Enterprise Risk Manager

The Client is an institutional digital asset platform, backed by large institutional players, specialising in making money move faster. We provide access to top tier digital assets for institutional and professional clients. Our growing team is made up of a diverse range of experienced financial markets experts, technologists, and innovators.

Role summary

We are seeking an Enterprise Risk Manager to take ownership of the day-to-day operating disciplines of the company’s group enterprise risk framework. The role is responsible for the integrity, traceability and reporting of the group risk register, control catalogue, Key Risk Indicator suite and Risk and Control Self-Assessment (RCSA) cycle across our regulated entities in the United Kingdom (FCA), Jersey (JFSC) and Abu Dhabi (FSRA / ADGM).

This is a hands-on, execution-oriented position within the Second Line of Defence, reporting directly to the Chief Risk Officer with the Chief Operating Officer as primary stakeholder. The successful candidate will be a practitioner who takes professional pride in framework hygiene, drives consistent application of methodology across business lines, and produces committee-grade reporting for the Executive Risk Committee, the Board Audit and Risk Committee, the Technology and Resiliency Operating Forum and Local Risk Committees.

• Own end-to-end delivery of the group RCSA cycle across all Principal Risk Types, including scoping, scheduling, First Line engagement, methodology application and PRT sign-off within agreed timelines.

• Maintain the integrity of the group risk register, including completeness of risk descriptions, residual risk ratings under the Zodia Risk Assessment Methodology (ZRAM), control linkage and quarterly inherent and residual risk updates.

• Maintain the group control catalogue and Key Control population, driving completeness and quality of control descriptions, thresholds, testing evidence and activity commentary.

• Design, calibrate and operate the Key Risk Indicator framework, establishing meaningful linkage between indicators and the underlying risks they measure, with clear escalation thresholds and reporting cadence.

• Produce risk management information for the Executive Risk Committee, the Board Audit and Risk Committee and other committees and fora, including risk appetite metrics, the risk dashboard and ad hoc papers requested by the CRO/COO.

• Support maintenance of the Enterprise Risk Management Framework, supporting standards and operating procedures, including periodic review cycles, version control and approval evidencing.

• Act as Product Owner on behalf of the CRO for risk technology and change deliveries, covering the risk limits framework embedded within the trading platform, real-time exposure monitoring, traded risk surveillance tools and GRC tooling. Represent the Risk function with confidence in design, prioritisation and delivery forums, and act as a credible delegate when the CRO is unavailable.

• Support the operational risk event lifecycle, including capture, classification, impact quantification, root-cause analysis and remediation tracking.

• Coordinate across the FCA, JFSC and ADGM regulated entities, applying sensitivity to differing local regulatory expectations on risk governance, reporting and senior management accountability.

• Act as a credible second-line partner to the business, providing constructive challenge and pragmatic guidance on the design and effectiveness of First Line controls.

• Support First Line owners in embedding risk and control thinking into new products, initiatives and operational change.

• Bachelor's degree in a relevant discipline; professional certification (FRM, PRM, IRM, ICA Risk Diploma or equivalent) preferred.

• Six to ten years of progressive experience in operational or enterprise risk management within a regulated financial services environment. Banking, asset management, market infrastructure, broker-dealer or institutional digital asset experience all relevant.

• Direct hands-on experience running an RCSA cycle end-to-end, ideally across multiple risk types and business units.

• Strong working knowledge of three-lines-of-defence governance, ERMF design and the operating disciplines of a Second Line risk function.

• Demonstrable competence with risk and control taxonomies, residual risk methodologies, KRI design and risk appetite frameworks.

• Experience with GRC tooling and workflow platforms (Jira, ServiceNow, Archer, MetricStream or equivalent); prior Product Owner, business analyst or configuration experience a plus.

• Excellent written communication, particularly in producing committee-grade papers and reporting.

• Working knowledge of one or more of the FCA, JFSC or FSRA regulatory frameworks for prudential and conduct risk, familiarity with digital asset markets, custody and settlement, and exposure to trading platform risk infrastructure (limits frameworks, real-time monitoring or traded risk surveillance) are all preferred but not essential.

• Self-directed and organised, with strong discipline around data quality and process integrity