Principal Risk Analyst

MoonPay•New York - Hybrid, NY

1d•Hybrid

About The Position

As a Principal Risk Analyst at MoonPay, you will identify, measure, and mitigate risks associated with operating a crypto payments business. This includes counterparty exposure, liquidity and market risk, and technical risks specific to blockchain rails. You will collaborate with Product, Engineering, Compliance, Treasury, and Operations to support growth while ensuring risks are understood and appropriately managed. The role reviews risk across payment flows and crypto trading, evaluates counterparties and blockchain-related exposures, and works with Treasury on market, liquidity, and FX risk. You will independently assess new product proposals, recommend approvals or conditions, and help ensure controls are incorporated from the outset. You will also support operational resilience, develop and maintain the risk framework, review technology and information security risks, conduct third-party risk assessments, and prepare reporting for senior leadership, the board, auditors, and partners.

Requirements

5–10 years of risk management experience at a payments company, fintech, exchange, bank, or crypto firm.
Hands-on experience with credit/counterparty, operational, or market risk in a regulated or high-growth environment.
Strong quantitative and analytical skills, including comfort building dashboards and models from raw data.
Deep understanding of end-to-end crypto payments, including fiat-to-crypto and crypto-to-fiat flows, crypto swaps, stablecoin settlement, and merchant and card acquiring.
Working knowledge of blockchain fundamentals, including consensus, finality, confirmations, reorgs, gas and fees, wallets, and key management.
Understanding of cross-chain bridges and their trust and security models, including the history of bridge exploits.
Understanding of swaps, DEXs and AMMs, liquidity pools, slippage, MEV, and aggregator routing.
Knowledge of crypto hedging approaches, including spot, perpetuals, futures, options, and stablecoin basis risk.
Familiarity with stablecoin mechanics, reserve and de-peg risk, smart contract risk, and audits.
Experience with blockchain analytics tools such as Chainalysis, TRM, or Elliptic, and on-chain data exploration.
Excellent judgment under uncertainty, including the ability to make decisions with incomplete information and explain the reasoning.
Clear written and verbal communication, including the ability to translate technical risk into business impact for non-specialists.
Collaborative approach, with the ability to say no or approve with conditions without becoming a blocker.

Nice To Haves

A professional risk certification such as FRM, PRM, or CAMS, or a quantitative degree.
Experience in DeFi or familiarity with writing or reading simple smart contract logic.
Prior experience building a risk function at a scaling company.

Responsibilities

Review and challenge risk assessments across payment flows, including on-ramps, off-ramps, card and bank funding, stablecoin settlement, and cross-border transfers.
Assess and monitor counterparty risk across liquidity providers, exchanges, custodians, banking partners, payment processors, and blockchain infrastructure vendors.
Evaluate exposure from cross-chain bridges, DEX swaps, and smart contract interactions, including protocol risk, liquidity depth, slippage, and settlement failure.
Review and challenge risks related to crypto trading, including price slippage, execution latency, and hedging liquidity across venues.
Work with Treasury on market, liquidity, and FX risk, including hedging strategy, inventory and float management, and stablecoin de-peg scenarios.
Independently review new product proposals with Product and Engineering, identify risks and controls early, and recommend approval with or without conditions.
Review business continuity testing and business impact analyses to assess operational resilience and preparedness for disruptions.
Develop, maintain, and evolve the risk framework, including Risk Appetite Statements, Key Risk Indicators (KRIs), risk registers, limits, and escalation procedures.
Review technology and information security risks across core systems, infrastructure, and third-party integrations.
Prepare risk reporting for senior leadership, the board, auditors, and partners.
Conduct third-party risk assessments and continuous monitoring for critical vendors, service providers, and partners.

Benefits

Competitive salary package.
Equity package and employee ownership.
Pay-for-performance equity bonus.
Moonshot award, including a $250,000 equity grant for each of 20 employees annually.
Employer pension contributions from day one.
Employee referral program with a 10K USDC reward.
Flexible Time Off.
Company-wide end-of-year Recharge Period.
Birthday leave.
Enhanced parental leave.
Hybrid working schedule, with the option to work fully remotely or from a nearby Moonbase.
Netherlands-only commuter benefits for public transportation.
Private healthcare benefits.
Wellhub wellness membership.
Enterprise access to AI tools, including Claude, ChatGPT, and Gemini.
Lunch credit for days worked in the office.
Home office setup allowance.
Remote working allowance for fully remote employees.
Monthly product budget and zero-fee crypto transactions.
$1,000 annual training budget.
High Potential Program with structured development, mentorship, and stretch opportunities.
Regular remote company offsites, including in-person sessions and hackathons.
Ireland-only Cycle to Work scheme.
UK-only EV Salary Sacrifice scheme.