
Upsun · Remote • Canada
ABOUT UPSUN (FORMERLY PLATFORM.SH) Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write...
Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write and
test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun
to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back. You get:
The name says it all. "Up" means uptime, reliability, and acceleration. "Sun" reflects our follow-the-sun-support, a 24x7,
globally distributed support team keeping the lights on while you rest. Our core belief is that software should power brighter
solutions and greater innovation.
Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open,
welcoming environment. Our team spans the globe and the experience spectrum.
What's our commonality, our cultural fabric? A curious spirit and a thirst for knowledge; an eagerness for innovative ideas and
cultures. We believe we can build anything together in an environment that frees you to do your best work.
🌿 We make a positive impact.
✨ We aim for the stars.
💚 We care for each other.
As a Senior Risk & Audit Specialist at Upsun, you help keep our security, risk, audit, and compliance work moving with clarity,
care, and consistency. Reporting to the Director, Risk & Audit, you'll work closely with teams across Security, Engineering, IT,
Legal, Product, and Sales to keep key audits and certifications (including ISO 27001, SOC 2, PCI DSS, and HIPAA) on track and our
global business audit-ready.
You're practical, organized, and curious; someone who enjoys making complex requirements easier to understand and thrives when
balancing planned work with time-sensitive audit and customer requests. You partner with control owners across the business to
coordinate evidence, monitor risk, and turn complex requirements into guidance that's easy to act on.
Beyond keeping audits on track, you contribute to the long-term evolution of our risk and compliance program by supporting
readiness for new and expanding assurance needs, simplifying repeatable processes, and improving evidence quality. Your attention
to detail, cross-functional mindset, and clear communication help leadership stay informed and give our customers confidence in
our security posture.
relevant assurance work by coordinating evidence collection, reviewing evidence quality, scheduling walkthroughs, and following
up with control owners.
treatment follow-up by working with teams to identify control gaps, agree on practical actions, and track remediation through
to completion.
risk.
(including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM) while maintaining policies, procedures, control narratives and
supporting documentation.
Legal, Security, and Product, and support updates to the Trust Center and other trust documentation.
for leadership and look for opportunities to simplify repeatable processes and reduce audit friction for control owners.
related area.
tracking.
42001, GDPR, PIPEDA or similar standards.
once.
varied timezones.
At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global
team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team
members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, Spain, Germany, France,
or the United Kingdom. Although we’re unable to provide visa sponsorship at this time, we welcome applications from all qualified
candidates who are legally authorized to work in these countries.
We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to
hear your story. Few of us would be here had we not taken a chance.
You can expect 5 interviews to follow the order below. Should you successfully move through the entire process you will have the
opportunity to meet with a variety of Upsunners. Our goal is to ensure you can make the most informed decision on whether this
role, and our culture aligns with what you’re looking for in your future working environment.
1. 45 Minutes with Talent Acquisition
2. 60 Minutes with Hiring Manager (Director, Risk & Audit)
3. 60 Minutes with Team (IC's)
4. 60 Minutes Cross Team (Leaders)
5. 45 Minutes with Executive (CFO)
All roles require background checks.
💡 A product you can believe in - Join us in transforming how businesses build and manage web applications, driven making a
positive impact as a proud B Corp.
🏆 An Award-Winning Workplace - We’ve been recognized by Forbes’ Top 30 Companies for Remote Jobs and France’s Best Workplaces for
Women.
🗣️ A culture that values your voice - Join a flexible, open, and inclusive work environment where your voice is encouraged, and
your ideas shape our growth and evolution.
🌎 A global team - Collaborate with colleagues from diverse backgrounds across the world, embracing different perspectives
🎉 Benefits and perks - Make the most of what matters to you
> 🏝 Flexible PTO
>
> 🩺 Comprehensive healthcare coverage (UK, Canada, France, Spain, USA)
>
> 📈 Company stock options
>
> 🧠 Professional development budget
>
> 💻 Office equipment budget
>
> 💆♀️ Wellness budget
>
> 🧳 Annual team gatherings
>
> 🛜 Internet reimbursement
>
> 👶 Inclusive parental leave
>
> ✈️ Remote work travel program
At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace
where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us
stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you
to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our
hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.
