financial analyst in fintech

Capital.com is a trading platform offering award-winning products focused on advanced technology and a seamless client experience.

• Run the operational risk register, business-wide risk assessment, and RCSA cycles for each entity; collect and challenge first-line input, score likelihood and impact, assess control effectiveness, and track risks from inherent to residual
• Maintain the operational risk event register, classify events against the risk taxonomy, conduct root-cause analysis, identify repeat patterns, and track first-line remediation through to closure
• Produce monthly operational risk event reports and Risk Committee pack sections; monitor key risk indicators against stated appetite and flag adverse trends before thresholds are reached
• Provide operational risk input to each entity’s ICARA, including loss data, scenario analysis, and the operational risk element of the additional own funds and liquidity assessment
• Test control effectiveness by querying platform and warehouse data, evidencing risk positions, assessing control performance, and substantiating event impact
• Support the DORA programme across regulated entities, maintain ICT risk management artefacts, prepare materials for the ICT risk workstream, and track remediation actions through to closure under the Head of Risk’s direction
• Prepare major-incident assessments against DORA classification criteria
• Conduct vendor and outsourcing risk assessments, prepare critical-or-important-function assessments, and track concentration across ICT service providers
• Prepare responses to internal audit findings, external readiness reviews, and supervisory observations; assemble supporting evidence and track action dates with owners
• Coordinate with Operations, Technology, Information Security, Compliance, Legal, and Finance to integrate risk outputs into governance and escalate them at the appropriate trigger

• At least 3 years of risk management experience in a regulated financial services environment, with a substantial part in operational risk, such as an investment firm, bank, payment institution, or a consulting or audit practice serving them
• Hands-on experience running operational risk framework cycles, including risk registers, business-wide risk assessments, and RCSA, with likelihood and impact scoring, control effectiveness assessment, and inherent-to-residual assessment
• Experience managing an operational risk event register, including event capture, taxonomy classification, root-cause analysis, and remediation tracking with first-line owners
• Experience producing operational risk reporting and governance deliverables for a committee, board, or supervisor, including key risk indicators measured against stated appetite; readiness to take ownership as you grow into the role
• Working knowledge of DORA (Regulation (EU) 2022/2554), with exposure to at least one area: ICT risk management artefacts, incident classification and reporting, ICT third-party risk and the register of information, or resilience testing
• An organised approach to tracking regulatory developments across CySEC, ESMA, and the EBA, and the ability to explain what new rules mean for the firm
• A degree in a numerate discipline, such as economics, finance, mathematics, or engineering
• Будет плюсом: CySEC Advanced certification or willingness to obtain it, an operational risk, operational resilience, or information security certification

• Competitive salary
• Annual leave
• Employee referral rewards
• Medical insurance and pension plans, plus location-specific benefits and perks
• 30 Additional days to work remotely from anywhere in the world, subject to some restrictions
• Two additional paid volunteer days each year