Head of Risk & Compliance & Authorised Manager (Luxembourg)

About the role

Shopify is seeking an experienced Head of Risk & Compliance who will also serve as an Authorised Manager for its Luxembourg entity. The role leads the second line of defence, overseeing compliance and risk frameworks across AML, CTF, operational, outsourcing, safeguarding, fraud, ICT and privacy domains.

Key responsibilities

• Lead the effort to obtain and maintain an EU Electronic Money Institution (EMI) licence in Luxembourg.
• Act as primary liaison with the Commission de Surveillance du Secteur Financier (CSSF) throughout the application and post‑authorisation phases.
• Design, implement and hold management‑level accountability for AML/CTF and broader risk management programmes in line with CSSF regulations.
• Serve as one of two local Authorised Managers with decision‑making authority and collective responsibility for prudent entity management.
• Provide second‑line oversight of regulatory obligations including PSD2/EMD2, consumer protection, fraud, safeguarding, outsourcing, business continuity, ICT and privacy.
• Lead the local Risk & Compliance function, supervise the MLRO and other function holders, manage the risk register and ensure appropriate resourcing.
• Coordinate responses to internal audit reviews and drive closure of audit and CSSF findings.
• Produce the annual Compliance Report for the Board and CSSF and monitor regulatory developments.

Required profile

• Significant senior compliance leadership experience.
• Proven ability to interact with financial regulators, particularly the CSSF.
• Strong understanding of AML/CTF, EMI licensing, and EU financial regulations such as PSD2/EMD2.
• Demonstrated experience in overseeing risk management frameworks across multiple domains.

Required skills