Risk and Compliance Officer

It is our vision to connect the insurance community through market-leading technology. Our people are placed at the heart of this, and diversity, equity and inclusion are central to everything we do.

We know the key to achieving success is to enable a positive, inclusive, and collaborative working culture, and, as part of our commitment, we have signed up for a number of pledges and programmes designed to support and nurture our people.

No matter where you sit or which team you are a part of, we want you to know that you contribute in helping us to shape where the company will be in the future. We would love for each employee to be able to talk with pride about our company and, most importantly, consider Open GI to be an inclusive, fun and fulfilling place to work.

The Risk and Compliance Officer will play a critical role in safeguarding the organisation by ensuring compliance with legal, regulatory, and industry standards while proactively managing risk across all operations. This position is responsible for building and maintaining a robust compliance framework that addresses payment security, cybersecurity regulations, FCA compliance and product-related requirements.

The role leads initiatives to achieve compliance with PCI DSS, PRA/FCA, and other relevant regulations, embedding risk management practices into everyday processes. The Risk and Compliance Officer will manage vendor and partner risk assessments to ensure third‑party relationships meet stringent security and compliance standards. Working closely with product teams, the role ensures compliance is integrated throughout the product lifecycle, from design to deployment.

As a trusted advisor to senior leadership, the Risk and Compliance Officer monitors emerging regulations, evaluates potential impacts, and implements strategies to maintain compliance and mitigate risk effectively. This position demands a strong understanding of regulatory landscapes, risk management principles, and regulatory compliance, combined with the ability to influence stakeholders and foster a culture of compliance across the organisation.

• Develop and maintain compliance programs aligned with PCI DSS, FCA and other legal frameworks.
• Drive enterprise‑wide risk management processes, identifying and mitigating legal and operational risks.
• Ensure adherence to regulatory requirements, industry standards, and internal policies.
• Conduct critical vendor and partner risk assessments, ensuring third‑party compliance with legal, finance and security requirements.
• Manage reporting and other regulatory requirements for the FCA regulated entity in the group, Powerplace.
• Collaborate with product teams to embed compliance requirements into product design and development.
• Develop and implement a Risk Management Framework for the organisation.
• Develop a regular cadence of risk management reporting to the Executive Team, Audit Committee and the Board.
• Manage the group wide insurance policies and oversee renewals.
• Monitor regulatory changes and industry trends, advising leadership on implications and necessary actions.
• Perform internal audits and compliance reviews, reporting findings and recommending improvements.
• Deliver training and guidance to staff on compliance obligations and risk management best practices.

What you’ll need to succeed

• 5 years + experience in a risk and compliance function in a regulated business (preferably experience of leading a small team or being second in command of a larger team).
• Proven track record in risk management and compliance, with hands‑on experience implementing frameworks that meet regulatory and industry standards preferably in an FCA regulated environment.
• Strong background and understanding of PCI DSS compliance, including policy development, audit preparation, and remediation activities.
• Experience of FCA/PRA risk frameworks.
• Demonstrated ability to conduct critical vendor and partner risk assessments, negotiate compliance requirements, and manage third‑party risk programs.
• Exposure to product compliance, including integrating legal and regulatory requirements into product…