About the Role

We are looking for a Risk Manager/in (m/f/d) with experience in structured risk management within a regulated financial services environment and a strong interest or exposure to blockchain-based products. The role focuses on risk framework development, new product and change assessments, and technology-related risk analysis in a digital asset context.

You will act as a key contributor to the Institute’s second-line risk function, supporting the evaluation of new blockchain integrations, product developments and outsourcing arrangements under MiCA and DORA. The role combines traditional operational risk management with digital asset specific risk considerations.

You will manage defined risk workstreams, particularly in the assessment of new blockchain integrations and product developments.

Key Responsibilities

1. Core Risk Management & Governance

• 
  
• Conduct inherent and residual risk assessments in line with the Institute’s risk methodology
• 
  
• Maintain and enhance the risk inventory, including control mapping and documentation standards
• 
  
• Assess control design and effectiveness across operational and technology-related processes
• 
  
• Monitor KRIs and risk appetite thresholds, including follow-up and escalation where required
• 
  
• Support tracking and monitoring of recovery indicators and related governance processes
• 
  
• Contribute to material change assessments and structured risk papers for management
• 
  

2. New Product & Process Risk (NPP)

• 
  
• Perform end-to-end risk assessments for new blockchain integrations (e.g., L1/L2 chains, bridge solutions)
• 
  
• Assess impact on existing operational processes, governance structures and control frameworks
• 
  
• Evaluate smart contract-related risk exposure at a conceptual level (e.g., mint/burn controls, upgradeability, governance mechanisms)
• 
  
• Identify operational, ICT, outsourcing and concentration risks arising from new initiatives
• 
  
• Support the preparation of clear, decision-ready risk assessments for internal approval committees
• 
  

3. Technology, ICT & Outsourcing Risk (MiCA / DORA)

• 
  
• Support alignment of ICT and outsourcing risk management with MiCA and DORA requirements
• 
  
• Evaluate third-party providers (e.g., custody, bridge, oracle and technology providers) from a risk and criticality perspective
• 
  
•