Secure and Scale a Regulated Fintech Platform at the Heart of Stripe

Bridge Building S.A. (BBSA) is the Luxembourg regulated entity of Bridge, a Stripe company. We operate as an EMI and future CASP in one of Europe’s most demanding regulatory environments (CSSF, DORA, MiCA).

BBSA is building a local regulated platform powered by a global-first technology model. In this context, we are looking for a sharp IT GRC Analyst to act as the bridge between strict European regulations and high-velocity global engineering.

This role is the control and risk right hand of the Luxembourg Head of IT. While our global teams build the tech, you ensure it is compliant, resilient, and audit-ready. You will translate requirements like DORA and MiCA into tangible IT controls, oversee third-party risks, and maintain the integrity of our governance framework.

This is not a "tick-the-box" compliance role. It is a operational position for a professional who understands technology well enough to govern it effectively. You will have high visibility, owning the frameworks that allow us to scale securely.

Key Responsibilities

1. IT Governance & Risk Management

• • Maintain and evolve the IT Risk Register, ensuring risks are identified, assessed, and treated in line with the company’s risk appetite.
  • Drive the local implementation of the DORA (Digital Operational Resilience Act) framework, including ICT risk management and incident classification.
  • Bridge the gap between technical reality and policy by drafting, reviewing, and updating IT policies and procedures.
  • Perform periodic control testing to ensure global engineering practices align with local regulatory requirements.
  • Act as primary support to the local Head of IT 

1. Third-Party Risk Management (TPRM)

• • Support ICT due diligence and risk assessments of critical vendors and service providers, while assisting with  Developer / Customer Oversight.
  • Monitor SLAs and KPIs of critical vendors, challenging performance where necessary.
  • Act as the primary support to the Outsourcing Manager regarding technical vendor oversight.

1. Access Governance & Control (IAG)

• • Oversee the Identity & Access Governance strategy, including but not limited to adherence to Segregation of Duties, principle of least privileges and others..
  • Conduct periodic User Access Reviews for critical systems.

1. Regulatory Compliance & Audit Readiness

• • Act as the primary liaison for Internal Audit regarding IT topics.
  • Prepare technical inputs and evidence for CSSF notifications and regulatory reporting.
  • Monitor compliance with GDPR/Data Privacy controls (e.g., DLP oversight, data residency).
  • Coordinate Business Continuity (BCP) and Disaster Recovery (DR) testing documentation and reporting.

1. Incident Governance

• • Oversee the IT incident management process to ensure proper classification, reporting, and root cause analysis (RCA).
  • Ensure major incidents are reported to regulators within mandated timeframes (in collaboration with Compliance).

Candidate Profile

Education

• Bachelor’s or Master’s degree in Information Systems, Cybersecurity, or Business Administration (with a strong IT focus).

Experience

• 3–6 years of experience in IT Audit, IT Risk, GRC, or Information Security.
• Experience in a regulated sector (Banking, Fintech, Insurance) or Big 4 Audit (IT Risk advisory) is highly preferred.
• Experience dealing with CSSF circulars, EBA guidelines, or DORA is a strong asset.

Core Competencies

• Framework Knowledge: Strong understanding of ISO 27001, NIST, or COBIT.
• Tech Literacy: You don't need to code, but you must understand Cloud fundamentals (AWS), SaaS models, and modern infrastructure to audit them effectively.
• Risk Mindset: Ability to distinguish between theoretical risk and actual business risk.
• Communication: Ability to explain "Why we need this control" to engineers without slowing them down.

Languages

• English: Fluent professional (Mandatory).
• French: Asset.

Mindset

• Pragmatic: You value effective controls over bureaucratic paperwork.
• Resilient: You are comfortable dealing with ambiguity and evolving regulations.
• Curious: You have a genuine interest in crypto-assets, blockchain, and the future of payments.

ABOUT THE TEAM:

We are pleased to have a dynamic, forward-thinking group of professionals, deeply committed to supporting Tide in its growth while maintaining the highest standards of regulatory compliance and risk management. We have great cross-collaboration both within and outside the team and we pride ourselves on our team culture, ways of working and the support we provide to each other and to the business.

If joining the Compliance Team, you will be part of a supportive and knowledgeable group, with opportunities to work on complex, high-impact projects that contribute directly to Tide’s success and growth. You’ll be encouraged to bring new ideas, challenge the status quo, and take ownership of key compliance initiatives.

ABOUT THE ROLE:

As Regulatory Risk & Compliance Manager - EUR, you will play a vital role in ensuring Tide complies with the evolving regulatory requirements set by the CSSF and other EU regulators. You will be responsible for identifying, assessing, and mitigating regulatory risks, while ensuring that Tide’s compliance frameworks are embedded across the business.

Working closely with teams across the organisation, including Product, Member Operations, Payments, Marketing, Legal and Finance, you will provide expert advice on regulatory developments, lead compliance initiatives, and integrate regulatory requirements into our day-to-day operations.

