Risk & Assurance Manager

Employment Type: Permanent/Direct Hire
Compensation: $110-160k base/yr + Bonus + Benefits + Options
Location: Fort Collins, CO

We are seeking an experienced Risk & Assurance Manager to provide independent second-line oversight of how the organization identifies risk, designs controls, and remediates issues across a complex payments environment.
This role will challenge first-line teams, manage issues through validated closure, and provide leadership with a clear and defensible view of enterprise risk.

Key Responsibilities:

• Perform independent second-line review of operational, technology, payments, and governance risks
• Facilitate risk assessments and evaluate control design and effectiveness
• Partner with Product, Engineering, Operations, and Compliance on new initiatives, incidents, and control requirements
• Manage the full issue lifecycle, including root cause analysis, corrective action plans, remediation tracking, and closure validation
• Maintain the enterprise risk register and support ongoing GRC program improvements
• Identify risk trends and provide clear reporting to executive leadership and risk committees
• Support internal audits, control testing, external assessments, and evidence requests
• Coach control owners on control design, documentation, remediation, and evidence standards
• Use data, analytics, and AI tools to improve risk identification, testing, documentation, and reporting

What We’re Looking For:

• 5+ years of experience in risk management, internal audit, external audit, compliance, or control assurance
• Strong second-line risk experience, including independent challenge and issue management
• Experience within financial services, payments, fintech, or another regulated environment preferred
• Familiarity with ACH, card payments, or other money-movement processes is highly desirable
• Working knowledge of COSO, IIA Standards, and the NIST Cybersecurity Framework
• Ability to assess technology controls across change management, logical access, cloud environments, APIs, SDLC, and data flows
• Experience with GRC platforms; LogicGate experience is a plus
• Strong analytical skills using tools such as Excel, Tableau, or Snowflake
• Excellent written communication and the ability to present clear, defensible risk conclusions to senior leaders
• Bachelor’s degree in Risk Management, Accounting, Finance, Information Systems, Business, or a related field

Nice to Have:

• CRMA, CRISC, CIA, CISA, CFE, CAMS, or similar certification
• SOC 1 or SOC 2 experience
• Experience helping mature or formalize an enterprise risk program
• Experience assessing technology and operational controls

 
26-00905
#dice