Risk Manager – Country & Operational Risk

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Manage CBPL’s entity-level risk framework in alignment with CBPL Risk Policy, Methodology, and Appetite, addressing financial, operational, technology, outsourcing, conduct, and regulatory risks.

• Lead and critically assess RCSAs, incident/issue management, KRIs/KCIs, and risk appetite monitoring for CBPL, including MiFID-related changes as the license is pursued.

• Deliver 2LoD risk challenge on products, change initiatives, and governance, and prepare concise, decision-useful risk MI for the CBPL Risk Committee, Board, and essential working groups.

• Oversee CBPL’s outsourcing and intra-group risk (GSAs/SLAs, exit plans, third-party concentration, resilience) while supporting operational resilience efforts on key business services.

• Assist in CBPL’s ICARA, prudential planning, and regulatory engagement with country-level risk input, scenarios, and remediation tracking.

• Facilitate the design, enhancement, and integration of Coinbase’s global Operational Risk Management framework (RCSA, incident and loss data, key controls, KRIs, scenario analysis, business resilience).

• Own or co-own one or more global ORM program areas (e.g., incident management, non-financial risk assessment, resilience, third-party risk, loss analytics), coordinating virtual teams across entities.

• Serve as a trusted 2LoD partner to global product and operations teams, evaluating new products and changes for operational risk impacts, particularly those affecting CBPL and the UK footprint.

• Improve operational risk MI and dashboards for senior management and Board-level forums, incorporating CBPL insights into the overall enterprise perspective on operational risk.

• Advocate for a robust risk culture across CBPL and Global ORM, clarifying 1LoD/2LoD roles, promoting early escalation, and embedding UK regulatory expectations into daily decisions.

• Mentor first-line and functional leaders on prudential, operational, outsourcing, and conduct risk in a straightforward, practical manner.

⛳️ Requirements

• 7–10+ years of risk management experience within UK-regulated financial services.

• Profound understanding of fundamental risk management and operational risk concepts, including risk governance, three lines of defense, RCSA, incidents/issues, KRIs/KCIs, risk appetite, and stress testing.

• Practical experience interacting with UK regulations (e.g., SYSC, MiFIDPRU/IFPR, operational resilience, outsourcing, conduct, and Consumer Duty) and applying them to risk frameworks.

• Previous experience working in or closely with 2LoD functions, engaging Boards, senior management, regulators, and internal audit.

• Proven ability to design and implement risk processes and procedures for effective risk management at both the entity and group levels.

• Excellent organizational, project, and time management skills; capable of managing multiple workstreams, prioritizing effectively, and delivering high-quality output under tight deadlines.

• Established track record of fostering effective relationships with business partners, peers, and senior leaders across global, matrixed organizations.

• Practical experience with risk governance tools (e.g., RSA Archer or similar GRC platforms) and developing risk MI and dashboards.

• Prior exposure to cryptocurrency, digital assets, or other innovative financial technology sectors.

• Relevant qualifications in risk management, operational risk, MiFID/IFPR, or internal audit (e.g., IRM, FRM, PRM, CFA, or equivalent).

🏝️ Benefits

• Total compensation may include equity, bonus eligibility, and benefits (including medical, dental, and vision).