Risk Manager

We’re Capital on Tap
Capital on Tap started because small businesses were underserved. Big banks were slow, their products weren't fit for purpose, and small business owners often couldn't access what they needed. We set out to fix that.

Today we're a financial platform - not just a credit card company. We offer a best-in-class business credit card, SME-focused spend management platform, a savings product that hit £1 billion in funds within its first year, and a growing suite of tools and financial products that make running a small business easier.

1,000+ employees, £20bn in annual card spend, 200,000+ customers, 17,000+ Trustpilot reviews averaging 4.7 stars, and we're profitable. We’ve done a pretty good job so far, but we’re just getting started!

This is a Hybrid role, with a minimum of 3 days a week in our London office.

Risk & Compliance at Capital on Tap
The Risk & Compliance team is the second line of defence at Capital on Tap, working at the intersection of regulation, product and business growth. As our Risk Manager, you'll lead the design and delivery of our risk management framework, working closely with the UK Compliance Director and Risk Owners across the Leadership Team.

The Role
This is a senior leadership role for someone who is energised by building forward-looking risk frameworks that inform decisions, not activity registers that sit on a shelf. The ideal candidate will have significant expertise in enterprise risk management within FCA-regulated firms, technical fluency, and take a pragmatic, problem-solving and risk-based approach.

What You’ll Be Doing

• Strategic Risk Leadership : Serve as the primary second-line risk lead, providing senior leadership with a forward-looking, decision-useful view of risk as the business scales.
• Framework Ownership : Own and refresh the Enterprise Risk Management Framework ensuring the three lines of defence design fits a growing FinTech.
• Risk Taxonomy & RCSAs : Re-baseline the Risk Taxonomy with Risk Owners to reflect the current business, and work collaboratively with them to refresh risk assessments and risk appetites.
• KRIs & Risk Reporting : Work with Risk Owners to build live KRI dashboards and support reporting to the Risk Committee.
• Risk Systems & Data: Responsible for transitioning to a GRC platform.
• Stress Testing & Wind-Down: Lead the annual wind-down plan refresh aligned to FCA WDPG and the CASS 10A resolution pack.
• Governance Support: Support Risk Committee Charter and Terms of Reference refresh.
• Independent Assurance : Partner with Internal Audit and third party assurance providers to shape an independent assurance plan aligned to where the residual risks actually sit.
• Business Enablement: Provide thoughtful, business-minded second line challenge to product launches, partner-bank changes and AI implementations.
• Risk Culture: Support the risk culture across the business by engaging Risk Owners on impact classification and risk-owned RCSAs, embedding risk thinking into business-as-usual decisions.

We’re Looking For

• Deep Regulatory Expertise : Comprehensive working knowledge of FCA SYSC 4, 6 and 7, the EMD/PSD regime, FCA WDPG and CASS 10A, with the ability to interpret complex requirements and provide pragmatic business guidance.
• Framework Design Experience: Hands-on experience designing or refreshing an Enterprise Risk Management Framework: taxonomy, appetite, KRIs, RCSA methodology and Risk Committee reporting.
• FinTech / Payments Background: Proven experience in an FCA-regulated firm in the EMI, payments, banking or FinTech space, with an understanding of partner-bank concentration risk in card and payments models.
• Forward-Looking Reporting: Track record of building effective risk reporting.
• Stress Testing & Wind-Down: Practical experience embedding stress testing, reverse stress testing and wind-down planning at firm level.
• Senior Stakeholder Influence : Confident providing independent challenge at Director and C-suite level, building constructive relationships while holding the second line.
• Urgency & Business Focus: Demonstrated ability to work at pace in fast-moving environments, with the appetite to build at speed - the framework exists, it needs maturing fast as the business scales.
• Strong Written Communication: Excellent written communication for papers, Risk Committee briefings and Board notes, with the ability to translate technical risk into business decisions.

Nice to Have

• GRC Platform Experience: Experience evaluating or implementing a GRC platform.
• AI & Operational Resilience: Exposure to AI risk management and operational resilience under FCA expectations.
• Professional Qualifications: A recognised risk qualification such as IRM (Institute of Risk Management), FRM (GARP), PRMIA or equivalent. Big 4 or consulting background in financial services risk also welcome.

Diversity & Inclusion
We welcome, consider and encourage applications from anyone who shares our commitment to inclusivity. Join us in creating a space where authenticity thrives, and everyone can do their best work.

Great Work Deserves Great Perks
We try not to take ourselves too seriously (all the time) so we make sure our office is decked out with a pool table, arcade machine, beer tap, and a couple of office dogs thrown in for good measure. Check out our benefits:
Private Healthcare including dental and opticians services through Vitality
✈️ Worldwide travel insurance through Vitality
❤️ Access to a women's health platform via Hertility
Anniversary Rewards (£250, £500, £750, 4-week fully paid sabbatical)
Salary Sacrifice Pension Scheme up to 7% match
️ 28 days holiday (plus bank holidays)
Annual Learning and Wellbeing Budget
Enhanced Parental Leave
Cycle to Work Scheme
Season Ticket Loan
6 free therapy sessions per year
Dog Friendly Offices
Free drinks and snacks in our offices

Check out more of our benefits, values and mission here .

Other Info
Check out our ‘Top Tips’ for interviewing.
✔️Keep updated on new job opportunities by following us on Linkedin .
Email [email protected] if you have any questions.

Excited to work here? Apply!
If you’d like to progress your career within our fast growing, profitable fintech then click apply and we will aim to get back to you within 3 working days (during busy periods this could take up to 5 working days.)