Enterprise Risk Management Specialist, Luxembourg

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg regulated EMI and CASP. We are seeking an Enterprise Risk Management (ERM) Specialist to build and operate BBSA’s enterprise risk framework across financial and non-financial risks, ensuring clear governance, effective risk assessments, and inspection-ready documentation. The role supports senior management and the Board with actionable risk reporting and disciplined issue remediation.

Key Responsibilities:

• ERM Framework and Governance:

• Implement and maintain BBSA’s ERM framework, including risk taxonomy, risk appetite statements, risk register, and escalation processes.

• Coordinate risk governance forums and prepare management and Board risk reporting packs (KRIs/KPIs, trends, and key decisions).

• Risk and Control Assessments:

• Facilitate periodic risk and control assessments across BBSA functions (Operations, Treasury, Compliance/AML, ICT, Outsourcing).

• Support business change and new product risk assessments, ensuring risks are identified, mitigated, and documented.

• Issue, Incident, and Remediation Management:

• Operate the issue management lifecycle: logging, root cause analysis, action plans, tracking, and validation of closure.

• Partner with InfoSec and Compliance on operational incidents, control weaknesses, and regulatory findings.

• Third Party and Outsourcing Risk:

• Support outsourcing risk oversight, including concentration risk considerations, critical provider monitoring, and exit planning in collaboration with the Outsourcing function.

• Ensure third party risk is consistently assessed and reported within the ERM framework.

• Risk Culture and Continuous Improvement:

• Contribute to risk policies, procedures, and training; promote risk awareness and pragmatic control ownership across the business.

• Drive continuous improvement of risk metrics, reporting quality, and governance effectiveness.

Key Requirements:

Education:

• Bachelor’s or Master’s degree in Risk Management, Finance, Business, or a related field.

Experience:

• 5+ years in enterprise/operational risk management within regulated financial services.

• Experience with payments/EMI/PI and/or crypto/fintech risk environments is a strong advantage.

Skills:

• Strong facilitation and stakeholder management, with the ability to challenge constructively and drive outcomes.

• Excellent written communication and ability to produce concise, Board-ready materials.

Languages:

• Fluent English required; French is an advantage.