Senior Risk Management, Controls Manager

This is a fully remote position, open to applicants in New York.

📋 Description

• The Senior Risk Management & Controls Manager serves as a key leader in the first line of defense within Operations, reporting directly to the Chief Control Officer.

• This position is responsible for the design, development, and continuous execution of the risk and control framework for the first line.

• The role involves translating enterprise risk methodologies and regulatory requirements established by the second line of defense into operational controls, testing, and remediation activities executed by the business.

• Conduct senior-level analysis of risk and controls across various domains, including operational, technology, regulatory, financial-crime, and digital-asset risks.

• Act as the primary liaison between Operations and the Chief Risk Officer, Chief Compliance Officer, Internal Audit, and executive leadership.

• Provide guidance to other first-line teams on identifying risks, designing controls, and executing remediation efforts.

• Develop, sustain, and enhance the control framework for the first line continuously.

• Oversee first-line control testing, control quality assurance (QA), and the management of self-identified issues.

• Manage the first-line component of the Risk and Control Self-Assessment (RCSA).

• Ensure traceability among processes, risks, controls, issues, key risk indicators (KRIs), and remediation plans.

⛳️ Requirements

• Education: A Bachelor’s degree in Finance, Accounting, Economics, Risk Management, Computer Science, Business, or a related field.

• Experience: A minimum of 8–12 years of progressive experience in operational risk, business controls, internal controls, internal audit, or regulatory compliance within a bank, broker-dealer, fintech, or digital-asset firm; at least 3 years in a senior or lead role within a first-line control function (CCO/COO organization).

• Program Ownership: Proven track record of ownership in a first-line control program, including drafting procedures, conducting control testing/QA, executing RCSAs, and managing issues.

• Digital Assets: A solid understanding of operational risks associated with digital assets/cryptocurrency, including custody models, key management, on-chain analytics, stablecoins, DeFi exposure pathways, smart-contract risks, and Travel Rule compliance.

• Regulatory: Strong knowledge of COSO Internal Control – Integrated Framework, COSO ERM, ISO 31000, FFIEC IT and BSA/AML examination manuals, OCC Heightened Standards, SR 11-7 / SR 26-2, and SOX (where applicable).

• Executive Presence: Demonstrated ability to effectively brief C-suite executives, board committees, examiners, and internal/external auditors with clarity, honesty, and credibility.

🏝️ Benefits

• Medical, Dental, and Vision insurance

• 401(k)

• Life and disability insurance