Risk Manager
Oversee the company's risk management framework in line with MiCA, CySEC requirements, DORA and applicable EU regulations.
Limassol, Cyprus/on-site
Full-timeAbout The Role
We are seeking an experienced Risk Manager to oversee the company's risk management framework in line with MiCA, CySEC requirements, DORA and applicable EU regulations.
The role will provide independent oversight of the company's financial, operational, regulatory, technology and third-party risks, while also reviewing transaction monitoring and fraud risks across the company's crypto-asset and payment activities. The successful candidate will work closely with senior management, Compliance, AML, Operations, Technology and Finance to identify emerging risks, strengthen controls and support informed, risk-based decision-making.
What to do
- Risk Management: Maintain and enhance the enterprise risk management framework, risk register, risk appetite, risk indicators and risk assessment methodologies.
- Regulatory Oversight: Monitor risks relevant to the company's MiCA authorisation, CySEC obligations, DORA and applicable regulatory requirements; support regulatory reporting, examinations and information requests.
- Transaction Monitoring & Fraud Risk: Review transaction monitoring alerts, crypto and payment transaction patterns, unusual customer behaviour and potential fraud indicators. Investigate or coordinate investigations into suspicious activity, escalating relevant cases to Compliance and AML as appropriate.
- Crypto-Asset & Financial Risk: Assess counterparty, liquidity, concentration, settlement and crypto-asset risks, including exposures relating to exchanges, liquidity providers, stablecoins and other service providers.
- Operational & ICT Risk: Identify and assess operational weaknesses, incidents, fraud risks, system failures, cyber risks and business continuity risks, including relevant ICT risk oversight under DORA.
- Third-Party Risk: Assess and monitor risks arising from banking and payment partners, exchanges, custodians, technology providers and other critical or important service providers.
- Risk Controls & Reporting: Develop and improve risk controls, monitoring indicators and escalation procedures. Prepare regular risk reports for senior management and the Management Body/Board, highlighting material exposures, incidents, breaches and remediation actions.
- Governance & Advisory: Provide independent risk challenge on new products, services, crypto-assets, counterparties and material business changes. Collaborate with relevant teams to ensure risks are identified, assessed and appropriately mitigated.
What's needed
Bachelor's degree in Finance, Economics, Risk Management, Business or a related discipline.- At least 5 years of relevant experience in risk management, financial services, payments, fintech, fraud prevention or the crypto-asset sector.
- Strong understanding of enterprise and operational risk management, internal controls and risk reporting.
- Knowledge of MiCA, CySEC regulatory requirements and the regulatory framework applicable to Crypto-Asset Service Providers (CASPs).
- Experience with transaction monitoring, fraud risk assessment, suspicious transaction patterns or crypto-asset risk analysis.
- Understanding of third-party, counterparty, liquidity and ICT risks, including DORA requirements.
- Strong analytical, investigative and problem-solving skills, with the ability to interpret data and identify emerging risks.
- Excellent communication skills, sound judgement, integrity and the ability to challenge business decisions constructively and independently.
- Excellent command of English.
- Desirable: Experience in a CySEC-regulated or MiCA-authorised firm, blockchain analytics, crypto-asset transaction monitoring, second-line risk management and CySEC Advanced Certification.