# Risk & Audit Lead at Kastcard

> Hybrid · United Kingdom · Staff · Other · open. Source: https://alderhq.app/jobs/pinpoint%3Akastcard%3A567027 (read 2026-11-05).

## Facts (observed)

- Company: [Kastcard](https://alderhq.app/companies/kastcard)
- Location text: London, England
- Where it can be done from (inferred): Hybrid · United Kingdom (evidence: "Location: London, England")
- Posted: already open when tracking began; date unknown
- First seen by alder: 2026-11-04 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://careers.kast.xyz/en/postings/a9c17dce-d6c7-4979-b5cb-7c76a37381da

## Pay and sponsorship

- Posted pay: not posted
- Market band for similar posted roles (London, n 53): p25 £69k, median £105k, p75 £142k

## Description (the employer's text)

We're looking for a Risk & Audit Lead to build and own an independent risk and audit function across KAST.

This is an enterprise-wide remit covering risk across the whole organisation, not just technology.

### Responsibilities

- Build and run an independent, enterprise-wide risk and audit function across KAST.
- Own the enterprise risk framework: identify, assess, and track risks across all business areas, not just technology.
- Define and drive risk management activities, including Risk and Control Self Assessment (RCSA) and Key Risk Indicators (KRIs).
- Drive internal audit activities enterprise-wide and across the full audit lifecycle, including management reporting and closure of audit findings.
- Provide neutral, independent validation of controls and compliance work already underway rather than duplicating it.
- Review and assess security and technology controls, systems, policies and processes, including data access, data sharing, system access workflows and other high-risk processes.
- Assess cybersecurity practices and identify potential risks and gaps; ensure appropriate penetration testing, vulnerability assessments, and remediation are in place.
- Own enterprise resilience practices such as business continuity and disaster recovery (BCP/DR) and business impact assessments.
- Conduct annual BCP and DR exercises
- Partner with Engineering, Security, Legal, Compliance, Finance, and other teams to address identified risks and improve controls, while remaining independent of them.
- Develop and maintain risk and audit frameworks, policies, and processes across the org.
- Provide regular risk and audit updates to the leadership team.
### Skills

- 8+ years of experience in risk, audit, cybersecurity, or controls, with an enterprise-wide, not purely technical, lens.
- Strong understanding of enterprise risk management alongside information security and technology risk.
- Experience auditing across business and technology environments and identifying control gaps.
- Has led or managed organisations through compliance certification projects (ISO and others) and/or technology compliance certifications such as SOC 2 and PCI DSS.
- Good understanding of access management, data controls, secrets/API keys, and security testing.
- Strong stakeholder management skills and the ability to work with senior technical,business leaders, external auditors and regulators while holding an independent line.
- Experience in fintech or payment companies is a big plus.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/pinpoint%3Akastcard%3A567027 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.