Employment Type: Permanent/Direct Hire
Compensation: $110-160k base/yr + Bonus + Benefits + Options
Location: Fort Collins, CO
We are seeking an experienced Risk & Assurance Manager to provide independent second-line oversight of how the organization identifies risk, designs controls, and remediates issues across a complex payments environment.
This role will challenge first-line teams, manage issues through validated closure, and provide leadership with a clear and defensible view of enterprise risk.
Key Responsibilities:- Perform independent second-line review of operational, technology, payments, and governance risks
- Facilitate risk assessments and evaluate control design and effectiveness
- Partner with Product, Engineering, Operations, and Compliance on new initiatives, incidents, and control requirements
- Manage the full issue lifecycle, including root cause analysis, corrective action plans, remediation tracking, and closure validation
- Maintain the enterprise risk register and support ongoing GRC program improvements
- Identify risk trends and provide clear reporting to executive leadership and risk committees
- Support internal audits, control testing, external assessments, and evidence requests
- Coach control owners on control design, documentation, remediation, and evidence standards
- Use data, analytics, and AI tools to improve risk identification, testing, documentation, and reporting
What We’re Looking For:- 5+ years of experience in risk management, internal audit, external audit, compliance, or control assurance
- Strong second-line risk experience, including independent challenge and issue management
- Experience within financial services, payments, fintech, or another regulated environment preferred
- Familiarity with ACH, card payments, or other money-movement processes is highly desirable
- Working knowledge of COSO, IIA Standards, and the NIST Cybersecurity Framework
- Ability to assess technology controls across change management, logical access, cloud environments, APIs, SDLC, and data flows
- Experience with GRC platforms; LogicGate experience is a plus
- Strong analytical skills using tools such as Excel, Tableau, or Snowflake
- Excellent written communication and the ability to present clear, defensible risk conclusions to senior leaders
- Bachelor’s degree in Risk Management, Accounting, Finance, Information Systems, Business, or a related field
Nice to Have:- CRMA, CRISC, CIA, CISA, CFE, CAMS, or similar certification
- SOC 1 or SOC 2 experience
- Experience helping mature or formalize an enterprise risk program
- Experience assessing technology and operational controls
26-00905
#dice