Operational Risk Manager

Who you are

• 5+ years of operational risk management experience, with at least 2 years in a dedicated OpRisk role at a regulated financial services institution
• Hands-on experience building or running a RCSA process: designed the methodology, facilitated assessments, and produced outputs for a risk committee or board
• Experience with operational loss event management: loss event categorization, database design, and root cause analysis at the program level
• Familiarity with scenario analysis methodology: can design and facilitate OpRisk scenarios and produce quantified board-level outputs
• Experience working alongside Engineering or Technology teams in a risk capacity
• Strong written communication — RCSA narratives, scenario summaries, and board-level reports are core deliverables
• Experience at a digital asset, payments, or fintech company with complex technology-dependent operations
• Familiarity with model risk management concepts: inventories, validation requirements, tiering frameworks
• ORM, FRM, PRM, or equivalent risk credential

What the job involves

• Zerohash is looking for an experienced Operational Risk Manager to own operational risk as a dedicated discipline within the enterprise risk program
• You will design and run the RCSA process, own the loss event database, conduct scenario analysis, and serve as the Risk function’s embedded presence in the Engineering incident lifecycle
• Operational risk is bottom-up and event-driven; ERM is top-down and strategic — and separating them properly is how institutional-grade risk programs are built
• Design and implement a formal operational risk framework: loss event categories, business line ownership model, and integration with the broader enterprise risk program
• Build and own the operational loss event database — ensure every material operational failure is captured, categorized, root-caused, and used to improve controls
• Design and run the RCSA process across all business lines: facilitate assessments, challenge results, and produce outputs that feed risk reporting
• Run scenario analysis against zerohash’s top operational risks; model tail outcomes across settlement failure, infrastructure outage, third-party dependency failure, and payment disruption; produce Risk Committee and board outputs
• Independently test key operational controls on a defined annual cycle; report findings to CRO and Risk Committee
• Serve as Risk’s embedded presence in the Engineering post-incident process: review PIR outputs, track remediation commitments, and escalate recurring patterns to the CRO

Benefits

• Excellent healthcare + dental + vision coverage. Zero Hash covers roughly 100% of employee premiums
• 33 Days Flexible PTO
• Equity ownership
• WFH setup
• Learning & Development Stipend
• Mental health and wellness program