Position Overview: 

We are seeking a detail-oriented and experienced Compliance Analyst (2nd Line of Defence) to join our team at Bridge Building S.A. (BBSA), the EU entity for Bridge. BBSA is preparing for authorisation as an Electronic Money Institution (EMI) and a Crypto-Asset Service Provider (CASP) in Luxembourg. The successful candidate will support the MLRO and the Compliance function by providing second-line oversight, executing compliance monitoring and investigations, supporting police/law-enforcement requests, and maintaining AML/CTF policies and governance in line with Luxembourg AML/CTF laws and CSSF expectations.

Key Responsibilities:

1. AML/CTF Compliance Monitoring (2LoD):
   • Support, maintain, and execute an independent, risk-based AML/CTF compliance monitoring and testing programme across BBSA’s EMI and CASP perimeter.
   • Perform thematic and control effectiveness reviews covering CDD/EDD, transaction monitoring, sanctions/PEP screening, recordkeeping, and governance arrangements.
   • Independently assess the adequacy and effectiveness of first-line controls and document conclusions with clear ratings and recommendations.
   • Issue formal findings, agree remediation actions with the First Line of Defence (1LoD), and independently validate remediation closure through follow-up testing.
   • Escalate material weaknesses or control deficiencies to senior management and governance committees where required.
2. Investigations and Escalations:
   • Provide second-line review and challenge of higher-risk cases escalated by the first line (high-risk customers, complex typologies, sanctions/PEP matches, internal escalation); support MLRO decisioning and documentation.
   • Conduct or support independent investigations triggered by red flags, audit/regulatory findings, or intelligence from partners; ensure a consistent audit trail in case management tools.
3. Law Enforcement / Police Requests:
   • Oversee and coordinate responses to police, law enforcement, and competent authority requests in collaboration with the MLRO and Legal.
   • Provide compliance oversight to ensure responses are timely, complete, proportionate, and aligned with regulatory obligations.
   • Maintain governance-level logs, metrics, and reporting relating to external authority requests.
   • Assess whether information requests or intelligence received may indicate systemic control weaknesses or trigger enhanced monitoring requirements.
4. Policy, Procedures and Program Maintenance:
   • Draft, maintain, and periodically review AML/CTF policies, procedures, and standards for the EMI and CASP perimeter (risk rating, CDD/EDD, transaction monitoring governance, sanctions/PEP, record retention etc.).
   • Contribute to the AML/CTF Business Risk Assessment and annual compliance plan; support governance committees and management reporting.
5. Advisory and Training:
   • Provide AML/CTF advisory support to Operations, Onboarding, Product, and Engineering teams (new products/process changes, control design, risk mitigations).
   • Support the development and delivery of AML/CTF training and communications, including targeted guidance for high-risk scenarios.
6. Regulatory Readiness and Reporting:
   • Support responses to CSSF requests, audits, and inspections; prepare monitoring reports, management information (MI/KRIs), and remediation tracking.
   • Stay up to date on changes to AML/CTF laws, CSSF guidance, and financial crime typologies relevant to payments and crypto-asset services.

Key Requirements:

• Education: Bachelor’s degree in Law, Compliance, Finance, Business Administration, or a related field.
• Experience:
  • At least 4 years of experience in AML/CTF Compliance (second line of defence/compliance monitoring), preferably within an EMI/PI, CASP/VASP, bank, or regulated fintech environment.
  • Demonstrated experience drafting AML/CTF policies and procedures, executing compliance monitoring/testing, supporting MLRO investigations and STR/SAR processes, and handling police/law-enforcement information requests.
• Skills:
  • Strong understanding of AML/CTF governance, the three lines of defence model, and second-line compliance monitoring methodologies.
  • Excellent analytical and investigative skills, with the ability to produce clear written assessments and regulatory-ready documentation.
  • Ability to take full ownership of projects from conception to completion within agreed timelines.
  • Proficiency with AML tooling (case management, screening, transaction monitoring); familiarity with blockchain analytics tools is an advantage.
  • Strong communication skills, both written and verbal, in English; French is an asset; knowledge of German and/or Luxembourgish is an advantage.
• Certifications: Relevant certifications such as CAMS (Certified Anti-Money Laundering Specialist) or ICA (International Compliance Association) qualifications are considered an advantage.

