• Lead the team responsible for protecting Shakepay’s platform and customers from fraud, abuse, and financial risk while enabling scalable growth and best-in-class customer experience. • Own workload management within fraud operations, team capacity and roadmap planning • Partner closely with data science to develop scalable detection systems, experimentation frameworks, and risk decisioning strategies. • Be an enabler of growth by implementing an effective risk management strategy that balances customer friction with fraud detection and operational complexity. • Partner closely with our product teams to ensure fraud and risk controls are a key consideration for all product launches. • Drive the risk management technology strategy by partnering with engineering and design to create a detection framework that mitigates losses and protects our user base. • Build cohesive and comprehensive fraud insight reporting to drive operational efficiencies, rule optimizations and business communications. • Develop and implement risk management policies and procedures that simplify cross-functional operations. • Scale fraud operations by breaking down silos across all current and future financial services products while maintaining close collaboration with our operations, customer support and compliance teams. • Champion improvements to the user experience around fraud and security controls in the customer journey. • Oversee the management of vendor relationships, ensuring cost-effective sourcing and quality of service. • Create accountability within your team, lead by example and create a strong performance-oriented culture.

Role Description We are seeking a Technical Risk Engineer with strong technical acumen to design, prioritize, and enable risk-reducing technical solutions across complex cloud and enterprise environments. This role emphasizes solution engineering over process engineering—using risk frameworks, policies, and controls as inputs to architect practical, automatable, and scalable technical safeguards. The ideal candidate thinks like an engineer first and a risk professional second: someone who understands how systems fail, how controls can be enforced through code and architecture, and how risk intent is translated into resilient technical designs. - Engineer technical risk solutions that reduce operational, cyber, and resilience risk through architecture, automation, and control design. - Translate risk requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures. - Prioritize and influence solution design decisions based on risk impact, blast radius, and recovery dependencies. - Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines. - Evaluate control effectiveness using technical signals and evidence, not just procedural compliance. - Support initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience. - Provide technical guidance on risk tradeoffs, recovery sequencing, and dependency-aware system design. - Contribute to lightweight process definition where needed—but always in service of enabling better technical outcomes. Qualifications - Cloud Platforms: Google Cloud Platform (GCP) - Automation & API Development: Proficiency in Python or Java and Ansible for scripting, with hands-on experience in API development (RESTful) - Infrastructure as Code: Terraform (required) - Data & Analytics: GCP BigQuery, Power BI (or similar) to visualize risk posture & evidence. - Backup, recovery, and resilience solution architectures - Isolated Recovery Environment (IRE) design and implementation in GCP Requirements - Requires a bachelor’s or foreign equivalent degree in computer science, information technology or a technology related field - 7+ years in IT operations & engineering, security engineering, platform engineering, SRE, or technical risk roles - Backup, recovery, and resilience solution architecture implementations, especially IRE’s. - Proven ability to design and influence technical solutions across teams - Strong understanding of how risk manifests in distributed systems, cloud platforms, and automation - Comfortable operating between engineering teams and risk stakeholders - Ability to explain complex technical risk concepts to non-technical audiences without losing fidelity Benefits - Immediate medical, dental, and prescription drug coverage - Flexible family care, parental leave, new parent ramp-up programs, subsidized back-up child care and more - Vehicle discount program for employees and family members, and management leases - Tuition assistance - Established and active employee resource groups - Paid time off for individual and team community service - A generous schedule of paid holidays, including the week between Christmas and New Year’s Day - Paid time off and the option to purchase additional vacation time.

• Lead enterprise data governance strategy, policies, and standards. • Manage and implement Unity Catalog for centralized governance and access control. • Drive data quality, metadata management, lineage, and cataloging initiatives. • Partner with engineering, analytics, security, and business teams to enforce governance best practices. • Define data stewardship and ownership frameworks. • Ensure compliance with security and regulatory standards. • Communicate effectively with technical and non-technical stakeholders to drive governance adoption and resolve challenges.

• Identify and articulate material risks • Ensure consistency between disclosure and operational reality • Quantify exposure where possible • Maintain defensible documentation • Participate in risk identification processes • Evaluate incident response history • Evaluate security maturity • Monitor controls documentation • Map risks to security and compliance controls • Monitor and evaluate evidence retention • Embed risk into engineering lifecycle • Partner with Security and Platform Engineering • Drive operational risk quantification • Support diligence with architecture fluency • Own the enterprise risk framework • Coordinate with Legal, Finance, and Audit • Build board-level reporting structure