Crypto.com is hiring a

Web3 Technology Risk Manager

About Crypto.com

Founded in 2016, Crypto.com today serves over 10 million customers with the world’s fastest growing crypto app, along with the Crypto.com Visa Card — the world’s largest crypto card program — the Crypto.com Exchange and Crypto.com DeFi Wallet. Recently launched, Crypto.com NFT is the premier platform for collecting and trading NFTs, carefully curated from the worlds of art, design, entertainment and sports. Crypto.com is built on a solid foundation of security, privacy and compliance and is the first cryptocurrency company in the world to have ISO/IEC 27701:2019, ISO27001:2013 and PCI:DSS 3.2.1, Level 1 compliance, and independently assessed at Tier 4, the highest level for both NIST Cybersecurity and Privacy Frameworks. With over 3,000 people in offices across the Americas, Europe and Asia, Crypto.com is accelerating the world’s transition to cryptocurrency. Find out more: https://crypto.com

As our Technology Risk Manager, you will be tasked with technology risk management activities along with our journey. As a part of our Enterprise Risk team, you are expected to take the initiative to assist us on the technology risk management program. As the 2nd line of defense, you are required to address technology risks, review technical controls, give recommendations and support on remediation activities. You will also be trusted to provide technical advice to ensure that technology risks are managed throughout all business units.

Key responsibilities

• Develop technology risk management program, policies, procedures and internal control standards to reduce technology risk, which are in line with the policies of the group and the regulatory framework of the financial industries including Asia-pacific and Europe regions
• Facilitate and coordinate regular risk and control self-assessment carried out by business functions. Assess the current risk control structures, address any weaknesses and produce reports to senior management
• Conduct independent risk assessment, scenario analysis and internal control audit to address potential risks, offer risk assurance to senior management and discover opportunity to improve business operations
• Advise senior management on any technology risks they encounter and the suggested course of action to address these risks
• Develop and monitor key risk indicators and tools to determine their effectiveness and for ongoing improvement
• Manage loss event reporting including follow up on and ensure effective mitigation of operational loss logged by the business and investigation of root causes
• Possess leadership presence to promote operational risk culture, train and motivate staff to adopt new operational risk management practices
• Reports suspicious activity. Escalate and report the technology risk issues to the senior management and the group
• Handle technology risk related projects and work closely with other risk functions globally
• Ensure the organization's compliance is with all relevant laws, regulations and guidelines
• Builds strong relationships and interacts with senior management
• Promote collaboration among departments to address technology risks at enterprise level

• Experience in Technology Risk Management, Information Security, Data Privacy, Business Continuity, IT Audit, or Third-party Risk related roles.
• Prefer experience with one or more of the following: Technology risk management and governance, RCSA, Loss data analysis, Scenario analysis, KRIs and Risk Appetite.
• Compliance experience/knowledge in the field of financial regulations of the America, APAC and the EU Region will be an advantage
• Holders of technology risk related certifications/qualifications will be an advantage (CISA, CISM, CISSP, CIPP, CIPM, etc)
• Minimum 5 years of hands-on experience in a fast paced working environment
  

You are also expected to:

• Demonstrate a strong commitment to personal learning and development
• Detail minded with an analytical mindset
• Good communication skills with an ability to explain complex technical issues to non-technical business users
• Proficiency in both spoken and written English
• Be a self-starter

• We offer an attractive compensation package working in a cutting-edge field of combining cryptocurrency and financial services.
• Huge responsibilities from Day 1. Be the owner of your own learning curve. The possibilities are limitless and depend on you.
• You get to work in a very dynamic environment and be part of an international team.
• Flexible working.

Apply Now: