Risk and Compliance Officer

About the role

Crowdestate AS, a regulated European payment institution supervised by the Estonian Financial Supervisory Authority, is looking for a Risk and Compliance Officer to join its Management Board. This is a full-time, mostly on-site role based in Tallinn, Estonia, and the candidate is expected to be a resident of Estonia. The role takes full ownership of risk management, compliance and regulatory governance while scaling the next phase of the business.

Key responsibilities

• Build, implement and continuously improve the enterprise risk management framework.
• Lead the compliance and AML/CFT function of a regulated payment institution.
• Ensure alignment with PSD2/PSD3, DORA and relevant EU regulatory frameworks.
• Oversee supervisory communication, inspections and regulatory reporting.
• Establish governance, documentation standards and defensible audit trails.
• Design and supervise outsourcing and ICT risk frameworks in line with DORA.
• Support AI-native control systems by defining risk logic, oversight models and validation standards.
• In the early stage of scaling, design the framework and implement it hands-on until the function grows into a larger team.

Required profile

• Proven experience in risk management and/or compliance at a regulated financial institution.
• Strong understanding of EU frameworks including PSD2/PSD3, AML/CFT, DORA and ECSPR.
• Experience interacting with supervisory authorities.
• Full compliance with the Estonian Financial Supervision Authority's fit and proper requirements.
• Fluent command of Estonian and English; a legal background is an advantage.

Required skills

• Practical understanding of ICT, outsourcing and operational risk management.
• Ability to build structured governance environments in lean organisations.
• Interest in AI-enabled compliance and automated control systems.

What we offer

• A competitive compensation plan and a stock option plan.
• The chance to shape a modern, technology-enabled control environment from the inside.
• All the technology needed for the job.