Level 1 Permanent Control Coordinator
About the role
Our mission and customers: We are creating the freedom for SMEs to succeed by delivering Europe's leading finance workspace with banking at its core, augmented by financial tools. 8 on Trustpilot, based on 55,000+ reviews. Our culture puts customer satisfaction at the core of what we do, as proven by our Net Promoter Score of 75 (more about our culture here).
Our journey: Founded in 2017 by Alexandre and Steve, Qonto has grown to 1,600+ Qontoers serving over 600,000+ customers across 8 European countries. We have been profitable since 2023, and we are just getting started. Our beliefs: We hire for skills and potential. With 80+ nationalities, 45% women, of which 56% of women in our leadership team, diversity isn't a program; It's who we are.
We've built a discrimination-free hiring process because the best teams are built on merit. AI at Qonto: AI is deeply embedded in how we work (here) - Every Qontoer gets unlimited access to the best AI tools. We want people who experiment without waiting for permission, push AI beyond the obvious, know when to trust it, and when to question it.
Join us as Level 1 Permanent Control Coordinator to take on a structural challenge: making Qonto's first line of defence genuinely own its control framework.
You'll build the Level 1 Target Operating Model from scratch, run the Risk & Control Self-Assessment (RCSA) cycle, and produce the risk cartography and governance reporting that keeps regulators and leadership aligned, under the guidance of Maxime, our Operational Risk Manager.
➡️ What you'll do Design the Level 1 control plan: Roll out a unified control framework across all Qonto teams, defining minimum standards for control objectives, owners, procedures, evidence requirements, and remediation logic.
Own the RCSA-based risk cartography: Build the Risk & Control Self Assessment methodology with business teams and maintain a first-line risk cartography aligned with the broader risk framework. Define and deploy the Level 1 Target Operating Model: Formalize roles, processes, escalation routes, and first-line/second-line interactions, then drive adoption across the organization.
Produce governance reporting: Consolidate Level 1 control execution data (completion rates, failed controls, remediation status) and present to the Risk Committee and relevant governance bodies. Keep LoD1 and LoD2 genuinely separate: Act as the first-line counterpart of Internal Control, ensuring first-line teams own their framework independently.