As the subject matter expert on particular regulations, you’ll help to steer decisions, impact strategies and support the rest of the team and business. At Tide, you’ll be able to work in a fast-paced environment, with cross-team exposure, inquisitive freedom and the ability to impact how Tide conducts its business.

As Regulatory Risk & Compliance Manager you will:

• Execute the Compliance Monitoring Plan, taking ownership of monitoring activities, addressing findings, and engaging stakeholders as needed.
• Horizon scanning and regulatory mapping for regulatory developments across Luxembourg and the EU, assess their impact, and advise on necessary actions.
• Manage regulatory submissions to the CSSF such as Compliance summary report, long form report and the annual complaints reports. 
• Ensure accurate and timely regulatory reporting for BCL monthly reports. 
• Provide regulatory guidance on product and service development, conducting compliance assessments for new initiatives.
• Maintain and update compliance policies in line with Luxembourg and EU regulations, tracking required refresh cycles.
• Support the Chief Compliance Officer and the Global Director of Compliance in regulatory engagements, strategic planning, and governance.
• Lead and actively participate in the Regulatory Risk & Compliance working group, ensuring key issues are identified, addressed, and escalated.
• Coordinate and deliver compliance and risk-related training across the business.
• Collect and prepare MI for internal governance reporting and external regulatory submissions.
• Track regulatory deadlines, file submissions, maintain a log of regulatory interactions, and prepare for meetings and inspections with CSSF and other authorities.
• Engage with internal teams to respond to compliance-related requests and regulatory inquiries, ensuring cross-functional alignment.
• Work closely with the 1LOD to remediate regulatory oversight findings and enhance controls.
• Identify, assess, and monitor regulatory risks, ensuring appropriate mitigation measures are in place.
• Support internal and external audits, participate in compliance reviews, and oversee effective remediation of findings.

WHAT WE ARE LOOKING FOR:

• At least 6 years of experience in Compliance, Regulatory Risk, or Risk Management at a senior level within financial services.
• Strong expertise in Luxembourg (CSSF) and EU financial regulations, including PSD2, GDPR, EBA Guidelines and related frameworks.
• Direct experience interacting with regulators, handling responses, managing notifications, and supporting regulatory inspections, audits, and thematic reviews.
• Proven track record in regulatory submissions, licence applications, and reporting, ensuring compliance with Luxembourg and EU requirements.
• Experience in oversight functions, monitoring key risk indicators (KRIs), and providing Compliance Advisory on new initiatives, products, and services.
• Background in Banking, FinTech, Payments/E-Money firms, or Regulatory Consultancy.
• Experience working with firms under CSSF  regulations.
• Ability to interpret complex regulations, research requirements, and advise internal stakeholders on compliance matters.
• Proactive problem solver with a strong sense of ownership and accountability in resolving compliance challenges.
• Exceptional organisational skills, managing multiple projects, deadlines, and regulatory engagements effectively.
• Meticulous attention to detail, with strong drafting, analytical, and risk assessment skills.
• Fluency in English with German and/or French and/or Luxembourgish as a strong plus.

WHAT YOU’LL GET IN RETURN:

Our location-specific employee benefits are designed to cater to the unique needs of Tideans:

• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office.
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams.

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. #LI-AC1 #LI-Hybrid

ABOUT THE ROLE
Here’s what you’ll be doing:

• Create and cultivate deep business relationships with the biggest producers, creators, venues and key stakeholders in the entertainment industry.
• Develop and deliver a growth strategy for the market, with an innovative and effective approach to scaling Fever's presence in the region
• Expertly manage commercial strategy with large partners ensuring value creation for both parties, and a sustainable strategic partnership between Fever and event organisers
• Evidence strong organizational skills to effectively balance and grow a large base of clients 
• Collaborate closely with cross functional stakeholders to successfully deliver on partner growth across Luxembourg and internationally
• Keep up to date with everything cool that’s happening in the entertainment; think of yourself as the expert for new and trending experiences

ABOUT YOU
Here’s what you should bring to the table:

• At least 4+ years of top tier consulting or equivalent experience, with ideally an additional 4+ years of experience in relevant sectors (e.g. corporate management, tech companies, sport / music / arts)
• Strong business development and partnership management skills
• Self-starter mentality with an ability to work in a demanding, dynamic start-up environment
• Demonstrated data-driven approach to business and task prioritization
• Excellent communication skills both written and verbal along with strong attention to detail
• Comfort in working with Microsoft Office, Google docs, and a Sales CRM (Sugar CRM is preferred)
• Knowledge of the city’s entertainment, events, and lifestyle trends

BENEFITS & PERKS

• Attractive compensation package consisting of base salary and the potential to earn a significant bonus for top performance.
• Stock Options
• Opportunity to have a real impact in a high-growth global category leader
• 40% discount on all Fever events and experiences
• Responsibility from day one and professional and personal growth
• Great work environment with a fun, international team of talented people to work with!

#LI-hybrid #LI-fulltime