Level 1 Permanent Control Coordinator

Join us as Level 1 Permanent Control Coordinator to take on a structural challenge: making Qonto's first line of defence genuinely own its control framework. You’ll build the Level 1 Target Operating Model from scratch, run the Risk & Control Self-Assessment (RCSA) cycle, and produce the risk cartography and governance reporting that keeps regulators and leadership aligned, under the guidance of Maxime, our Operational Risk Manager.

What you’ll do

• Design the Level 1 control plan : Roll out a unified control framework across all Qonto teams, defining minimum standards for control objectives, owners, procedures, evidence requirements, and remediation logic.
• Own the RCSA-based risk cartography : Build the Risk & Control Self Assessment methodology with business teams and maintain a first-line risk cartography aligned with the broader risk framework.
• Define and deploy the Level 1 Target Operating Model : Formalise roles, processes, escalation routes, and first-line/second-line interactions, then drive adoption across the organisation.
• Produce governance reporting : Consolidate Level 1 control execution data (completion rates, failed controls, remediation status) and present to the Risk Committee and relevant governance bodies.
• Keep LoD1 and LoD2 genuinely separate : Act as the first-line counterpart of Internal Control, ensuring first-line teams own their framework independently.

What we’re looking for

• Permanent control or operational risk background : 3-5 years of experience in permanent control, internal control, or operational risk in a regulated banking environment, and an understanding of strong first-line ownership.
• Sound knowledge of French banking regulation : Familiarity with the Arrêté du 3 novembre 2014 (Art. 12, 100/102), EBA internal governance guidelines (EBA/GL/2021/05), and the Three Lines of Defence model.
• Hands‑on RCSA and risk cartography experience : Designed or maintained RCSA methodologies, risk taxonomies, and risk cartographies.
• Getting teams on board : Ability to get business teams to change their practices through clear standards, governance visibility, and well-structured escalation paths.
• AI‑ready : Uses AI tools to accelerate analysis and automate reporting loops, and excited to bring that mindset to process design.

What we can offer you

• Real structural impact : This role gives the first line genuine ownership of its control framework, owning the build from design through to rollout.
• High governance visibility : Output feeds directly into the Risk Committee and regulatory-level reporting.
• Build before you maintain : The TOM, RCSA methodology, and harmonised control plan are designed from scratch; you are not inheriting a legacy.
• Scope that grows with you : As the framework embeds, the role evolves from project delivery into owning the recurring annual cycle.

Your future manager

You will report to Maxime, our Operational Risk Manager at Qonto. Maxime built his risk expertise across regulated banking and asset management — from Operational Risk Analyst at ODDO BHF to Risk Officer at Ardian, before joining Qonto in 2025. He holds a Master's from ESCP Europe and an AMF certification, and brings a structured, framework-oriented approach along with a solid understanding of genuine first-line control ownership in a regulated environment.

We value diversity and inclusivity. Apply regardless of the boxes you tick — we may have the missing piece of the puzzle we’ve been searching for.

By applying, you agree that Qonto processes your personal data to assess your application. Your data is kept for up to 2 years in our candidate pool. Read our Privacy Notice for full details.