Overview

Do you enjoy bringing structure to complex business problems and helping teams make confident, risk-informed decisions? In this role, you will help build and operate the enterprise risk management framework for Microsoft Ireland Payment Services Limited, a newly created regulated payments institution based in Dublin. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Microsoft’s Audit, Risk, and Compliance group identifies emerging risks and assesses the effectiveness of management’s response. As a Risk Manager, you will support the Chief Risk Officer for MIPSL by helping shape risk governance, risk reporting, oversight, and regulatory engagement for a new regulated entity. You will work in a hybrid model in Dublin and partner closely with ARC, MIPSL leadership, Operations, Technology, and FinCrime stakeholders.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Enterprise Risk Framework Execution: Support the MIPSL CRO in implementing and maintaining the MIPSL enterprise risk management (ERM) framework, aligned with CBI expectations and proportional to a regulated payments institution.
• Risk Identification & Assessment: Lead MIPSL risk assessments across key domains (operational, compliance, financial, strategic), ensuring risks are clearly articulated, measured, and documented using a consistent methodology.
• Risk Register & Governance: Maintain the MIPSL enterprise risk register, ensuring risks, controls, and mitigation actions are current, and support structured risk governance through committees and reporting forums.
• Second Line Oversight & Challenge: Provide independent oversight and constructive challenge to MIPSL first-line functions (Operations, Technology, FinCrime), ensuring controls are appropriately designed and operating effectively.
• Control Framework & RCSA: Facilitate MIPSL’s Risk and Control Self-Assessments (RCSAs), control testing, and validation activities, identifying control gaps and tracking remediation to closure.
• Key Risk Indicators (KRIs): Develop and monitor MIPSL’s KRIs and risk appetite metrics, ensuring breaches or emerging risks are identified early and escalated appropriately.
• Incident & Issue Oversight: Oversee MIPSL risk events, incidents, and near misses, ensuring root cause analysis is performed and lessons learned are embedded into the control environment.
• Third-Party & Outsourcing Risk Coordination: Work closely with MIPSL Operations and Technology oversight roles to ensure third-party risks are captured within the MIPSL enterprise risk view and aligned to outsourcing requirements.
• Stress Testing & Scenario Analysis: Support MIPSL risk scenario analysis and stress testing activities, particularly relating to operational disruption, financial crime exposure, or third-party failure.
• Regulatory Engagement Support: Prepare MIPSL risk materials for CBI engagement, including inspections, risk assessments, and ongoing supervisory dialogue.
• Risk Appetite & Policy Support: Support the development and periodic review of the MIPSL risk appetite statement and risk policies, ensuring alignment with the entity’s strategy and regulatory obligations.

Qualifications

Required qualifications:

Bachelor’s Degree in Risk Management, Engineering, Government Intelligence, Security, Information Technology, or a related field
Relevant experience in risk management, privacy, security, compliance, government intelligence, operations, auditing, and/or finance; OR equivalent experience.

Preferred qualifications:

Master’s Degree in Risk Management, Engineering, Government Intelligence, Security, Information Technology, or a related field, with solid experience in risk management across operations, engineering, information technology, business analysis, consulting, auditing, privacy, security, compliance, government intelligence, and/or finance; OR Bachelor’s Degree in a related field, including Cybersecurity, with significant relevant experience; OR equivalent experience.
Membership with a relevant risk domain association such as IAPP, ISC2, ISACA, CIA, SCCE, DRI, CBCB, COSO, or IIA.
Experience supporting audits, regulatory reviews, inspections, or risk governance in a regulated environment.
Experience with AI, AI-based analytical tools, AI governance, or AI governance frameworks.

Risk Management IC4 - The typical base pay range for this role across Ireland is € 80,000.00 - € 136,400.00 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here:
https://careers.microsoft.com/v2/global/en/corporate-pay/ireland-corporate-pay.html

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Risk Manager

Job Description