Senior Manager, Technology Risk Assurance

About Airwallex Airwallex is the AI-native financial operating system for a real-time, intelligent economy. More than 675,000 businesses, including McLaren Racing, Qantas, SHEIN, and TikTok, use us, directly or through our platform partners, to run their financial operations or build and monetize financial products of their own. We started in Melbourne in 2015 to build the infrastructure global commerce runs on. We're the regulated backbone behind global payments: not by accident, but by design. A decade plus, 85+ licenses, and a financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific. We're co-headquartered in San Francisco and Singapore, with more than 2,700 people across 27 offices. We hire builders with founder-level energy, people who move fast with good judgment, dig in with real curiosity, and make calls from first principles rather than waiting to be told what to do. Read our operating principles to see it in full.   How you'll make impact You’ll build and scale a practical Second Line of Defence technology risk assurance function for a fast-growing, regulated fintech. • Recruit, mentor, and lead a lean, high-performing team of technology risk engineers and assurance specialists, fostering technical depth, code-first assurance, and cross-functional agility. • Lead second-line assurance across ITGCs and IT application controls, cloud infrastructure and database management, CI/CD and change enablement, IAM and privileged access, API and automated data pipeline integrity, and business continuity and disaster recovery. • Build an automation-first assurance engine using AI agents, automated workflows, and custom Python and SQL scripts for continuous control testing, evidence retrieval, and remediation validation. • Establish automated finding lifecycle and remediation governance, surfacing control failures to engineering leads and validating fixes without drawn-out re-audit cycles. • Design and execute control frameworks for generative AI, LLMs, agentic workflows, machine learning models, and automated decision engines. • Partner with external auditors and global regulators to defend autonomous testing scripts and AI-agent methodologies, ensuring automated evidence is trusted and relied upon. • Translate complex technology risk into clear recommendations for engineers, senior executives, and board-level risk committees, drawing on frameworks and expectations including NIST, ISO 27001, SOC 1, SOC 2, DORA, MAS TRM, FCA, HKMA, ASIC, and FinCEN. You’ll work from our Amsterdam or London office three days a week. What we're looking for Essentials • 8+ years of progressive experience in technology risk, IT audit, information security assurance, or technology compliance, including proven experience in a Second Line of Defence risk assurance capacity. • Big Four background. • Experience building and testing risk controls. • A track record of recruiting, mentoring, and leading high-performing technical risk or assurance teams. • Deep practical expertise in ITGCs, IT application controls, automated business controls, and SOX compliance within complex distributed architectures. • Hands-on experience assessing cloud risks across AWS or GCP, particularly IAM, privileged access and segregation of duties, Firefighter workflows, CI/CD pipelines, database controls, and modern API security. • Practical ability to write and use SQL, Python, or API scripts to query databases, automate evidence extraction, and reduce manual sampling. • Strong conceptual and practical understanding of risks and controls around AI/ML systems, LLMs, and automated decision engines, including data drift, access guardrails, and model integrity. • Proven ability to constructively challenge First Line engineering leads wh