OnHires - Head of Risk

Remote - Europe2w ago

Remote Director EMEA Banking Health Insurance CRO Head of People CRO Team Leadership Product Marketing Reporting Russian

Requirements

• 8-10+ years in financial services or fintech risk, including at least 3–4 years at a senior risk leadership level (Head of Risk, VP Risk, or equivalent). A CRO title is not required, but ownership at that level is. • Direct experience in a regulated fintech, payment institution, EMI, PSP, or crypto business. Comfort with pace and lean structures is essential. • Hands-on experience with at least one of: DORA ICT risk, MiCA (CASP) risk requirements, or PSD2 payment institution operational and security risk. UK FCA operational resilience experience is a strong equivalent. • A clear track record of owning risk outcomes, not only advising on them. • The ability to give a clear risk position and recommendation under incomplete information, and to hold that position under pressure from senior stakeholders. • The ability to communicate risk in business language, in terms of impact, cost and options. • Fluent professional English. • Previous Head of Risk / CRO role at a regulated fintech, EMI, PSP or crypto company. • Experience building a risk function from scratch in a scaling business. • Experience with crypto custody risk, MiCA capital requirements, or Travel Rule implementation. • Third-party / vendor risk management at scale, especially in B2B or embedded-finance models. • Experience chairing a risk committee or reporting to a board. • FRM, PRM, or a comparable qualification. • Russian language. • What’s on offer • A seat on the leadership team and direct access to the founders. • Real ownership: you shape the risk function and its role in the business. • A remote-first setup, with periodic in-person time at the European HQ. • Long-term B2B contract with performance- and OKR-linked bonus. • 20 paid working days off per year, paid sick leave, health insurance, a professional development budget, and team events.

Responsibilities

• Enterprise risk framework: risk taxonomy, risk appetite and tolerances, risk register, escalation policy and the three-lines-of-defence model. • Risk reporting: regular risk dashboards for the CEO and leadership, board/committee reporting, and risk-related regulatory reporting. • DORA: ICT risk management, incident classification and reporting, third-party ICT risk and the Register of Information, with a hard regulatory deadline ahead. • Licensing: operational risk, capital adequacy, liquidity and safeguarding frameworks for new e-money authorisations in parallel jurisdictions. • B2B partner and counterparty risk: onboarding risk scoring, risk-tiered monitoring, risk sign-off on material partnerships, and concentration risk. • Financial and market risk, jointly with Finance: crypto price exposure, settlement and liquidity risk, counterparty exposure to liquidity providers and banking partners, and capital adequacy monitoring. • Operational resilience: business continuity, disaster recovery, vendor risk and major incident reporting. • Fraud risk appetite: acceptable loss rates by channel, product and geography, unified across the teams that currently share it. • Product risk: risk assessment and launch gating for new products and markets, involved early rather than at the finish line. • Risk governance and culture: running the risk committee and building risk ownership across business units.