Enterprise Risk & Program Manager

BitPay•,

1d•Remote

About The Position

BitPay is seeking an experienced and strategic Enterprise Risk & Program Manager to establish, lead, and continuously enhance the enterprise risk management (ERM) and internal audit functions for a rapidly growing regulated crypto fintech. This individual will play a critical role in safeguarding the firm's resilience, ensuring regulatory compliance, strengthening governance, and enabling sustainable growth across digital asset products, payments, and financial services. The successful candidate will be responsible for developing a risk-aware culture, implementing robust governance frameworks, overseeing the enterprise-wide risk management program, and delivering an independent internal audit function that provides assurance to executive management and the Board. This role requires deep expertise in financial services risk management, digital assets, regulatory compliance, operational resilience, and technology-enabled controls.

Requirements

At least 5 years leading enterprise risk, internal audit, governance or operational risk programs within a regulated financial services environment, preferably in the crypto industry
Experience working with regulated fintechs, digital asset firms, banks, payment institutions, or capital markets organizations.
Demonstrated program and project management experience leading cross-functional initiatives.
Demonstrated experience interacting with regulators and Board committees.
Experience with payments and money transmission
Experience with a fintech environment and global regulatory regimes. Strong knowledge pertaining Enterprise Risk Management and COSO internal Control Framework.
Technical knowledge pertaining to operational risk management, regulatory reporting, financial crime controls, cybersecurity, third party risk management and operational resilience.
Strategic mindset with the ability to translate complex risks into actionable business decisions.
Strong written and verbal communication.
Ability to challenge constructively while maintaining collaborative relationships.
Bachelor's degree in Business, Risk Management and Governance, Economics, or a related field.

Nice To Haves

Certified Internal Auditor (CIA)
Certified Information Systems Auditor (CISA)
Certified Anti-Money Laundering Specialist (CAMS)
Certified Fraud Examiner (CFE)
Certified Risk Manager (CRM)

Responsibilities

Develop, implement, and maintain the firm's Enterprise Risk Management (ERM) framework.
Define the firm's risk appetite and risk tolerance statements in partnership with executive management and the Board.
Lead enterprise-wide risk identification, assessment, monitoring, mitigation, and reporting.
Maintain the enterprise risk register and oversee key risk indicators (KRIs).
Complete the annual Enterprise Risk Assessment and map identified risks to the integrated internal audit plan.
Conduct periodic enterprise risk assessments covering strategic risk, operational risk, financial risk, market risk, liquidity risk, counterparty risk, technology and cyber risk, digital asset risk, regulatory and compliance risk, third-party/vendor risk, fraud risk, business continuity and operational resilience, and other enterprise risks as they arise.
Facilitate risk workshops and challenge business assumptions to ensure effective risk ownership.
Monitor emerging risks within the crypto and fintech ecosystem.
Drive Enterprise Risk and Internal Audit Committees with reporting, dashboards, and governance materials.
Build and lead an independent, risk-based internal audit function.
Enhance the internal audit plan using a risk-based methodology.
Partner with stakeholders to execute audits across all business functions, including: Finance, Compliance & Risk, Cybersecurity
Evaluate the effectiveness of internal controls using recognized control frameworks.
Track and report on audit findings through remediation and validation.
Present audit reports and recommendations to senior management and the Board Audit Committee.
Coordinate with external auditors and regulators.