Operational Risk Manager

zerohash

1d

About The Position

zerohash is looking for an experienced Operational Risk Manager to own operational risk as a dedicated discipline within the enterprise risk program. You will design and run the RCSA process, own the loss event database, conduct scenario analysis, and serve as the Risk function’s embedded presence in the Engineering incident lifecycle. Operational risk is bottom-up and event-driven; ERM is top-down and strategic — and separating them properly is how institutional-grade risk programs are built.

Requirements

• 5+ years of operational risk management experience, with at least 2 years in a dedicated OpRisk role at a regulated financial services institution
• Hands-on experience building or running a RCSA process: designed the methodology, facilitated assessments, and produced outputs for a risk committee or board
• Experience with operational loss event management: loss event categorization, database design, and root cause analysis at the program level
• Familiarity with scenario analysis methodology: can design and facilitate OpRisk scenarios and produce quantified board-level outputs
• Experience working alongside Engineering or Technology teams in a risk capacity
• Strong written communication — RCSA narratives, scenario summaries, and board-level reports are core deliverables

Nice To Haves

• Experience at a digital asset, payments, or fintech company with complex technology-dependent operations
• Familiarity with model risk management concepts: inventories, validation requirements, tiering frameworks
• ORM, FRM, PRM, or equivalent risk credential

Responsibilities

• Design and implement a formal operational risk framework: loss event categories, business line ownership model, and integration with the broader enterprise risk program
• Build and own the operational loss event database — ensure every material operational failure is captured, categorized, root-caused, and used to improve controls
• Design and run the RCSA process across all business lines: facilitate assessments, challenge results, and produce outputs that feed risk reporting
• Run scenario analysis against zerohash’s top operational risks; model tail outcomes across settlement failure, infrastructure outage, third-party dependency failure, and payment disruption; produce Risk Committee and board outputs
• Independently test key operational controls on a defined annual cycle; report findings to CRO and Risk Committee
• Serve as Risk’s embedded presence in the Engineering post-incident process: review PIR outputs, track remediation commitments, and escalate recurring patterns to the CRO

Benefits

• Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
• Vision & Dental Insurance (U.S. only)
• Chance to earn equity
• Maternity & Paternity leave (after 6 months)
• WeWork All Access Membership
• WFH Yearly Stipend
• L&D Yearly Stipend (after 6 months)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed