Secure and Scale a Regulated Fintech Platform at the Heart of Stripe

Bridge Building S.A. (BBSA) is the Luxembourg regulated entity of Bridge, a Stripe company. We operate as an EMI and future CASP in one of Europe’s most demanding regulatory environments (CSSF, DORA, MiCA).

BBSA is building a local regulated platform powered by a global-first technology model. In this context, we are looking for a sharp IT GRC Analyst to act as the bridge between strict European regulations and high-velocity global engineering.

This role is the control and risk right hand of the Luxembourg Head of IT. While our global teams build the tech, you ensure it is compliant, resilient, and audit-ready. You will translate requirements like DORA and MiCA into tangible IT controls, oversee third-party risks, and maintain the integrity of our governance framework.

This is not a "tick-the-box" compliance role. It is a operational position for a professional who understands technology well enough to govern it effectively. You will have high visibility, owning the frameworks that allow us to scale securely.

Key Responsibilities

1. IT Governance & Risk Management

• • Maintain and evolve the IT Risk Register, ensuring risks are identified, assessed, and treated in line with the company’s risk appetite.
  • Drive the local implementation of the DORA (Digital Operational Resilience Act) framework, including ICT risk management and incident classification.
  • Bridge the gap between technical reality and policy by drafting, reviewing, and updating IT policies and procedures.
  • Perform periodic control testing to ensure global engineering practices align with local regulatory requirements.
  • Act as primary support to the local Head of IT 

1. Third-Party Risk Management (TPRM)

• • Support ICT due diligence and risk assessments of critical vendors and service providers, while assisting with  Developer / Customer Oversight.
  • Monitor SLAs and KPIs of critical vendors, challenging performance where necessary.
  • Act as the primary support to the Outsourcing Manager regarding technical vendor oversight.

1. Access Governance & Control (IAG)

• • Oversee the Identity & Access Governance strategy, including but not limited to adherence to Segregation of Duties, principle of least privileges and others..
  • Conduct periodic User Access Reviews for critical systems.

1. Regulatory Compliance & Audit Readiness

• • Act as the primary liaison for Internal Audit regarding IT topics.
  • Prepare technical inputs and evidence for CSSF notifications and regulatory reporting.
  • Monitor compliance with GDPR/Data Privacy controls (e.g., DLP oversight, data residency).
  • Coordinate Business Continuity (BCP) and Disaster Recovery (DR) testing documentation and reporting.

1. Incident Governance

• • Oversee the IT incident management process to ensure proper classification, reporting, and root cause analysis (RCA).
  • Ensure major incidents are reported to regulators within mandated timeframes (in collaboration with Compliance).

Candidate Profile

Education

• Bachelor’s or Master’s degree in Information Systems, Cybersecurity, or Business Administration (with a strong IT focus).

Experience

• 3–6 years of experience in IT Audit, IT Risk, GRC, or Information Security.
• Experience in a regulated sector (Banking, Fintech, Insurance) or Big 4 Audit (IT Risk advisory) is highly preferred.
• Experience dealing with CSSF circulars, EBA guidelines, or DORA is a strong asset.

Core Competencies

• Framework Knowledge: Strong understanding of ISO 27001, NIST, or COBIT.
• Tech Literacy: You don't need to code, but you must understand Cloud fundamentals (AWS), SaaS models, and modern infrastructure to audit them effectively.
• Risk Mindset: Ability to distinguish between theoretical risk and actual business risk.
• Communication: Ability to explain "Why we need this control" to engineers without slowing them down.

Languages

• English: Fluent professional (Mandatory).
• French: Asset.

Mindset

• Pragmatic: You value effective controls over bureaucratic paperwork.
• Resilient: You are comfortable dealing with ambiguity and evolving regulations.
• Curious: You have a genuine interest in crypto-assets, blockchain, and the future of payments.

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg-regulated EMI and CASP. We are seeking a Treasury Manager to build and operate BBSA’s capital, liquidity, and treasury management framework, including liquidity forecasting, banking operations, counterparty risk oversight, and governance reporting. The role partners closely with Finance, Safeguarding, Risk, and Compliance to ensure strong controls, resilience, and inspection-ready documentation.

