Senior Risk and Internal Controls Analyst (BR120-GRC)

OKTO's continuous growth demands high-caliber candidates, who can demonstrate professionalism, passion, and creativity. For those who come on board, we offer significant career advancement, challenges, and a runway for growth.OKTO powers digital payments for every entertainment, leisure, and gaming environment. Our unified payment platform combines secure, real-world transactions with the most powerful payment technology to create immersive payment experience for both merchants and their users.Since 2019, OKTO has been improving payment interactions for online and retail gaming and introducing frictionless payments with its local knowledge, sector expertise and international capabilities.The expanding business now employs over 100 payment experts, gaming insiders and software engineers, serving some of the most exciting international markets including, Brazil, Romania, Italy, Greece, Germany, the UK and Spain.

Role Summary

We are looking for a senior professional with strong autonomy, maturity, analytical capabilities, and proven ownership of responsibilities and deliverables. This professional should be able to independently lead Risk and Internal Controls activities, from planning and execution to monitoring and continuous improvement, while translating risk and control information into actionable management insights.The professional will work closely with key stakeholders across the organization to identify, assess, monitor, and mitigate risks, ensuring that risk appetite, internal controls, and mitigation measures are properly aligned with business objectives and applicable regulatory requirements.The role requires strong communication and stakeholder management skills, as well as the ability to constructively challenge processes and controls, identify opportunities for improvement, and recommend practical and effective solutions. The successful candidate should be comfortable working in a dynamic, changing, and highly regulated environment, managing multiple priorities with a high degree of independence.Key ResponsibilitiesRisk ManagementIdentify, assess, classify, and monitor operational and business risksMaintain and continuously improve the organization's risk mapping and risk assessment processesEstablish, monitor, and report Key Risk Indicators (KRIs) and other relevant risk metricsIdentify emerging risks and potential adverse events, providing management with relevant analysis and recommendationsSupport the definition and monitoring of risk appetite, tolerance levels, and mitigation strategiesPrepare risk reports, dashboards, and management insights to support informed decision-makingInternal ControlsMap, document, assess, and continuously improve internal controls across business areasPlan and execute internal control adherence and effectiveness testsIdentify control deficiencies, assess their potential impact, and recommend appropriate remediation measuresMonitor internal control action plans, ensuring proper follow-up, accountability, and timely remediationPartner with business areas to strengthen the control environment and promote risk-aware decision-makingSupport the design and implementation of new controls in response to identified risks, regulatory requirements, or business changesGovernance, Compliance & Stakeholder ManagementEnsure Risk and Internal Controls practices are aligned with applicable regulatory requirements, internal policies, and organizational standardsSupport internal and external audits by providing relevant documentation, evidence, and risk and control informationAct as a key point of contact for Risk and Internal Controls matters across different business areasProvide guidance and constructive challenge to stakeholders regarding risk identification, control effectiveness, and mitigation plansPrepare presentations, reports, and management materials for relevant governance forums and senior stakeholdersIndependently manage priorities, deadlines, and deliverables, proactively identifying and escalating relevant risks and issues when necessaryRequirementsEducation & ExperienceBachelor's degree in Business Administration, Engineering, Economics, Accounting, Finance, or related fieldsPrevious experience in Risk Management, Internal Controls, Internal Audit, Compliance, or related areasProven experience in the planning, execution, testing, and monitoring of internal controlsHands-on experience with risk mapping, risk assessment, control testing, Key Risk Indicators (KRIs), and remediation plansProven ability to work independently, manage priorities, and interact effectively with multiple business areas and senior stakeholdersTechnical KnowledgePractical knowledge of MS Office, particularly ExcelKnowledge of COSO and/or ISO 31000 is a plusExperience with Business Continuity Management and Business Continuity Plans (BCP) is a plusLanguagesAdvanced EnglishIntermediate to advanced SpanishImportant InformationFull-time position under a CLT (Brazilian employment) contractHybrid work model, based in São Paulo/SP - BrazilBenefitsCompetitive compensation - aligned with your experience and the marketMeal allowance - provided through a prepaid card, with the flexibility to use part of the balance beyond food expensesHealth and dental plan - no monthly cost for you and your dependents, with comprehensive coverage to take care of your health and well-beingTotalPass - access to gyms and partner studios, encouraging a healthy and balanced lifestyle