Position Overview: 

We are seeking a detail-oriented and experienced Compliance Analyst (2nd Line of Defence) to join our team at Bridge Building S.A. (BBSA), the EU entity for Bridge. BBSA is preparing for authorisation as an Electronic Money Institution (EMI) and a Crypto-Asset Service Provider (CASP) in Luxembourg. The successful candidate will support the MLRO and the Compliance function by providing second-line oversight, executing compliance monitoring and investigations, supporting police/law-enforcement requests, and maintaining AML/CTF policies and governance in line with Luxembourg AML/CTF laws and CSSF expectations.

Key Responsibilities:

1. AML/CTF Compliance Monitoring (2LoD):
   • Support, maintain, and execute an independent, risk-based AML/CTF compliance monitoring and testing programme across BBSA’s EMI and CASP perimeter.
   • Perform thematic and control effectiveness reviews covering CDD/EDD, transaction monitoring, sanctions/PEP screening, recordkeeping, and governance arrangements.
   • Independently assess the adequacy and effectiveness of first-line controls and document conclusions with clear ratings and recommendations.
   • Issue formal findings, agree remediation actions with the First Line of Defence (1LoD), and independently validate remediation closure through follow-up testing.
   • Escalate material weaknesses or control deficiencies to senior management and governance committees where required.
2. Investigations and Escalations:
   • Provide second-line review and challenge of higher-risk cases escalated by the first line (high-risk customers, complex typologies, sanctions/PEP matches, internal escalation); support MLRO decisioning and documentation.
   • Conduct or support independent investigations triggered by red flags, audit/regulatory findings, or intelligence from partners; ensure a consistent audit trail in case management tools.
3. Law Enforcement / Police Requests:
   • Oversee and coordinate responses to police, law enforcement, and competent authority requests in collaboration with the MLRO and Legal.
   • Provide compliance oversight to ensure responses are timely, complete, proportionate, and aligned with regulatory obligations.
   • Maintain governance-level logs, metrics, and reporting relating to external authority requests.
   • Assess whether information requests or intelligence received may indicate systemic control weaknesses or trigger enhanced monitoring requirements.
4. Policy, Procedures and Program Maintenance:
   • Draft, maintain, and periodically review AML/CTF policies, procedures, and standards for the EMI and CASP perimeter (risk rating, CDD/EDD, transaction monitoring governance, sanctions/PEP, record retention etc.).
   • Contribute to the AML/CTF Business Risk Assessment and annual compliance plan; support governance committees and management reporting.
5. Advisory and Training:
   • Provide AML/CTF advisory support to Operations, Onboarding, Product, and Engineering teams (new products/process changes, control design, risk mitigations).
   • Support the development and delivery of AML/CTF training and communications, including targeted guidance for high-risk scenarios.
6. Regulatory Readiness and Reporting:
   • Support responses to CSSF requests, audits, and inspections; prepare monitoring reports, management information (MI/KRIs), and remediation tracking.
   • Stay up to date on changes to AML/CTF laws, CSSF guidance, and financial crime typologies relevant to payments and crypto-asset services.

Key Requirements:

• Education: Bachelor’s degree in Law, Compliance, Finance, Business Administration, or a related field.
• Experience:
  • At least 4 years of experience in AML/CTF Compliance (second line of defence/compliance monitoring), preferably within an EMI/PI, CASP/VASP, bank, or regulated fintech environment.
  • Demonstrated experience drafting AML/CTF policies and procedures, executing compliance monitoring/testing, supporting MLRO investigations and STR/SAR processes, and handling police/law-enforcement information requests.
• Skills:
  • Strong understanding of AML/CTF governance, the three lines of defence model, and second-line compliance monitoring methodologies.
  • Excellent analytical and investigative skills, with the ability to produce clear written assessments and regulatory-ready documentation.
  • Ability to take full ownership of projects from conception to completion within agreed timelines.
  • Proficiency with AML tooling (case management, screening, transaction monitoring); familiarity with blockchain analytics tools is an advantage.
  • Strong communication skills, both written and verbal, in English; French is an asset; knowledge of German and/or Luxembourgish is an advantage.
• Certifications: Relevant certifications such as CAMS (Certified Anti-Money Laundering Specialist) or ICA (International Compliance Association) qualifications are considered an advantage.

