ICT Risk Oversight Lead

As ICT Risk Oversight Lead at Robinhood, you serve as a key representative of the second line of defense for cyber and technology risk. You provide independent challenge and oversight across technology operations, major change initiatives, risk appetite monitoring, and cyber and IT governance. Reporting directly to the Head of Risk & Authorized Manager, you drive the safety of Robinhood's Luxembourg operations while helping safeguard customers and maintain the trust of regulators and partners.

What you'll do

• Implement and enhance the ICT Risk Management framework, including policies and procedures, in alignment with Robinhood group standards and jurisdictional regulatory requirements
• Provide second-line oversight and monitoring across key technology and security initiatives and business-as-usual operations, including review of issues and ongoing assessment of risk metrics and indicators
• Carry out risk assessments for new products and for existing systems, processes, and technology arrangements
• Collaborate with IT and Security organizations in a second-line capacity, including close partnership with the CISO and other relevant stakeholders
• Enhance the risk appetite framework and key risk indicators for ICT risks, perform independent reviews, and provide independent challenge to first-line teams
• Report findings, risk themes, and regular updates through established governance cadences and management bodies
• Promote ICT risk awareness and help strengthen risk culture across the organization
• Champion the effective and secure use of AI to support automation, efficiency, and scalable risk management practices

What you bring

• 8+ years of experience in cyber, technology, or ICT risk, with a strong understanding of second-line oversight, control effectiveness, and independent challenge
• Experience in a highly regulated environment, ideally in financial services, including interaction with regulatory expectations and governance processes
• Strong understanding of ICT, cyber, and operational risks specific to cryptocurrency and digital asset businesses, including exchange and custody models, third-party dependencies, technology resilience, and heightened regulatory expectations
• Strong knowledge of relevant ICT and cyber regulatory requirements, including DORA, MiCA, EU AI Act, CSSF expectations, and related European frameworks
• Experience across technology risk, control assurance, incident response, and internal control environments; technology audit experience is a strong plus
• Ability to assess complex technology and security risks, provide practical challenge to first-line teams, and influence outcomes across business and technical stakeholders
• Experience in business continuity, identity and access management, and secure software development
• Strong written and verbal communication skills in English, with the ability to build trusted relationships and operate effectively across functions

Nice to have

• Relevant professional certifications such as CISSP, CISA, CISM, or CRISC
• ISO 27001, ISO 22301, or similar certifications

What we offer

• Performance-driven compensation with multipliers for outsized impact and bonus programs
• Top-tier benefits including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet, a highly flexible employer-paid benefits spending account for expenses beyond traditional benefits such as wellness, childcare, and learning
• Time off to recharge, including company holidays, paid time off, sick time, paid volunteer time off, and parental leave
• Exceptional office experience with catered meals, events, and comfortable workspaces
• Monthly commuter stipend to help offset in-office commuting costs

This role is based in the Luxembourg office with in-person attendance expected at least 3 days per week. Total rewards vary by region and entity.

About Robinhood

Robinhood's mission is to democratize finance for all. The company builds on-chain infrastructure and brokerage services, serving as a high-performing, fast-moving team with ethics at the center of everything it does.