Senior Risk and Internal Controls Analyst (BR120-GRC)

OKTO’s continuous growth demands high-caliber candidates, who can demonstrate professionalism, passion, and creativity. For those who come on board, we offer significant career advancement, challenges, and a runway for growth.

OKTO powers digital payments for every entertainment, leisure, and gaming environment. Our unified payment platform combines secure, real-world transactions with the most powerful payment technology to create immersive payment experience for both merchants and their users.

Since 2019, OKTO has been improving payment interactions for online and retail gaming and introducing frictionless payments with its local knowledge, sector expertise and international capabilities.

The expanding business now employs over 100 payment experts, gaming insiders and software engineers, serving some of the most exciting international markets including, Brazil, Romania, Italy, Greece, Germany, the UK and Spain.

Role Summary:

We are looking for a senior professional with strong autonomy, maturity, analytical capabilities, and proven ownership of responsibilities and deliverables. This professional should be able to independently lead Risk and Internal Controls activities, from planning and execution to monitoring and continuous improvement, while translating risk and control information into actionable management insights.


The professional will work closely with key stakeholders across the organization to identify, assess, monitor, and mitigate risks, ensuring that risk appetite, internal controls, and mitigation measures are properly aligned with business objectives and applicable regulatory requirements.

The role requires strong communication and stakeholder management skills, as well as the ability to constructively challenge processes and controls, identify opportunities for improvement, and recommend practical and effective solutions. The successful candidate should be comfortable working in a dynamic, changing, and highly regulated environment, managing multiple priorities with a high degree of independence.

Key Responsibilities

Risk Management

• Identify, assess, classify, and monitor operational and business risks.
• Maintain and continuously improve the organization's risk mapping and risk assessment processes.
• Establish, monitor, and report Key Risk Indicators (KRIs) and other relevant risk metrics.
• Identify emerging risks and potential adverse events, providing management with relevant analysis and recommendations.
• Support the definition and monitoring of risk appetite, tolerance levels, and mitigation strategies.
• Prepare risk reports, dashboards, and management insights to support informed decision-making.

Internal Controls

• Map, document, assess, and continuously improve internal controls across business areas.
• Plan and execute internal control adherence and effectiveness tests.
• Identify control deficiencies, assess their potential impact, and recommend appropriate remediation measures.
• Monitor internal control action plans, ensuring proper follow-up, accountability, and timely remediation.
• Partner with business areas to strengthen the control environment and promote risk-aware decision-making.
• Support the design and implementation of new controls in response to identified risks, regulatory requirements, or business changes.

Governance, Compliance & Stakeholder Management

• Ensure Risk and Internal Controls practices are aligned with applicable regulatory requirements, internal policies, and organizational standards.
• Support internal and external audits by providing relevant documentation, evidence, and risk and control information.
• Act as a key point of contact for Risk and Internal Controls matters across different business areas.
• Provide guidance and constructive challenge to stakeholders regarding risk identification, control effectiveness, and mitigation plans.
• Prepare presentations, reports, and management materials for relevant governance forums and senior stakeholders.
• Independently manage priorities, deadlines, and deliverables, proactively identifying and escalating relevant risks and issues when necessary.

Requirements

Education & Experience

• Bachelor's degree in Business Administration, Engineering, Economics, Accounting, Finance, or related fields.
• Previous experience in Risk Management, Internal Controls, Internal Audit, Compliance, or related areas.
• Proven experience in the planning, execution, testing, and monitoring of internal controls.
• Hands-on experience with risk mapping, risk assessment, control testing, Key Risk Indicators (KRIs), and remediation plans.
• Proven ability to work independently, manage priorities, and interact effectively with multiple business areas and senior stakeholders.

Technical Knowledge

• Practical knowledge of MS Office, particularly Excel.
• Knowledge of COSO and/or ISO 31000 is a plus.
• Experience with Business Continuity Management and Business Continuity Plans (BCP) is a plus.

Languages

• Advanced English.
• Intermediate to advanced Spanish.

Important Information

• Full-time position under a CLT (Brazilian employment) contract
• Hybrid work model, based in São Paulo/SP – Brazil

Benefits

• Competitive compensation – aligned with your experience and the market.
• Meal allowance – provided through a prepaid card, with the flexibility to use part of the balance beyond food expenses.
• Health and dental plan – no monthly cost for you and your dependents, with comprehensive coverage to take care of your health and well-being.
• TotalPass – access to gyms and partner studios, encouraging a healthy and balanced lifestyle.