Risk & Compliance Assurance Manager

We’re Capital on Tap

Capital on Tap started because small businesses were underserved. Big banks were slow, their products weren't fit for purpose, and small business owners often couldn't access what they needed. We set out to fix that.

Today we're a financial platform – not just a credit card company. We offer a best-in-class business credit card, SME-focused spend management platform, a savings product that hit £1 billion in funds within its first year, and a growing suite of tools and financial products that make running a small business easier.

1,000+ employees, £20bn in annual card spend, 200,000+ customers, 17,000+ Trustpilot reviews averaging 4.7 stars, and we're profitable. We’ve done a pretty good job so far, but we’re just getting started!

Hybrid role, with a minimum of 3 days a week in our London office.

The Risk & Compliance team is the second line of defence at Capital on Tap, working at the intersection of regulation, product and business growth. As our Risk & Compliance Assurance Manager, you'll develop the compliance monitoring plan, co‑ordinating with other second line teams, develop and maintain monitoring best practice, and independently test how well the business is managing risk and complying with the rules, providing oversight, challenge and governance that gives the Risk Committee, regulators and partner banks confidence that controls are working as intended.

This is a senior leadership role for someone who has built and run an independent monitoring programme before and wants to do it again at a fast‑growing Fin Tech. You'll own the Risk and Compliance Monitoring Plan, design the thematic reviews and control tests that pressure‑test first‑line controls, and lead the follow‑up of actions to closure. The ideal candidate will combine significant monitoring expertise, analytical judgement, and a pragmatic, problem‑solving and risk‑based approach.

• Lead Capital on Tap's Risk and Compliance Monitoring Plan, operating independently from the advisory team and providing oversight, challenge and governance to the first line.
• Design a risk‑based monitoring plan: set the standards for how reviews are scoped, conducted and reported.
• Design and conduct thematic reviews and control tests, focusing across risk and regulatory compliance, to assess whether first‑line controls are working as intended across products, processes and partner banks.
• Coordinate monitoring across UK Compliance, Financial Crime and US Compliance teams, sharing standards and findings to lift overall quality.
• Own follow‑up of monitoring actions to closure, surfacing ageing actions to the Risk Committee and engaging the business constructively where actions are not progressing.
• Produce monitoring reporting for the Risk Committee, senior leadership and partner banks; translate findings into clear, actionable recommendations for implementation.
• Quality‑assure monitoring reviews performed by other areas, ensuring independence and consistency of approach.
• Provide pragmatic, business‑minded challenge that helps the first line improve controls.

• Independent monitoring experience: hands‑on experience owning or running a compliance monitoring or independent assurance programme in a UK FCA‑regulated firm, designing and running reviews end‑to‑end.
• Second‑line mindset: proven experience operating in the second line, independent of the first line, confident in providing constructive challenge when controls fall short.
• Risk‑based planning: track record of building risk‑based monitoring plans.
• Regulatory expertise: solid working knowledge of FCA SYSC and the EMD/PSD regime applied in practice.
• Control testing: demonstrable experience designing thematic reviews and control tests, including confidence in analysing data and systems.
• Stakeholder influence: confident presenting findings and recommendations to senior stakeholders, governance forums and partner banks.
• Action tracking discipline: track record of driving monitoring actions to closure, including navigating the harder conversations about ageing actions.
• Analytical & written communication: clear, evidence‑based…