ABOUT UPSUN (FORMERLY PLATFORM.SH) Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write and test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back. You get: * Predictable performance, even at scale * Secure, compliant environments by default * Real-time observability and profiling built in * Cloning, configuration, and provisioning in seconds * AI-ready features that plug directly into your stack The name says it all. "Up" means uptime, reliability, and acceleration. "Sun" reflects our follow-the-sun-support, a 24x7, globally distributed support team keeping the lights on while you rest. Our core belief is that software should power brighter solutions and greater innovation. Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open, welcoming environment. Our team spans the globe and the experience spectrum. What's our commonality, our cultural fabric? A curious spirit and a thirst for knowledge; an eagerness for innovative ideas and cultures. We believe we can build anything together in an environment that frees you to do your best work. Our values: 🌿 We make a positive impact. ✨ We aim for the stars. 💚 We care for each other. IMPACT OF AN IT SYSTEMS ENGINEER As an IT Systems Engineer you take the identity plane from working to well-run: automated, governed, and consistent, so access is correct by default, and our auditors find evidence rather than surprises. Reporting to the IT Director, you play a pivotal role in a growing internal IT department, driving the internal systems layer around identity—from our SaaS estate to Google Workspace. You are the person who makes identity quietly reliable: predictable, documented, and automated, while remaining flexible enough to support the wider IT function as our scaling remote organization evolves. WHAT TO EXPECT * Identity and access management: Own Okta as the backbone of how people get access, managing the app catalog (SSO integrations for new SaaS tools), policy management (MFA, device trust), and directory hygiene (Universal Directory, group management, breakglass access). Run identity day to day, refine our SSO and SCIM integrations, and keep joiner, mover, and leaver flows accurate from our HR system. * Lifecycle and access automation: Automate provisioning and deprovisioning so access is granted and revoked automatically, not by hand. Build and maintain workflows with tools like Okta Workflows and n8n, manage access configuration as code, and keep SCIM provisioning in sync with our HR system. * Process and governance: Structure and harmonize clear procedures around the identity plane, so access requests, approvals, and reviews follow one consistent, documented path instead of ad hoc steps. * Internal IT systems and SaaS administration: Own our internal systems end to end. Integrate, secure, and validate our SaaS stack, administer Google Workspace as our core collaboration suite, connect our tools through Okta and our HR system, and own the application validation process. * Compliance engineering: Implement and evidence access controls for ISO 27001 and SOC 2 Type 2 with our Security team, ensuring access reviews and audit logs are a by-product of well-built systems, not a quarterly scramble. * Endpoint and device management (shared): Partner on administrating Jumpcloud our MDM across macOS, Windows, and Linux, sharing endpoint and device management with our IT Operations and Endpoint Manager so coverage scales with the team. * Where the team needs you: We are a small, growing IT team, so scope will flex over time. You are happy to pick up adjacent systems work and support across the wider IT function as our needs evolve. WHAT YOU BRING * Identity expertise: Deep, hands-on experience with Okta or a comparable identity provider, including SSO, SCIM, lifecycle automation, and API-driven provisioning * IT Experience: Typically 5 or more years in IT systems, identity, or access engineering, including time in a developer-heavy or engineering-led environment. * Automation skills: You build automation with tools like Okta Workflows, n8n, or similar, you are comfortable with APIs and webhooks, and you script in Python or a comparable language. * Process optimization: You bring order to environments that grew quickly. You write clear procedures, standardize how things are done, and leave systems better documented than you found them. * SaaS-first operations: You have run and integrated a SaaS-based environment, where identity and APIs matter more than racks and networks. * Compliance fluency: You have worked inside ISO 27001 or SOC 2, ideally Type 2 where evidence is continuous, and you understand what auditors actually need. * Remote collaboration: You work well without close supervision in a fully remote team, and you communicate clearly with technical and non-technical colleagues alike * Google Workspace administration: We are a Google shop, so hands-on Google Workspace administration is core to this role: users, groups, policies, and security settings. * Working style: You are comfortable wearing several hats in a small IT team, picking up adjacent systems and endpoint work, and flexing as priorities shift. BONUS POINTS * Comfort managing configuration through Git-based workflows, or infrastructure as code with Terraform. * Professional proficiency in French. WHERE WE HIRE At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, France, Germany, Spain, and the United Kingdom. Although we’re unable to provide visa sponsorship at this time, we welcome applications from all qualified candidates who are legally authorized to work in these countries. HOW WE HIRE We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance. You can expect 4 interviews on Google Meet to follow the order below. Should you successfully move through the entire process you will have the opportunity to meet with a variety of Upsunners. Our goal is to ensure you can make the most informed decision on whether this role, and our culture aligns with what you’re looking for in your future working environment. 