Key Responsibilities:

1. Liquidity and Cash Management:
• Own liquidity forecasting and cash planning; define liquidity buffers and escalation triggers.
• Oversee day-to-day treasury operations, bank account structures, cash movements, and payment flows.
2. Capital / Own Funds Governance:
• Support own funds monitoring and capital planning aligned with the applicable prudential framework for BBSA.
• Prepare capital and liquidity reporting packs for senior management and the Board.
3. Banking Relationships and Counterparty Risk:
• Manage key banking relationships, service levels, and operational performance; support selection and onboarding of new banking partners.
• Monitor counterparty risk and contribute to contingency planning and operational resilience arrangements.
4. Safeguarding Oversight and Coordination:
• Partner with Safeguarding and Finance to ensure customer funds safeguarding structures are robust and aligned with operational and control requirements.
• Support oversight of permitted investment approaches (where applicable) and related reporting and controls.
5. Reporting, Controls, and Continuous Improvement:
• Implement and operate treasury controls, reconciliations, and evidence packs; support audits and supervisory requests.
• Drive continuous improvement and automation of forecasting and treasury reporting workflows.

Key Requirements:

Education:

• Bachelor’s or Master’s degree in Finance, Treasury, Economics, or a related field.

Experience:

• 5+ years in treasury, liquidity, capital, or cash management roles within regulated financial services (payments/EMI, fintech, bank, or capital markets).
• Experience building treasury controls and governance, including Board-ready reporting.

Skills:

• Strong analytical capability (forecasting, scenario analysis, stress considerations) and strong controls mindset.
• Excellent stakeholder management, with the ability to operate effectively in a fast-paced, scaling environment.

Languages:

• Fluent English required

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg regulated EMI and CASP. We are seeking an Enterprise Risk Management (ERM) Specialist to build and operate BBSA’s enterprise risk framework across financial and non-financial risks, ensuring clear governance, effective risk assessments, and inspection-ready documentation. The role supports senior management and the Board with actionable risk reporting and disciplined issue remediation.

Key Responsibilities:

1. ERM Framework and Governance:
• Implement and maintain BBSA’s ERM framework, including risk taxonomy, risk appetite statements, risk register, and escalation processes.
• Coordinate risk governance forums and prepare management and Board risk reporting packs (KRIs/KPIs, trends, and key decisions).
2. Risk and Control Assessments:
• Facilitate periodic risk and control assessments across BBSA functions (Operations, Treasury, Compliance/AML, ICT, Outsourcing).
• Support business change and new product risk assessments, ensuring risks are identified, mitigated, and documented.
3. Issue, Incident, and Remediation Management:
• Operate the issue management lifecycle: logging, root cause analysis, action plans, tracking, and validation of closure.
• Partner with InfoSec and Compliance on operational incidents, control weaknesses, and regulatory findings.
4. Third Party and Outsourcing Risk:
• Support outsourcing risk oversight, including concentration risk considerations, critical provider monitoring, and exit planning in collaboration with the Outsourcing function.
• Ensure third party risk is consistently assessed and reported within the ERM framework.
5. Risk Culture and Continuous Improvement:
• Contribute to risk policies, procedures, and training; promote risk awareness and pragmatic control ownership across the business.
• Drive continuous improvement of risk metrics, reporting quality, and governance effectiveness.

Key Requirements:

Education:

• Bachelor’s or Master’s degree in Risk Management, Finance, Business, or a related field.

Experience:

• 5+ years in enterprise/operational risk management within regulated financial services.
• Experience with payments/EMI/PI and/or crypto/fintech risk environments is a strong advantage.

Skills:

• Strong facilitation and stakeholder management, with the ability to challenge constructively and drive outcomes.
• Excellent written communication and ability to produce concise, Board-ready materials.

Languages:

• Fluent English required; French is an advantage.

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg-regulated EMI and CASP. We are seeking a Customer Funds Reconciliation and Safeguarding Specialist to operate BBSA’s safeguarding controls for customer funds (in fiat and in digital assets) within an EMI and CASP environments, ensuring daily reconciliations, exception management, and audit-ready documentation. The role is critical to maintaining strong operational discipline, accurate safeguarding calculations, and reliable reporting to management and auditors.

