Conferma is a global payment technology company who combine innovation and expertise to push the boundaries of what can be achieved in the world of virtual payments. We were created in 2005 and were more recently acquired by Sabre, with additional investment from Mastercard. Over the past decade, the Conferma ecosystem has grown, enabling us to become the world's largest payments platform for virtual cards.
We've engineered connectivity to over 90 of the world's best commercial card partners, over 400 travel management companies and over 150 travel technology partners. Every day, our team members work together to make it easier for travellers to connect with people and places. Our teams include passionate people dedicated to providing an environment that encourages partnership, a place where you feel like you belong, and where you are empowered to succeed. We look forward to having you join our journey - and seeing how far we can go, together!
The position:
At Conferma, our continued success lies in ensuring our policies, procedures and regulations comply with the highest industry standards and meet our customers' needs and expectations. We're seeking an experienced Risk & Compliance Lead to drive our enterprise approach to compliance, data protection, operational resilience, and risk management. This role will lead the design, implementation, and continuous improvement of Enterprise frameworks, policies, and training to ensure compliance with evolving UK, EU and global regulatory requirements.
As a senior risk and compliance leader, you will act as a strategic partner to the business, collaborating across all Conferma teams, to embed practical, risk-based controls that support growth and innovation while protecting Conferma and our clients. Strong communication, stakeholder engagement, and the ability to translate complex regulatory requirements into actionable business guidance are essential.
This role will work alongside the information security GRC function as well as risk owners across the business.
You'll be responsible for:
-
Own and maintain the Enterprise Risk Universe and enterprise risk register.
-
Lead the development and enhancement of Enterprise Risk Management, Operational Resilience, and Data Protection frameworks.
-
Ensure compliance with UK, EU, and global privacy, security, and regulatory requirements.
-
Provide expert guidance on risk, compliance, regulatory change, AI governance, and third-party risk.
-
Oversee customer audits and drive continuous improvement of controls and governance.
-
Identify, assess, and monitor strategic and operational risks across the business.
-
Provide second-line oversight of cyber, AI, vendor, and emerging risks.
-
Produce high-quality risk reporting and insights for senior leadership.
-
Build strong stakeholder relationships to embed risk ownership and accountability.
-
Design and deliver risk and compliance training, promoting a positive risk culture.
-
Drive continuous improvement across risk, governance, and compliance practices.
You will have:
-
Experience in risk, compliance, operational resilience or a related field (fintech or payments experience strongly preferred).
-
Strong understanding of technology, cloud, data management, and operational risk.
-
Proven experience designing and embedding risk and compliance frameworks in a fast-paced environment.
-
Exceptional analytical, problemsolving, and communication skills.
-
Experience partnering with senior stakeholders and influencing decision making.
-
Expertise in UK and EU data protection laws (UK GDPR, EU GDPR), UK operational resilience regulation, cyber-security expectations, and AI governance trends. (Desirable)
-
A working understanding and awareness of cyber-security risk sufficient to provide effective second-line oversight in a fintech environment. (Desirable)
You are:
-
Forward thinking and creative: strong business acumen, particularly in determining the significance of data privacy, risk and matters and effectively minimising risks.
-
A collaborator: building relationships across teams and enabling the business to adopt best practice.
-
A clear communicator: able to translate complex requirements into meaningful business guidance.
-
A problem solver: both at tactical and strategic levels. Thinks clearly and quickly about issues. Has an eye for detail and identifies critical information within complex scenarios. Uses the relevant information to make the balanced judgment and follows through to action.
-
A connector: collaborating with key stakeholders to monitor, manage and help mitigate risk
-
Always learning: Committed to learning and being challenged within their role. Will always be looking to improve their skills and knowledge.
Compensation:
Bonus: 10%
Benefits at Conferma:
At Conferma we understand that our people are what make us great. We have set out to provide a comprehensive benefits package that includes everything you would expect, as well as providing flexibility for you and your family.
-
A salary sacrifice pension to maximise your contributions
-
Life Assurance cover to provide peace of mind
-
Enhanced Company sick pay to put your mind at rest
-
Single cover private medical scheme, with the flexibility to add family members at your own cost
-
25 days paid annual leave plus bank holidays, allowing you to focus on what's important to you outside of work
-
The ability to purchase up to 10 additional days holiday each year to enable additional time off
-
Additional paid time off for life events, such as moving house or getting married
-
An additional days leave on or around your birthday
-
Enhanced paid parental leave on the birth or adoption of your child
-
A confidential Employee Assistance program (EAP) available to all 24/7
-
Access a range of fantastic additional rewards, such as Cycle 2Work, Gym Membership, Tech Scheme and discounted shopping and Cinema tickets, via Conferma Rewards
Diversity, Equity and Inclusion
We are committed to ensuring equal opportunity for all. We intend that no job applicant or employee shall receive less favorable treatment, nor be disadvantaged by any conditions or requirements which are irrelevant.
