Risk and Internal Controls Analyst (BR120-GRC)

OKTO's continuous growth demands high-caliber candidates, who can demonstrate professionalism, passion, and creativity. For those who come on board, we offer significant career advancement, challenges, and a runway for growth.OKTO powers digital payments for every entertainment, leisure, and gaming environment. Our unified payment platform combines secure, real-world transactions with the most powerful payment technology to create immersive payment experience for both merchants and their users.Since 2019, OKTO has been improving payment interactions for online and retail gaming and introducing frictionless payments with its local knowledge, sector expertise and international capabilities.The expanding business now employs over 100 payment experts, gaming insiders and software engineers, serving some of the most exciting international markets including, Brazil, Romania, Italy, Greece, Germany, the UK and Spain.

Role Summary

We are looking for a Mid/Senior professional with strong autonomy and hands-on experience in Risk Management and Internal Controls. This role is designed for someone who can independently manage risk and control activities, from planning and assessment to execution, reporting, remediation, and continuous monitoring.The position will be part of and led by the Compliance function, working closely with Compliance leadership while maintaining a cross-functional view of the organization's business and operations.The professional will be responsible for identifying, assessing, monitoring, and reporting business and operational risks across the organization, as well as evaluating the design and effectiveness of internal controls. This includes understanding how different business processes operate, identifying potential risks and control gaps, and working with process owners to implement practical mitigation and remediation measures.The professional is expected to have a broad understanding of the organization's business, operational processes, risks, and internal controls as a whole, with the ability to connect risks and controls across different functions and processes.The role requires a high degree of independence, analytical capability, maturity, and ownership. The successful candidate should be able to independently organize and prioritize their work, interact with multiple business areas, constructively challenge existing processes and controls, and provide clear recommendations and management insights.Key ResponsibilitiesRisk ManagementIndependently conduct business and operational risk assessments across the organizationMaintain and improve the risk universe, risk mapping, assessment methodology, and KRIsIdentify emerging risks, assess potential impacts, and recommend appropriate mitigation measuresDevelop and monitor risk treatment plans, ensuring clear ownership, deadlines, and follow-upSupport risk appetite and tolerance monitoring and prepare risk reports, dashboards, and management insightsProactively identify trends and issues requiring management attentionInternal ControlsIndependently map and assess business processes, risks, and internal controls across the organizationPlan and execute internal control testing, documenting results and identifying deficienciesAssess control effectiveness and recommend practical remediation actionsWork with process owners to strengthen controls and address identified gapsMonitor remediation plans and challenge stakeholders when actions are delayed or insufficientSupport the design and implementation of controls in response to risks, process changes, audits, or regulatory requirementsCompliance, Governance & Stakeholder ManagementWork under the leadership of the Compliance function, supporting the Risk and Internal Controls frameworkAct as a business-facing point of contact across Finance, Operations, Product, Commercial, Legal, Technology, and other areasMaintain a holistic view of business and operational risks and controls, identifying interdependencies and potential impactsProvide constructive challenge on risk identification, control effectiveness, and remediation plansSupport internal and external audits, governance forums, and management reportingIndependently manage priorities, deliverables, and deadlines, proactively escalating material risks and issuesRequirementsEducation & ExperienceBachelor's degree in Business Administration, Engineering, Economics, Accounting, Finance, or related fields3-7+ years of relevant professional experience in Risk Management, Internal Controls, Internal Audit, Compliance, Operational Risk, or related business risk functionsHands-on experience with risk assessments, risk mapping, internal control design and testing, KRIs, remediation plans, and risk reportingDemonstrated experience analyzing business and operational processes and their associated risks and controlsExperience working directly with multiple business and operational areas rather than exclusively within a technical or IT environmentProven ability to independently manage end-to-end activities, from planning and execution to reporting and follow-upExperience interacting with multiple stakeholders and presenting findings or recommendations to managementExperience in financial services, fintech, payments, banking, or another regulated environment is highly desirableTechnical KnowledgeStrong practical knowledge of Risk Management and Internal Controls frameworks and methodologiesGood knowledge of Excel and PowerPoint for analysis, reporting, dashboards, and management presentationsKnowledge of COSO and/or ISO 31000 is a plusExperience with Business Continuity Management (BCM) and Business Continuity Plans (BCP) is a plusExperience with GRC, risk management, or internal control tools is a plusLanguagesAdvanced EnglishIntermediate to advanced SpanishImportant InformationFull-time position under a CLT (Brazilian employment) contractHybrid work model, based in São Paulo/SP, BrazilThe position sits within the Compliance function and operates across the organizationThis is a business and operational Risk & Internal Controls position, focused on understanding and strengthening risks and controls across the organization's processes and operationsBenefitsCompetitive compensation - aligned with your experience and the marketMeal allowance - provided through a prepaid card, with the flexibility to use part of the balance beyond food expensesHealth and dental plan - no monthly cost for you and your dependents, with comprehensive coverage to take care of your health and well-beingTotalPass - access to gyms and partner studios, encouraging a healthy and balanced lifestyle