Operational Risk Manager building zerohash’s operational risk framework for crypto and stablecoin infrastructure. Leading RCSA, FAIR scenario analysis, loss events, and technology incident oversight.
Responsibilities
Design and implement the operational risk framework, including loss event taxonomy, business line ownership model, and integration with the enterprise risk program
Build and own the loss event database
Capture, categorize and root-cause every material failure; escalate and fix patterns across events
Design and run the RCSA process across all business lines
Facilitate and challenge RCSA results and produce outputs for risk reporting
Run FAIR-based scenario analysis on settlement failure, infrastructure outage, third-party dependency failure and payment disruption
Quantify tail outcomes and present them to the Risk Committee and board
Independently test key operational controls annually and report findings to the CRO and Risk Committee
Represent Risk in the Engineering post-incident process
Review post-incident reviews, challenge root causes, track remediation to completion, and escalate recurring patterns
Requirements
5+ years in operational risk, including 2+ years in a dedicated OpRisk role at a regulated financial institution or a regulated fintech, payments or crypto firm
7+ years is typical for this role
Built or substantially owned an RCSA methodology, not just participated in one, and produced results for a risk committee or board
A specific story of connecting a pattern across incidents that were treated as isolated, and driving a structural fix against resistance
Experience working with Engineering or Technology teams on incidents, postmortems or technology risk
Ability to read a technical incident writeup without being an engineer
Program-level loss event management experience: taxonomy and database design, and root cause analysis
Experience quantifying operational scenarios
FAIR is ideal; a comparable quantitative method you can translate to FAIR is fine
Clear writing; RCSA narratives, scenario summaries and board reports are core deliverables
Open FAIR certification or equivalent hands-on FAIR practice preferred
Experience at a digital asset, payments or fintech company with complex technology-dependent operations preferred
Familiarity with the Basel operational risk event taxonomy preferred
Benefits
Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
Supplier Risk and Resiliency Analyst II mapping supply - chain data and modeling disruption impacts. Supporting Zebra Technologies’ manufacturing operations with dashboards and mitigation strategies.
Audit and Risk Manager overseeing SOX, SOC 1, controls, and risk programs for Sun Life Health’s Canadian group benefits and health solutions business. Leading finance associates and audit stakeholders.
Access governance specialist securing identity and access management compliance at Sun Life, a financial services company. Executing access reviews, audits, reporting, and security controls across hybrid teams.
Conseiller en gouvernance des fournisseurs chez EDC, société d’État canadienne aidant les entreprises à réussir à l’étranger. Gestion des risques liés aux tiers, contrôles, évaluations et rapports de gouvernance.
Risk Coordinator supporting Aritzia’s Enterprise Risk Management team. Safeguarding people, information, merchandise, and physical assets across Support Offices.
Senior Risk Control Consultant evaluating complex manufacturing and construction risks for CNA. Delivering underwriting support, risk - improvement strategies, and broker consulting across Ontario.
Risk and Central Monitoring Associate Manager overseeing RBQM and central monitoring for Worldwide Clinical Trials, a global clinical research organization. Supporting risk assessments, KRIs, QTLs, dashboards, and inspection readiness.