1. 45 Minutes with Talent Acquisition 2. 60 Minutes with Hiring Manager (Director, IT) 3. 60 Minutes with Team (Senior Director, Site Reliability Engineering & Senior IT Manager) 4. 45 Minutes with Executive (Senior Director, FP&A & IT) All roles require background checks. WHAT WE OFFER 💡 A product you can believe in - Join us in transforming how businesses build and manage web applications, driven making a positive impact as a proud B Corp. 🏆 An Award-Winning Workplace - We’ve been recognized by Forbes’ Top 30 Companies for Remote Jobs and France’s Best Workplaces for Women. 🗣️ A culture that values your voice - Join a flexible, open, and inclusive work environment where your voice is encouraged, and your ideas shape our growth and evolution. 🌎 A global team - Collaborate with colleagues from diverse backgrounds across the world, embracing different perspectives 🎉 Benefits and perks - Make the most of what matters to you > 🏝 Flexible PTO > > 🩺 Comprehensive healthcare coverage (UK, Canada, France, Spain) > > 📈 Company stock options > > 🧠 Professional development budget > > 💻 Office equipment budget > > 💆♀️ Wellness budget > > 🧳 Annual team gatherings > > 🛜 Internet reimbursement > > 👶 Inclusive parental leave > > ✈️ Remote work travel program YOU BELONG HERE At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.
🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts, accounts for 16-17 year olds, a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save, invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ ---------------------------------------------------------------------------------------------------------------------------------- 📍Dublin, Ireland | 💰 €92,000 - €112,000, Incentive Awards tied to your performance ➕benefits | Hear from the team ✨ ⭐Our Risk team This role sits within our 2nd line of defence risk management team. Acting as a senior technical specialist within the Financial Risk function, it will involve supporting the Director in delivering robust oversight across several financial risk disciplines. The role has a strong focus on IRRBB, capital adequacy and stress testing (ICAAP), and liquidity and balance sheet risk (ALM), ensuring that frameworks, models, and methodologies are fit-for-purpose, compliant, and aligned with regulatory expectations. The role you are applying for is a Controlled Function (CF-2) within the meaning of the Central Bank Reform Act, 2010. For this role, appointment will be conditional on Monzo being fully satisfied that the appointee meets the requirements as set out in the Fitness and Probity Standards issued by the Central Bank of Ireland. As a CF, the role holder will be subject to Conduct Standards under the Central Bank of Ireland Individual Accountability Framework (IAF) and will be required to take reasonable steps to ensure that the relevant conduct standards are met. 🔑You’ll play a key role by… Driving delivery of the Financials Risk Functions objectives across the following areas of responsibility: Technical Leadership – Financial Risk Models & IRRBB * Leading independent 2LoD validation and review of financial risk models, with a focus on; Interest Rate Risk in the Banking Book (IRRBB), behavioural models (e.g. deposits, prepayments) and hedging strategies and valuation approaches * Assessing model design, assumptions, limitations, and performance, ensuring alignment with regulatory expectations (e.g. EBA IRRBB guidelines) * Providing independent technical challenge to first line model development and usage * Overseeing overarching model governance, including validation cycles, documentation standards, and model risk controls * Supporting development and enhancement of IRRBB measurement methodologies (e.g. EVE, NII metrics) Capital Adequacy, ICAAP & Stress Testing * Playing a leading role in ICAAP development, review, and ongoing enhancement * Providing independent oversight and challenge of; capital adequacy assessments, risk quantification methodologies, scenario design and stress testing frameworks and risk appetite calibration * Designing and reviewing stress testing scenarios (macroeconomic, idiosyncratic, reverse stress) * Assessing capital planning and forecasting, including base and stressed balance sheet projections * Ensuring ICAAP documentation meets regulatory standards and audit expectations * Supporting interactions with regulators on capital-related topics Liquidity Risk & Treasury Oversight (ALM) * Providing 2LoD oversight of liquidity risk and funding frameworks, including ILAAP and liquidity risk metrics (LCR, NSFR, survival