Key Responsibilities:

1. Daily Safeguarding Calculations and Reconciliations:
• Perform daily safeguarding calculations and reconciliations between customer liabilities and safeguarding accounts (wallets) /permitted safeguarding instruments.
• Ensure reconciliations are complete, accurate, and performed within defined timelines, with appropriate sign-offs.
2. Exception Management and Root Cause Analysis:
• Identify breaks and anomalies, investigate root causes, coordinate fixes with Operations, Engineering, Finance, and banking partners, and document outcomes.
• Maintain a structured log of exceptions, root causes, and remediation actions.
3. Documentation and Audit Readiness:
• Maintain safeguarding policies, procedures, runbooks, and evidence packs; ensure processes are inspection-ready at all times.
• Support internal and external audits and respond to information requests related to safeguarding and reconciliations.
4. Partner Interfaces and Operational Controls:
• Work with banking partners and custodians (as applicable) to ensure statement availability, cut-off alignment, and operational robustness.
• Support contingency procedures for operational disruptions affecting safeguarding processes.
5. Continuous Improvement:
• Drive automation and improvement initiatives to reduce manual effort and operational risk in reconciliation workflows.
• Develop operational KPIs and dashboards to monitor safeguarding performance and exceptions.

Key Requirements:

Education:

• Bachelor’s degree in Finance, Accounting, Business, or a related field.

Experience:

• 5+ years in payments operations, reconciliations, safeguarding, finance controls, or similar roles; EMI/PI and crypto experience is strongly preferred.
• Experience operating daily controls with tight deadlines and strong evidence discipline.

Skills:

• Strong analytical skills and attention to detail; excellent Excel and data handling capabilities.
• Strong documentation and operational discipline; ability to manage incidents and escalate appropriately.
• Strong communication and coordination skills across different functions (engineer, accounting, Treasury and compliance) and seniority

Languages:

• Fluent English required

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg regulated EMI and CASP. We are seeking a Data and Regulatory Reporting professional to build and operate BBSA’s regulatory reporting production line, including robust data sourcing, reconciliation, data quality controls, and submission governance. The role partners closely with our Data Officer based in San Francisco and the regulatory reporting team based in Ireland.  The tight collaboration will ensure timely, accurate, and auditable reporting to the CSSF and efficient responses to supervisory requests.

Key Responsibilities:

1. Regulatory Reporting Production and Controls:
• Own end-to-end production of periodic regulatory and prudential reporting for BBSA (CSSF periodic reports, BCL reports, CRS, CARF and CESOP).
• Implement and operate first-line controls to ensure data completeness, data accuracy, and data timeliness, including reconciliations to the general ledger, sub-ledgers and BBSA’s platform.
2. Data Governance and Data Quality:
• Define reporting data models, lineage, and data dictionaries; maintain consistent definitions for key regulatory metrics.
• Implement data quality rules, exception management, and remediation workflows in collaboration with data owners.
3. Submission Governance and Regulator Readiness:
• Maintain submission procedures, access controls, and audit trails for regulatory transmissions and supervisory requests.
• Support responses to CSSF questions, reporting-related inspections, and remediation plans where issues are identified.
4. Automation and Scalability:
• Drive automation of reporting workflows (e.g. SQL/ETL/BI) to reduce manual effort and operational risk.
• Maintain clear documentation, runbooks, and operational KPIs for reporting processes.

Key Requirements:

Education:

• Bachelor’s or Master’s degree in Finance, Data/Analytics, Statistics, Engineering, or a related field.

Experience:

• 3-5 years in regulatory reporting and/or regulatory data management within regulated financial services (payments/EMI/PI, fintech, bank, or advisory).
• Proven experience implementing reconciliations, data controls, and reporting governance with strong audit discipline.

Skills:

• Strong SQL and data transformation skills; ability to translate regulatory requirements into data specifications. Live SQL assessment will be part of the interview. 
• Strong controls mindset, attention to detail, and capability to manage deadlines and stakeholders.

