and actionable.
Control Testing: Execute or coordinate independent control testing, assess design and operating effectiveness, and track remediation of identified weaknesses.
Impact Analyses & GovernanceChange Risk Impact Analysis: Execute detailed risk impact analyses for structural business adjustments, major system updates, or shifting regulatory mandates (such as DORA or FCA Operational Resilience rules).
Scenario Analysis & Stress Testing: Model potential "tail-risk" events, assessing how extreme merchant defaults, system outages, or fraud spikes would impact the firm's capital and operational capacity.
Board & Regulatory Reporting: Translate complex risk insights into concise, data-driven dashboards and reports for the Audit & Risk Committee (ARC), regulated Board, and authorities.
Product Risk ManagementNew Product Risk Assessment (NPAP): Conduct end-to-end risk assessments for new payment features, rails, and cross-border capabilities before deployment.
Product Safeguarding: Evaluate the structural risk of payment flows to ensure compliant isolation and safeguarding of user funds under FCA, CBI, and Swedish FSA rules.
Vendor & Third-Party Risk: Perform risk assessments on critical third-party product dependencies, including payment gateways, and cloud infrastructure.
Customer Risk ManagementCustomer Risk Profiling: Work with FinCrime and relevant business teams to maintain effective customer risk segme

📌 Senior Risk Analyst (Milano)
🏢 Truelayer
📍 Milano