Secure and Scale a Regulated Fintech Platform at the Heart of Stripe

Bridge Building S.A. (BBSA) is the Luxembourg regulated entity of Bridge, a Stripe company. We operate as an EMI and future CASP in one of Europe’s most demanding regulatory environments (CSSF, DORA, MiCA).

BBSA is building a local regulated platform powered by a global-first technology model. In this context, we are looking for a sharp IT GRC Analyst to act as the bridge between strict European regulations and high-velocity global engineering.

This role is the control and risk right hand of the Luxembourg Head of IT. While our global teams build the tech, you ensure it is compliant, resilient, and audit-ready. You will translate requirements like DORA and MiCA into tangible IT controls, oversee third-party risks, and maintain the integrity of our governance framework.

This is not a "tick-the-box" compliance role. It is a operational position for a professional who understands technology well enough to govern it effectively. You will have high visibility, owning the frameworks that allow us to scale securely.

Key Responsibilities

1. IT Governance & Risk Management

• • Maintain and evolve the IT Risk Register, ensuring risks are identified, assessed, and treated in line with the company’s risk appetite.
  • Drive the local implementation of the DORA (Digital Operational Resilience Act) framework, including ICT risk management and incident classification.
  • Bridge the gap between technical reality and policy by drafting, reviewing, and updating IT policies and procedures.
  • Perform periodic control testing to ensure global engineering practices align with local regulatory requirements.
  • Act as primary support to the local Head of IT 

1. Third-Party Risk Management (TPRM)

• • Support ICT due diligence and risk assessments of critical vendors and service providers, while assisting with  Developer / Customer Oversight.
  • Monitor SLAs and KPIs of critical vendors, challenging performance where necessary.
  • Act as the primary support to the Outsourcing Manager regarding technical vendor oversight.

1. Access Governance & Control (IAG)

• • Oversee the Identity & Access Governance strategy, including but not limited to adherence to Segregation of Duties, principle of least privileges and others..
  • Conduct periodic User Access Reviews for critical systems.

1. Regulatory Compliance & Audit Readiness

• • Act as the primary liaison for Internal Audit regarding IT topics.
  • Prepare technical inputs and evidence for CSSF notifications and regulatory reporting.
  • Monitor compliance with GDPR/Data Privacy controls (e.g., DLP oversight, data residency).
  • Coordinate Business Continuity (BCP) and Disaster Recovery (DR) testing documentation and reporting.

1. Incident Governance

• • Oversee the IT incident management process to ensure proper classification, reporting, and root cause analysis (RCA).
  • Ensure major incidents are reported to regulators within mandated timeframes (in collaboration with Compliance).

Candidate Profile

Education

• Bachelor’s or Master’s degree in Information Systems, Cybersecurity, or Business Administration (with a strong IT focus).

Experience

• 3–6 years of experience in IT Audit, IT Risk, GRC, or Information Security.
• Experience in a regulated sector (Banking, Fintech, Insurance) or Big 4 Audit (IT Risk advisory) is highly preferred.
• Experience dealing with CSSF circulars, EBA guidelines, or DORA is a strong asset.

Core Competencies

• Framework Knowledge: Strong understanding of ISO 27001, NIST, or COBIT.
• Tech Literacy: You don't need to code, but you must understand Cloud fundamentals (AWS), SaaS models, and modern infrastructure to audit them effectively.
• Risk Mindset: Ability to distinguish between theoretical risk and actual business risk.
• Communication: Ability to explain "Why we need this control" to engineers without slowing them down.

Languages

• English: Fluent professional (Mandatory).
• French: Asset.

Mindset

• Pragmatic: You value effective controls over bureaucratic paperwork.
• Resilient: You are comfortable dealing with ambiguity and evolving regulations.
• Curious: You have a genuine interest in crypto-assets, blockchain, and the future of payments.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Compliance team’s mission is to contribute to company wide cornerstones, security, transparency and regulation, on which we have built our business to bring safe and reliable access to crypto for all our customers.

