Operational Risk Manager, Technology & Payments Operations

zerohash moves money and digital assets for banks, brokerages and payment companies, on infrastructure that has to work 24/7. When something breaks, partners and their customers feel it. We're hiring our first dedicated Operational Risk Manager to make sure we learn from every failure and fix the causes, not just the symptoms.
You'll build the operational risk discipline from the ground up: the framework, the loss event database, the RCSA methodology and the scenario program. You'll sit inside the Engineering incident lifecycle, and report to [the Head of Risk], with direct access to the CRO and Risk Committee. Our risk program is quantitative and built on FAIR, so your work will be measured in dollars and likelihoods, not red-amber-green.
This role is for someone who has noticed a pattern others missed and got the organization to fix it. If your past work was mostly running assessments on a schedule, it is probably not the right fit.
Operational risk is bottom-up and event-driven; enterprise risk is top-down and strategic. Separating them properly is how institutional-grade risk programs are built, and you will own the first of the two.

• Design and implement the operational risk framework: loss event taxonomy, business line ownership model, and integration with the enterprise risk program.
• Build and own the loss event database. Make sure every material failure is captured, categorized and root-caused, and that patterns across events get escalated and fixed.
• Design and run the RCSA process across all business lines. Facilitate, challenge results, and produce outputs for risk reporting.
• Run FAIR-based scenario analysis on our top operational risks: settlement failure, infrastructure outage, third-party dependency failure and payment disruption. Quantify tail outcomes and present them to the Risk Committee and board.
• Independently test key operational controls on an annual cycle and report findings to the CRO and Risk Committee.
• Be Risk's presence in the Engineering post-incident process: review post-incident reviews, challenge root causes, track remediation to completion, and escalate recurring patterns.

• 5+ years in operational risk, including 2+ years in a dedicated OpRisk role at a regulated financial institution or a regulated fintech, payments or crypto firm. 7+ years is typical for this role.
• You've built or substantially owned an RCSA methodology, not just participated in one, and produced results for a risk committee or board.
• A specific story of connecting a pattern across incidents that were treated as isolated, and driving a structural fix against resistance.
• Experience working with Engineering or Technology teams on incidents, postmortems or technology risk. You can read a technical incident writeup without being an engineer.
• Program-level loss event management experience: taxonomy and database design, and root cause analysis.
• Experience quantifying operational scenarios. FAIR is ideal; a comparable quantitative method you can translate to FAIR is fine.
• Clear writing. RCSA narratives, scenario summaries and board reports are core deliverables.

• Open FAIR certification or equivalent hands-on FAIR practice.
• Experience at a digital asset, payments or fintech company with complex technology-dependent operations.
• Familiarity with the Basel operational risk event taxonomy.

• Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
• Vision & Dental Insurance (U.S. only)
• Chance to earn equity
• Maternity & Paternity leave (after 6 months)
• WeWork All Access Membership
• WFH Yearly Stipend
• L&D Yearly Stipend (after 6 months)

zerohash is the leading crypto and stablecoin infrastructure platform and the operating system for digital money, powering the next generation of financial services. Founded in 2017, zerohash enables banks, brokerages, fintechs, and payment companies to offer crypto trading, stablecoin payments, and tokenized assets without having to build or manage complex blockchain infrastructure on their own.
The zerohash platform supports three core pillars: Trade, Transact, and Tokenize. Through a single integration, customers can launch regulated crypto buy, sell, and custody services; enable 24/7 stablecoin-based funding, payouts, and settlement; and issue and manage tokenized assets with built-in compliance, risk controls, and reporting. By abstracting away technical, regulatory, and operational complexity, zerohash allows partners to treat digital assets as just another financial primitive: fast, programmable, and global.
zerohash is trusted by some of the world’s most recognized financial and consumer brands, including Interactive Brokers, Morgan Stanley, Stripe, Franklin Templeton, BlackRock, DraftKings, Gusto, Worldpay, Kalshi, One Pay, among others. Today, zerohash infrastructure supports millions of end users across brokerage, wealth, payments, and marketplace platforms globally.
The company is deeply regulated and compliance-first, operating across the U.S. and internationally with licenses and approvals that allow partners to enter crypto and stablecoins with confidence. zerohash has become a trusted partner for enterprises seeking to modernize financial products while meeting the highest standards for security, risk management, and regulatory oversight.
To date, zerohash has raised over $280 million in funding from a mix of leading venture firms and strategic investors, including Morgan Stanley, Interactive Brokers, SoFi, Point72 Ventures, Bain Capital Crypto, Lightspeed Venture Partners, and more.
zerohash has been featured in top-tier media outlets such as Bloomberg, CNBC, The Wall Street Journal, Financial Times, Reuters, Forbes, and CoinDesk, and its leadership team regularly contributes to global conversations on the future of payments, investing, and financial infrastructure.
At zerohash, we're building the infrastructure that makes digital money work securely, compliantly, and at global scale.

All zerohash employees are guided by the following characteristics and core principles:

• Independence/Ownership - An ability to work autonomously. Join zerohash, pitch ideas, and shape the work you do.
• Passion - We are innovating quickly and challenging the status quo. We want you to think big, be creative and ​make a difference every day.
• Collaborative - A good attitude and respect for others. We’re teammates, not co-workers. Everything we do is a shared success and equally a shared failure - we talk in terms of “we” not “me”.
• Initiative - An ability and passion for learning and asking questions. We will champion you, challenge you and push you to achieve your best - and we expect you to do the same.
• Empathy - An ability to listen, respect, and understand your co-workers, customers, and everyone you interact with no matter how different they are to you.
• Adaptability - An ability to respond quickly. We are in a fast-paced industry and so we expect you to be creative when solving a new problem and comfortable under pressure.
• Transparency - We believe that transparency is critical to empowering everyone to make the best decisions, both the company to its people and vice versa.
• Integrity - Integrity creates trust. As both an organization collectively and as individuals, it is our most valuable asset.

Follow us

Twitter

LinkedIn

Youtube

Blog

For candidates based in Colorado, please contact colorado-wages @zerohash.com to request compensation and benefits information regarding a particular role(s). Please include with your email the city you reside (or intend to reside in Colorado) and the title/link to the roles you're interested in.

**We’ve recently seen an increase in individuals impersonating zerohash recruiters to target job seekers. Please stay vigilant and keep the following in mind to ensure you are communicating with the real zerohash team:

• Verified Emails Only: Official outreach will only come from a  @zerohash.com email address.
• No Messaging Apps: We will never contact you via unsolicited text messages, WhatsApp, or Telegram.
• Official Applications: Only apply directly through our careers webpage (zerohash.com/careers) or zero-hash.breezy.hr.

See something suspicious?
If you want to verify an interview request or report a fake job posting or suspicious communication, please contact us immediately at talent @zerohash.com. This email is for fraud reports only. Candidate application inquiries will not be responded to.