Languages:

• Fluent English required

Position Overview: 

We are seeking a detail-oriented and experienced Compliance Analyst (2nd Line of Defence) to join our team at Bridge Building S.A. (BBSA), the EU entity for Bridge. BBSA is preparing for authorisation as an Electronic Money Institution (EMI) and a Crypto-Asset Service Provider (CASP) in Luxembourg. The successful candidate will support the MLRO and the Compliance function by providing second-line oversight, executing compliance monitoring and investigations, supporting police/law-enforcement requests, and maintaining AML/CTF policies and governance in line with Luxembourg AML/CTF laws and CSSF expectations.

Key Responsibilities:

1. AML/CTF Compliance Monitoring (2LoD):
   • Support, maintain, and execute an independent, risk-based AML/CTF compliance monitoring and testing programme across BBSA’s EMI and CASP perimeter.
   • Perform thematic and control effectiveness reviews covering CDD/EDD, transaction monitoring, sanctions/PEP screening, recordkeeping, and governance arrangements.
   • Independently assess the adequacy and effectiveness of first-line controls and document conclusions with clear ratings and recommendations.
   • Issue formal findings, agree remediation actions with the First Line of Defence (1LoD), and independently validate remediation closure through follow-up testing.
   • Escalate material weaknesses or control deficiencies to senior management and governance committees where required.
2. Investigations and Escalations:
   • Provide second-line review and challenge of higher-risk cases escalated by the first line (high-risk customers, complex typologies, sanctions/PEP matches, internal escalation); support MLRO decisioning and documentation.
   • Conduct or support independent investigations triggered by red flags, audit/regulatory findings, or intelligence from partners; ensure a consistent audit trail in case management tools.
3. Law Enforcement / Police Requests:
   • Oversee and coordinate responses to police, law enforcement, and competent authority requests in collaboration with the MLRO and Legal.
   • Provide compliance oversight to ensure responses are timely, complete, proportionate, and aligned with regulatory obligations.
   • Maintain governance-level logs, metrics, and reporting relating to external authority requests.
   • Assess whether information requests or intelligence received may indicate systemic control weaknesses or trigger enhanced monitoring requirements.
4. Policy, Procedures and Program Maintenance:
   • Draft, maintain, and periodically review AML/CTF policies, procedures, and standards for the EMI and CASP perimeter (risk rating, CDD/EDD, transaction monitoring governance, sanctions/PEP, record retention etc.).
   • Contribute to the AML/CTF Business Risk Assessment and annual compliance plan; support governance committees and management reporting.
5. Advisory and Training:
   • Provide AML/CTF advisory support to Operations, Onboarding, Product, and Engineering teams (new products/process changes, control design, risk mitigations).
   • Support the development and delivery of AML/CTF training and communications, including targeted guidance for high-risk scenarios.
6. Regulatory Readiness and Reporting:
   • Support responses to CSSF requests, audits, and inspections; prepare monitoring reports, management information (MI/KRIs), and remediation tracking.
   • Stay up to date on changes to AML/CTF laws, CSSF guidance, and financial crime typologies relevant to payments and crypto-asset services.

Key Requirements:

• Education: Bachelor’s degree in Law, Compliance, Finance, Business Administration, or a related field.
• Experience:
  • At least 4 years of experience in AML/CTF Compliance (second line of defence/compliance monitoring), preferably within an EMI/PI, CASP/VASP, bank, or regulated fintech environment.
  • Demonstrated experience drafting AML/CTF policies and procedures, executing compliance monitoring/testing, supporting MLRO investigations and STR/SAR processes, and handling police/law-enforcement information requests.
• Skills:
  • Strong understanding of AML/CTF governance, the three lines of defence model, and second-line compliance monitoring methodologies.
  • Excellent analytical and investigative skills, with the ability to produce clear written assessments and regulatory-ready documentation.
  • Ability to take full ownership of projects from conception to completion within agreed timelines.
  • Proficiency with AML tooling (case management, screening, transaction monitoring); familiarity with blockchain analytics tools is an advantage.
  • Strong communication skills, both written and verbal, in English; French is an asset; knowledge of German and/or Luxembourgish is an advantage.
• Certifications: Relevant certifications such as CAMS (Certified Anti-Money Laundering Specialist) or ICA (International Compliance Association) qualifications are considered an advantage.