Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Group Control Assurance Lead role.

Rezi rewrites your resume against Payhawk's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Group Control Assurance Lead posting at Payhawk — free, in seconds.

About the Role

This senior second-line role involves independent control testing across two licensed entities and the full regulatory framework. You will report to the Risk Committee and both Boards, with the autonomy to design the testing program. The role focuses on testing systems and populations to ensure controls are effective and identify potential gaps.

Responsibilities

Build and own the Board-approved group control assurance and monitoring plan covering both licensed entities, with priorities set by the risk assessment and agreed with the Risk Committee
Design and run risk-based control testing across the group risk register, assessing both design effectiveness and operating effectiveness
Test operational resilience and ICT controls under the Digital Operational Resilience Act, and governance and conduct controls across both entities
Test safeguarding and capital adequacy controls, including whether reconciliations and calculations evidence what they are relied on to evidence
Test regulatory reporting controls, including the completeness and accuracy of the data behind regulatory returns
Test outsourcing and third-party controls, including whether we would detect a critical provider falling below its obligations
Independently test detection controls end to end, including sanctions and politically exposed person screening effectiveness and transaction monitoring coverage and calibration, including the population that never generated an alert
Lead the remediation of the gaps you identify, acting as programme manager for closure: convene the relevant stakeholders, agree scope, owners and dates, track progress, escalate where it stalls, and secure the governance approvals required
Independently validate that a remediated control works before the finding is closed, and reopen it where the fix does not hold
Provide credible challenge to control owners, with written findings, severity ratings, agreed actions and owners
Report testing results, remediation status, coverage against plan and thematic findings to the Risk Committee and to the Boards of both entities
Own the relationship with external assurance providers, and progressively bring recurring testing in-house to reduce cost and dependency
Build the testing as tooling: automated, repeatable, population-level tests that generate their own evidence rather than one-off manual exercises
Support supervisory engagement and internal audit by producing evidence of control effectiveness on demand
Provide independent assurance over significant change, so that new systems and processes are tested before they become business as usual

Requirements

Genuine fluency with AI in your day-to-day work, including data extraction, prompting for reliable answers from large datasets, and building repeatable workflows.
Compliance monitoring, control testing, or assurance experience across a regulated framework in a second-line or third-line capacity, covering multiple risk domains.
Strong knowledge of Financial Conduct Authority expectations on the compliance function and its monitoring programme, and of equivalent EEA expectations.
Real depth in at least two risk domains and the appetite to build expertise in others.
Ability to distinguish control design from control execution and to test systems rather than case files.
Track record of driving remediation to closure by convening stakeholders, holding them to dates, escalating issues, and securing decisions.
Comfortable working with data at a population level and using available tooling to analyze datasets.
Independence and the ability to credibly challenge senior control owners with evidence.
Written English to Board standard with the ability to rate findings proportionately.
Fluent written and spoken English, and the right to work in the United Kingdom.

Skills

AI
Data analysis
Control testing
Risk management
Regulatory compliance
Operational resilience
ICT risk
Safeguarding
Capital adequacy
Regulatory reporting
Outsourcing and third-party management
Governance
Sanctions screening
Politically exposed person screening
Transaction monitoring
Programme management
Written communication
SQL
Python

Location

New York
London
Berlin
Munich
Barcelona
Paris
Amsterdam
Vilnius
Sofia

Work Type

Full-time

Experience Level

Senior

Education Level

Relevant qualification such as IIA, ICA, ACAMS or equivalent

Benefits

30 days of paid time off + 12 work-from-anywhere days
Exchange policy to another Payhawk office
Health and fitness membership
Two company on-sites per year
Opportunity to use the Payhawk product
Monthly commuting allowance of £150

About the Company

Payhawk is a leading global spend management solution for scaling businesses.
Headquartered in London, Payhawk combines company cards, reimbursable expenses, and accounts payable into a single product.
Its technology enables finance teams to control and automate company spending at scale.
The company operates in 32 countries and has offices in New York, London, Berlin, Munich, Barcelona, Paris, Amsterdam, Vilnius, and Sofia.
Payhawk is backed by investors such as Lightspeed Venture Partners, Greenoaks, QED Investors, Bek Ventures, and Eleven Ventures.
Company values include supporting flat hierarchies, taking ownership, seeking and providing feedback, managing constructive critique, and speaking openly.
Payhawk encourages diversity and inclusion.
The company is focused on the future of fintech, continual learning, and empowered teams.
Payhawk is also committed to measuring and improving its environmental and social impact.
Their software and automation help reduce paper usage for customers.

Equal Opportunity

Payhawk is an Equal Employment Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.