zerohash provides API-first technology and turnkey regulatory infrastructure to launch and scale compliant crypto and stablecoin products quickly and securely.
About the role
zerohash moves money and digital assets for banks, brokerages and payment companies, on infrastructure that has to be secure and available 24/7. We're hiring our Technology & Cyber Risk Manager to be the independent voice on whether that infrastructure is as safe as the first line says it is. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- A specific story of escalating a finding over real objections and getting the control implemented, not just documenting the gap
- Experience reading first-line security work (pen test results, vulnerability metrics, control assessments) and forming an independent opinion that differs from the first line's
- Quantitative risk modeling experience. FAIR is ideal. Other real modeling backgrounds, such as actuarial work, statistics or engineering, are welcome
- Exposure to GSIB-caliber third-party technology assessments, as the assessor or as the vendor being assessed
- Clear writing for boards and executives. Risk Committee and board reporting is a core deliverable
More about this role
zerohash moves money and digital assets for banks, brokerages and payment companies, on infrastructure that has to be secure and available 24/7. We're hiring our Technology & Cyber Risk Manager to be the independent voice on whether that infrastructure is as safe as the first line says it is.
This is a second-line role. You report to the Head of Risk, not the CISO, and you assess and challenge the controls protecting our custody systems, infrastructure and partner-facing platforms. You then turn that assessment into quantified risk views for senior leadership and the board. Our risk program is built on FAIR, so your work is measured in dollars and likelihoods, not red-amber-green.
You are one of the first people in this function. The risk register, the AI governance program and the vendor technical diligence process are all yours to build, and there is no established team or playbook to inherit.
This role is for someone who has taken a finding and pushed until the organization changed, including when engineering, a CISO or a launch date said no. If your past work was mostly producing assessments and registers, it is probably not the right fit.
- Build and own the cyber risk...
Browse similar: Startup jobs · Remote jobs