Deputy Chief Risk Officer

About us:

WALLETTO is a fast-growing electronic money institution based in Vilnius. We’re powering modern payment solutions across Europe — helping businesses send, receive, and move money securely and efficiently.

As a trusted partner of Visa and Mastercard, we provide payment accounts (SEPA, SWIFT, A2A), card acquiring (Visa, Mastercard, Apple Pay, Google Pay), and co-brand card issuing programs. We’re building the next generation of payments — and we’re looking for someone who’s ready to grow with us.

About the role:

We are looking for a Deputy Chief Risk Officer to strengthen our risk management framework and support a strong risk-aware culture across the organization. You will lead key areas including internal controls, incident management, business continuity, product risk, and third-party risk management, ensuring alignment with regulatory requirements and industry best practices.

What you will do:

Internal control management:

- Design and maintain internal control framework;
- Develop, document, and maintain an effective internal control framework;
- Align regulatory requirements and industry best practices (COSO, ISO 31000);
- Test internal controls and maintain a control measures map;
- Evaluate internal controls effectiveness;

Incident management:

- Design and maintain incident management framework;
- Manage all incident register;

Business continuity management:

- Design and maintain business continuity management framework;
- Design critical and important functions methodology;
- Design scenarios framework and organize their simulations/ testing;

Product risk management:

- Design and maintain product risk assessment framework;
- Develop and maintain a structured risk scoring methodology;

Third party risk management:

- Develop and maintain third party risk assessment framework;
- Maintain a comprehensive third-party risk register, including risk scores;
- Manage contract expiry, and reassessment dates, etc.;
- Ensuring third party oversight complies with EBA Outsourcing Guidelines;
- Manage DORA and internal policies.

What we expect from you:

- Degree in Business management and administration, Finance, Economics or related field;
- Preferably at least 3 years risk management experience in Fintech companies or other companies operating with financial market;
- Experience in Internal control management (designing and maintaining internal control system in line with COSO, ISOO 31000 and other best practices);
- Experience in Incident management (ability to develop incident management framework, develop incident register, investigate root causes of incidents, and recommend effective corrective actions);
- Experience in business continuity management framework development, business impact analysis expertise, scenario testing and simulation planning;
- Ability to analyze and strategical thinking;
- Experience in organizing training for employees;
- Product risk assessment skills by identifying, assessing, and setting score risks associated with new or significantly changed products prior to launch;
- Product risk assessment framework development by designing and maintaining product risk management frameworks aligned with internal governance and regulatory expectations;
- Capability to design and apply quantifiable, consistent criteria to evaluate and compare product risks;
- Skills in conducting periodic reviews of live products to detect emerging or evolving risks;
- Experience in building and maintaining frameworks for on boarding and monitoring vendors and outsourcing partners;
- Solid knowledge of relevant regulations and guidelines.
- Fluency in English and Lithuanian;
- Strong communication skills.

What we offer:

- Gross salary starting from €5000 gross/month based on your experience;
- Private health insurance (after the probation period);
- Hybrid work model with the flexibility to work from home and the office;
- Extra paid time off for your birthday and work anniversaries;
- Centrally located office in Vilnius – and yes, it’s pet-friendly!
- Professional growth opportunities and access to training programs;
- Engaging company events and regular team-building activities.