Secure and Scale a Regulated Fintech Platform at the Heart of Stripe

Bridge Building S.A. (BBSA) is the Luxembourg regulated entity of Bridge, a Stripe company. We operate as an EMI and future CASP in one of Europe’s most demanding regulatory environments (CSSF, DORA, MiCA).

BBSA is building a local regulated platform powered by a global-first technology model. In this context, we are looking for a sharp IT GRC Analyst to act as the bridge between strict European regulations and high-velocity global engineering.

This role is the control and risk right hand of the Luxembourg Head of IT. While our global teams build the tech, you ensure it is compliant, resilient, and audit-ready. You will translate requirements like DORA and MiCA into tangible IT controls, oversee third-party risks, and maintain the integrity of our governance framework.

This is not a "tick-the-box" compliance role. It is a operational position for a professional who understands technology well enough to govern it effectively. You will have high visibility, owning the frameworks that allow us to scale securely.

Key Responsibilities

1. IT Governance & Risk Management

• • Maintain and evolve the IT Risk Register, ensuring risks are identified, assessed, and treated in line with the company’s risk appetite.
  • Drive the local implementation of the DORA (Digital Operational Resilience Act) framework, including ICT risk management and incident classification.
  • Bridge the gap between technical reality and policy by drafting, reviewing, and updating IT policies and procedures.
  • Perform periodic control testing to ensure global engineering practices align with local regulatory requirements.
  • Act as primary support to the local Head of IT 

1. Third-Party Risk Management (TPRM)

• • Support ICT due diligence and risk assessments of critical vendors and service providers, while assisting with  Developer / Customer Oversight.
  • Monitor SLAs and KPIs of critical vendors, challenging performance where necessary.
  • Act as the primary support to the Outsourcing Manager regarding technical vendor oversight.

1. Access Governance & Control (IAG)

• • Oversee the Identity & Access Governance strategy, including but not limited to adherence to Segregation of Duties, principle of least privileges and others..
  • Conduct periodic User Access Reviews for critical systems.

1. Regulatory Compliance & Audit Readiness

• • Act as the primary liaison for Internal Audit regarding IT topics.
  • Prepare technical inputs and evidence for CSSF notifications and regulatory reporting.
  • Monitor compliance with GDPR/Data Privacy controls (e.g., DLP oversight, data residency).
  • Coordinate Business Continuity (BCP) and Disaster Recovery (DR) testing documentation and reporting.

1. Incident Governance

• • Oversee the IT incident management process to ensure proper classification, reporting, and root cause analysis (RCA).
  • Ensure major incidents are reported to regulators within mandated timeframes (in collaboration with Compliance).

Candidate Profile

Education

• Bachelor’s or Master’s degree in Information Systems, Cybersecurity, or Business Administration (with a strong IT focus).

Experience

• 3–6 years of experience in IT Audit, IT Risk, GRC, or Information Security.
• Experience in a regulated sector (Banking, Fintech, Insurance) or Big 4 Audit (IT Risk advisory) is highly preferred.
• Experience dealing with CSSF circulars, EBA guidelines, or DORA is a strong asset.

Core Competencies

• Framework Knowledge: Strong understanding of ISO 27001, NIST, or COBIT.
• Tech Literacy: You don't need to code, but you must understand Cloud fundamentals (AWS), SaaS models, and modern infrastructure to audit them effectively.
• Risk Mindset: Ability to distinguish between theoretical risk and actual business risk.
• Communication: Ability to explain "Why we need this control" to engineers without slowing them down.

Languages

• English: Fluent professional (Mandatory).
• French: Asset.

Mindset

• Pragmatic: You value effective controls over bureaucratic paperwork.
• Resilient: You are comfortable dealing with ambiguity and evolving regulations.
• Curious: You have a genuine interest in crypto-assets, blockchain, and the future of payments.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our Ljubljana office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through May 29, 2026.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact and bonus programs.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our Luxembourg office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact and bonus programs.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our UK office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.