horizon) * Reviewing and challenging Treasury activities, including; balance sheet management, funding strategies and wholesale credit exposures * Assessing assumptions underpinning liquidity stress testing and contingency funding plans * Providing oversight of ALM practices, including interest rate positioning and structural hedging * Supporting review of Recovery Plan and Solvent Wind Down (SWD) from a liquidity and funding perspective Risk Monitoring, Reporting & Regulatory Submissions * Leading production and independent review of financial risk MI (capital, liquidity, IRRBB), stress testing outputs and sensitivity analysis * Reviewing and challenging key regulatory submissions, including; ICAAP and ILAAP, pillar 3 disclosures, recovery plan and SWD * Ensuring data integrity, traceability, and auditability of risk outputs * Identifying emerging risks and escalate material issues appropriately Business Partnering & Expert Challenge * Acting as a technical advisor to Treasury, Finance, and Risk teams * Providing credible and constructive challenge on methodologies, assumptions, and decision-making * Supporting the embedding of robust financial risk practices across the organisation * Contributing technical expertise to strategic initiatives (e.g. product launches, balance sheet optimisation) Governance & Committees * Supporting preparation of materials for ALCO and Executive and Board Risk Committees * Presenting technical analysis and insights where required * Supporting escalation and documentation of key financial risk issues Regulatory & Control Environment * Ensuring alignment with CBI, EBA, and other applicable prudential regulations alongside internal financial risk frameworks and policies * Supporting adherence to fitness & Probity standards and individual Accountability Framework (IAF) Conduct Standards * Maintaining high standards of documentation, controls, and audit readiness 🤩 We’d love to hear from you if you have…… * Strong technical expertise in one or more of IRRBB modelling and measurement, capital adequacy and ICAAP, liquidity risk and ALM * Experience in model validation, quantitative analysis, or risk methodology development * Deep understanding of prudential regulation (CRR/CRD, EBA guidelines, ICAAP/ILAAP expectations) * Strong analytical and problem-solving skills with attention to detail * Ability to challenge effectively and communicate complex concepts clearly to senior stakeholders * Experience working with Treasury, Finance, or Risk teams in a banking environment 🙌What’s in it for you 💰A salary range of €92,000 - €112,000 ➕Incentive Awards tied to your performance. 📍This role will have a hybrid working model, based in our Dublin office 2 - 3 days a week. ⏰We offer flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team. 🏝 Annual Leave - 34 days including public holidays (24 holiday days + 10 public holidays) 📚€1,200 learning budget each year to use on books, training courses and conferences. 🏥Private healthcare scheme 💰Pension scheme: the minimum contribution is 4% and Monzo matches any additional contributions that you make up to a maximum of 6% 💛Wellbeing benefits: financial education, women’s and men’s health support, mental health benefits, including coaching and counselling 🌈 The application journey has 4 key steps * An introductory call with a member of the Monzo Recruitment team * An initial call with the hiring manager * A series of role specific, behavioural & leadership principles interviews * Final stage interview This process should take around 3-4 weeks - your schedule is really important to us, so we promise to be as flexible as possible! We have some guidelines on using Artificial Intelligence (AI) to ace an application and interview at Monzo. You can read them here. We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out. #LI-ÉS1 ---------------------------------------------------------------------------------------------------------------------------------- Equal opportunities for everyone Diversity and inclusion are a priority for us and we’re making sure we have lots of support for all of our people to grow at Monzo. At Monzo, we’re embracing diversity by fostering an inclusive environment for all people to do the best work of their lives with us. This is integral to our mission of making money work for everyone. You can read more in our blog, 2026 Diversity and Inclusion Report and 2025 Gender Pay Gap Report. We’re an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If you have a preferred name, please use it to apply. We don't need full or birth names at application stage 😊