As a Deputy MLRO / AML Lead, you will be responsible for the design, implementation, and ongoing effectiveness of the AML/CFT framework of Bitstamp by Robinhood Europe, ensuring full compliance with the relevant AML/CFT requirements stemming from our CASP and Payment Services activities.

This role is based in our Luxembourg office, with in-person attendance expected  5 days per week. 

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

What you’ll do

Core Activities:

• Oversee the customer onboarding review and approval process for customers presenting higher risk of ML/TF of Bitstamp by Robinhood Europe with the support of the AML Analyst team and the Compliance Operations team.
• Oversee the ongoing EDD review and approval process for customers of Bitstamp by Robinhood Europe with the support of the AML Analyst team and the Compliance Operations team.
• Ensure timely and effective resolution of the escalations from the first line of defense on customer onboarding, transaction monitoring alerts, guidance requests and any other topic that requires Compliance review.
• Lead the daily Compliance Committee with the Chief Compliance Officer of Bitstamp by Robinhood Europe to review and approve the account opening of customers presenting higher risk of ML/TF.

Team Leading:

• Lead the AML Analyst team and participate actively in their recruitment, training, onboarding, and progress within the organization.
• Act as an ambassador for Compliance at Bitstamp by Robinhood.

Process, Procedures and Policies:

• Deliver continuous improvement of AML/CFT policies and procedures, ensuring these are fit for purpose, meeting regulatory requirements and are updated and maintained.
• Work collaboratively with the Chief Compliance Officer of Bitstamp by Robinhood Europe to ensure that the policy requirements pertaining to AML/CFT are addressed.
• Work collaboratively with the Compliance departments of all entities of Robinhood Crypto to ensure alignment of the compliance processes – where possible – and operational consistency across the locations.
• Actively engage with governing bodies, officers, and staff, sharing best practices and clarifying potential compliance concerns.

Reporting:

• Undertake regular reporting on both a periodic and ad-hoc basis to both the Chief Compliance Officer and the Board of Directors of Bitstamp by Robinhood Europe, on the fulfillment of these responsibilities, the effectiveness of the overall AML/CFT program and progress of any AML-related projects that are being undertaken.
• Work collaboratively with the Chief Compliance Officer Europe on the periodic regulatory reporting, including preparation of the communication and presentation to the regulators on an ad-hoc basis.

What you bring

• At least 8 years of relevant experience in the Regulatory Compliance division of regulated financial institutions (ideally crypto, banking, payments or e-money) as part of the second line of defense.
• Prior experience within the crypto industry is a strong plus but not required. However, a demonstrable interest in the sector is necessary.
• Relevant Compliance certifications or recognized professional certifications in Compliance.
• High level of understanding of all applicable CSSF regulatory frameworks impacting the business that is commensurate with the seniority of the role. Knowledge and experience in all aspects of financial crime compliance, specifically AML, KYC, EDD, and customer onboarding.
• Ability to analyze and synthesize complex information and distill into readily comprehensible and practical advice relevant to the commercial, strategic and financial context, applying a risk-based approach to development of business solutions and decision-making. Demonstrate a creative and innovative approach by finding different ways to look at problems and design novel solutions. 
• Ability to effectively communicate with the regulator and other stakeholders within the Robinhood Group and provide practical, actionable, and value-added recommendations.
• Used to working in a diverse, international, fast-moving business and fast evolving regulatory environment.
• Strong written and verbal communication skills with an excellent knowledge of English language (written and verbal). 
• Strong sense of team spirit and cross-functional collaboration.
• Strong communication and interpersonal skills, with the ability to build and maintain effective relationships with internal and external stakeholders.
• Autonomous, pro-active and hands-on with the ability to prioritize and manage own work effectively, apply a breadth of technical, business, product and customer domain knowledge, own the outcome, make an impact, and manage a team to deliver the same. 

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact and bonus programs.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.