Head of Risk Controlling & Outsourcing Management (m/f/d)

FLIZpay is a payment method from Germany that lets businesses radically reduce the cost of accepting payments — and gives shoppers cashback and discounts in return. Instead of storing a card, shoppers securely connect their bank account and pay with the FLIZ app at participating merchants. Merchants keep the saving or turn it into offers that drive conversion and loyalty. Built in Germany for Europe: a local alternative to the international payment networks, with customer data staying in the EU. We're seed-stage, based in Berlin, and we work in a regulated payments environment. One small cross-functional team builds and runs all of it: the checkout merchants add via plugin, SDK or API, the FLIZ app, and our business platform. Three stand-alone products are live today, more are launching.

As Head of Risk & Outsourcing, you bring together the independent risk controlling function (ZAG-MaRisk AT 4.4.1) and outsourcing management (ZAG-MaRisk AT 9, DORA). In our cloud-native, partner-driven business model this role is decisive. You make sure we can grow fast without losing our risk-bearing capacity or control over our service providers.

• Building and operationally leading the risk controlling function in accordance with ZAG-MaRisk.
• Preparing and monitoring risk-bearing-capacity concepts and limit systems, and running stress tests for counterparty default, market price, liquidity and operational risks.
• Taking on the role of central outsourcing officer: managing the full lifecycle of material outsourcing arrangements (cloud providers, KYC service providers), including risk analyses in line with EBA guidelines and DORA requirements (Art. 30 et seq.).
• Building automated risk dashboards (e.g. using BI tools such as Tableau or Looker) for management and supervisory bodies.
• Ensuring the correct implementation of safeguarding requirements for customer funds (§ 17/18 ZAG).

• Degree in economics, mathematics, (business) informatics or a comparable quantitative background.
• Demonstrable experience in risk management at a ZAG institution, a bank or a regulated FinTech.
• Deep understanding of cloud architectures and the regulatory requirements for ICT third-party providers (DORA, ZAG-MaRisk, EBA/GL/2019/02).
• Numbers-driven, analytically strong and able to make complex risk data transparent in real time through automation.
• Fluent German and English.

• Meaningful equity in an early-stage company
• Central Berlin office with flexible hybrid working
• Real ownership and direct impact on the product