Job Description

Employment Type: Permanent/Direct Hire
Compensation: $110-160k base/yr + Bonus + Benefits + Options
Location: Fort Collins, CO

We are seeking an experienced Risk & Assurance Manager to provide independent second-line oversight of how the organization identifies risk, designs controls, and remediates issues across a complex payments environment.
This role will challenge first-line teams, manage issues through validated closure, and provide leadership with a clear and defensible view of enterprise risk.

Key Responsibilities:

Perform independent second-line review of operational, technology, payments, and governance risks
Facilitate risk assessments and evaluate control design and effectiveness
Partner with Product, Engineering, Operations, and Compliance on new initiatives, incidents, and control requirements
Manage the full issue lifecycle, including root cause analysis, corrective action plans, remediation tracking, and closure validation
Maintain the enterprise risk register and support ongoing GRC program improvements
Identify risk trends and provide clear reporting to executive leadership and risk committees
Support internal audits, control testing, external assessments, and evidence requests
Coach control owners on control design, documentation, remediation, and evidence standards
Use data, analytics, and AI tools to improve risk identification, testing, documentation, and reporting

What We’re Looking For:

5+ years of experience in risk management, internal audit, external audit, compliance, or control assurance
Strong second-line risk experience, including independent challenge and issue management
Experience within financial services, payments, fintech, or another regulated environment preferred
Familiarity with ACH, card payments, or other money-movement processes is highly desirable
Working knowledge of COSO, IIA Standards, and the NIST Cybersecurity Framework
Ability to assess technology controls across change management, logical access, cloud environments, APIs, SDLC, and data flows
Experience with GRC platforms; LogicGate experience is a plus
Strong analytical skills using tools such as Excel, Tableau, or Snowflake
Excellent written communication and the ability to present clear, defensible risk conclusions to senior leaders
Bachelor’s degree in Risk Management, Accounting, Finance, Information Systems, Business, or a related field

Nice to Have:

CRMA, CRISC, CIA, CISA, CFE, CAMS, or similar certification
SOC 1 or SOC 2 experience
Experience helping mature or formalize an enterprise risk program
Experience assessing technology and operational controls

26-00905
#dice

??? people applied to this job

Report Job

Your LinkedIn About section is where you say what you do and what you are looking for. Type your job and a few facts, and pick from five drafts. Write an About section →