WHO WE ARE ABOUT STRIPE Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. ABOUT THE TEAM To advance Stripe's important mission, we are building a world-class Internal Audit (IA) team. Our purpose is to strengthen the organization's ability to create, protect, and sustain value by providing the board and management with independent, risk-based, and objective assurance, advice, insight, and foresight. We are consumed with the goal of moving as fast as the business, being powered by technology, and increasing the maturity of Stripe's controls where it matters most. Our IA team is responsible for providing objective assurance on the design and operational effectiveness of Stripe's internal controls and business processes, its compliance with laws and regulations, its risk management framework, and other governance processes. Organized as a single global function, the team operates under a unified methodology, set of policies, and governance model—with specialized leads who bring deep domain expertise while working in alignment with that shared framework. We're looking for a leader with extensive finance, operations, fiduciary, and regulatory compliance audit experience who will help us build and scale a global audit program. WHAT YOU'LL DO As the IA Lead for Stablecoins and Digital Assets, you'll be the primary architect of our internal oversight framework for stablecoin and digital asset activities—serving as a subject matter expert and embedded specialist within the global Internal Audit team, reporting to Bridge National Trust Bank's Audit Committee as its Chief Audit Executive. You'll design and lead a comprehensive, risk-based internal audit strategy tailored to the unique demands of an OCC-regulated national trust bank and one of the most dynamic and highly regulated frontiers of payments and treasury—stablecoins. You'll serve as a critical independent voice, producing assessments that enable the Board, Audit Committee, and senior leadership to make informed decisions about operational resilience, custody and treasury, counterparty and ledger risk, fiduciary obligations, and regulatory compliance. This role moves beyond traditional auditing—you'll assess control design and remediation across on-chain and off-chain systems, smart contract integrations, liquidity management, fiduciary frameworks, and partner networks. RESPONSIBILITIES * Lead and execute a risk-based internal audit strategy providing end-to-end coverage for stablecoin activities—including issuance and redemption flows, treasury and reserve management, custody and key management, on-ramps and off-ramps, and interoperability with payment rails and banking partners—in full compliance with OCC 12 CFR Part 30 (Heightened Standards). * Audit key fiduciary frameworks applicable to trust and custodial products (including those subject to Regulation 9), assessing and testing governance, compliance, treasury, financial reporting, reconciliation, technology, risk management, and operational controls unique to stablecoin programs and trust banking to ensure design and operating effectiveness. * Coordinate audits that integrate on-chain evidence, blockchain analytics, and transaction tracing with traditional financial audit techniques to produce objective findings and recommendations. * Present independent, objective reports directly to the Audit Committee and Board on the effectiveness of internal controls, risk management, and governance processes, communicating complex technical and regulatory risks to senior stakeholders in clear, actionable terms. * Serve as the primary IA point of contact for regulators (e.g., OCC, state banking agencies, FinCEN), industry-standard bodies, and network partners—managing submission of materials, responding to Supervisory Letters and exam findings such as MRIAs and MRAs, and presenting audit evidence and findings to enhance confidence in oversight of stablecoin programs. * Partner with senior management and cross-functional teams—including engineering, product, treasury, legal, compliance, and operations—to translate audit findings into durable, structured remediation plans with control enhancements, tracking all corrective actions to verified closure. WHO YOU ARE We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. MINIMUM REQUIREMENTS * Bachelor's degree in Accounting, Finance, Computer Science, Information Security, or related field * 8+ years of experience in internal audit, risk management, or compliance with significant exposure to payments, treasury, or stablecoin products, and at least 3 years in a senior leadership role * Deep understanding of blockchain concepts (public/private ledgers, consensus, smart contracts) and stablecoin mechanics, plus treasury and reserve accounting implications * Strong experience in risk-based audit planning, execution, and reporting across governance, compliance, financial reporting, fiduciary, custodial, and operational controls * Excellent written and verbal communication skills and the ability to present complex technical and regulatory issues to non-technical senior stakeholders * Proven ability to lead cross-functional remediation efforts and track closure of corrective actions * High degree of integrity, independence, and professional skepticism PREFERRED QUALIFICATIONS * Master's degree, MBA, or advanced technical degree * Professional certification such as CIA, CPA, CISSP, CISA, or equivalent (or active pursuit) * Familiarity with regulatory frameworks and supervisory expectations for banks, payments, and stablecoin programs * Experience using blockchain analytics, transaction tracing tools, and data analytics platforms to audit stablecoins, crypto custody, smart contract security, or blockchain infrastructure * Experience designing continuous monitoring for on-chain risks, treasury exposures, and liquidity stress testing * Demonstrated track record of building audit programs and control frameworks for new products and emerging technology domains