No applications. Teams find and message you directly.
Join Zero Hash as an Operational Risk Manager to build the operational risk discipline from the ground up, ensuring effective risk management in a fast-paced environment.
About the Job zerohash moves money and digital assets for banks, brokerages and payment companies, on infrastructure that has to work 24/7. When something breaks, partners and their customers feel it. We're hiring our first dedicated Operational Risk Manager to make sure we learn from every failure and fix the causes, not just the symptoms. You'll build the operational risk discipline from the ground up: the framework, the loss event database, the RCSA methodology and the scenario program. You'll sit inside the Engineering incident lifecycle, and report to [the Head of Risk], with direct access to the CRO and Risk Committee. Our risk program is quantitative and built on FAIR, so your work will be measured in dollars and likelihoods, not red-amber-green. This role is for someone who has noticed a pattern others missed and got the organization to fix it. If your past work was mostly running assessments on a schedule, it is probably not the right fit. Operational risk is bottom-up and event-driven; enterprise risk is top-down and strategic. Separating them properly is how institutional-grade risk programs are built, and you will own the first of the two.
Responsibilities
- Design and implement the operational risk framework: loss event taxonomy, business line ownership model, and integration with the enterprise risk program.
- Build and own the loss event database.
- Make sure every material failure is captured, categorized and root-caused, and that patterns across events get escalated and fixed.
- Design and run the RCSA process across all business lines.
- Facilitate, challenge results, and produce outputs for risk reporting.
- Run FAIR-based scenario analysis on our top operational risks: settlement failure, infrastructure outage, third-party dependency failure and payment disruption.
- Quantify tail outcomes and present them to the Risk Committee and board.
- Independently test key operational controls on an annual cycle and report findings to the CRO and Risk Committee.
- Be Risk's presence in the Engineering post-incident process: review post-incident reviews, challenge root causes, track remediation to completion, and escalate recurring patterns.
Requirements
- 5+ years in operational risk, including 2+ years in a dedicated OpRisk role at a regulated financial institution or a regulated fintech, payments or crypto firm. 7+ years is typical for this role.
- You've built or substantially owned an RCSA methodology, not just participated in one, and produced results for a risk committee or board.
- A specific story of connecting a pattern across incidents that were treated as isolated, and driving a structural fix against resistance.
- Experience working with Engineering or Technology teams on incidents, postmortems or technology risk.
- You can read a technical incident writeup without being an engineer.
- Program-level loss event management experience: taxonomy and database design, and root cause analysis.
- Experience quantifying operational scenarios. FAIR is ideal; a comparable quantitative method you can translate to FAIR is fine.
- Clear writing. RCSA narratives, scenario summaries and board reports are core deliverables.
- Preferred Open FAIR certification or equivalent hands-on FAIR practice.
- Experience at a digital asset, payments or fintech company with complex technology-dependent operations.
- Familiarity with the Basel operational risk event taxonomy.
Benefits
- Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
- Vision & Dental Insurance (U.S. only)
- Chance to earn equity
- Maternity & Paternity leave (after 6 months)
- WeWork All Access Membership
- WFH Yearly Stipend
- L&D Yearly Stipend (after 6 months)