Risk Manager

About this role

We’re Capital on Tap 👋
💳 Capital on Tap started because small businesses were underserved. Big banks were slow, their products weren't fit for purpose, and small business owners often couldn't access what they needed. We set out to fix that.

Today we're a financial platform - not just a credit card company. We offer a best-in-class business credit card, SME-focused spend management platform, a savings product that hit £1 billion in funds within its first year, and a growing suite of tools and financial products that make running a small business easier.

1,000+ employees, £20bn in annual card spend, 200,000+ customers, 17,000+ Trustpilot reviews averaging 4.7 stars, and we're profitable. We’ve done a pretty good job so far, but we’re just getting started!

🏡🏢This is a Hybrid role, with a minimum of 3 days a week in our London office.

Risk & Compliance at Capital on Tap
The Risk & Compliance team is the second line of defence at Capital on Tap, working at the intersection of regulation, product and business growth. As our Risk Manager, you'll lead the design and delivery of our risk management framework, working closely with the UK Compliance Director and Risk Owners across the Leadership Team.

The Role
This is a senior leadership role for someone who is energised by building forward-looking risk frameworks that inform decisions, not activity registers that sit on a shelf. The ideal candidate will have significant expertise in enterprise risk management within FCA-regulated firms, technical fluency, and take a pragmatic, problem-solving and risk-based approach.

What You’ll Be Doing

• Strategic Risk Leadership: Serve as the primary second-line risk lead, providing senior leadership with a forward-looking, decision-useful view of risk as the business scales.

• Framework Ownership: Own and refresh the Enterprise Risk Management Framework ensuring the three lines of defence design fits a growing FinTech.

• Risk Taxonomy & RCSAs: Re-baseline the Risk Taxonomy with Risk Owners to reflect the current business, and work collaboratively with them to refresh risk assessments and risk appetites.

• KRIs & Risk Reporting: Work with Risk Owners to build live KRI dashboards and support reporting to the Risk Committee.

• Risk Systems & Data: Responsible for transitioning to a GRC platform.

• Stress Testing & Wind-Down: Lead the annual wind-down plan refresh aligned to FCA WDPG and the CASS 10A resolution pack.

• Governance Support: Support Risk Committee Charter and Terms of Reference refresh.

• Independent Assurance: Partner with Internal Audit and third party assurance providers to shape an independent assurance plan aligned to where the residual risks actually sit.

• Business Enablement: Provide thoughtful, business-minded second line challenge to product launches, partner-bank changes and AI implementations.

• Risk Culture: Support the risk culture across the business by engaging Risk Owners on impact classification and risk-owned RCSAs, embedding risk thinking into business-as-usual decisions.

We’re Looking For

• Deep Regulatory Expertise: Comprehensive working knowledge of FCA SYSC 4, 6 and 7, the EMD/PSD regime, FCA WDPG and CASS 10A, with the ability to interpret complex requirements and provide pragmatic business guidance.