Risk Manager

As a Risk Manager at MCCOIN VIRTUAL ASSETS, you identify, assess, and mitigate risks across cryptocurrency trading, custody, and wallet services. You build and maintain a robust enterprise risk management framework aligned with Virtual Assets Regulatory Authority (VARA) requirements and other applicable authorities. Working closely with cross-functional teams, you monitor financial, operational, and technological risks, strengthen internal controls, and foster a proactive risk culture across the organization.

What you'll do

• Design and maintain a comprehensive Enterprise Risk Management (ERM) framework tailored to VASP operations, including risk policies, internal controls, risk appetite statements, and tolerance thresholds.
• Ensure the framework remains aligned with VARA's Rulebook, SCA regulations, and applicable FATF guidance.
• Oversee on-chain and off-chain transaction monitoring to detect suspicious or anomalous activity, and maintain robust AML/CTF controls with timely escalation of potential financial crime incidents.
• Collaborate with Compliance on STR/SAR filings, investigations, and regulatory correspondence.
• Identify and assess vulnerabilities across IT infrastructure, blockchain protocols, smart contracts, and custody/wallet systems.
• Partner with the Technology team to define and enforce security controls, penetration testing schedules, and risk remediation plans.
• Maintain a live risk register and ensure operational incidents are documented, reviewed, and closed within agreed SLAs.
• Serve as the primary risk interface for VARA inspections, regulatory audits, and supervisory reporting.
• Proactively monitor regulatory developments and translate changes into internal policy updates.
• Draft and maintain key regulatory submissions including risk management policies, compliance attestations, and periodic reporting.
• Define, track, and report Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) on a regular cadence.
• Prepare clear, concise risk reports for the Board, senior management, and regulators.
• Escalate emerging risks with actionable mitigation recommendations and appropriate urgency.
• Develop and maintain incident response plans, business continuity plans (BCP), and disaster recovery protocols.
• Design and execute risk scenarios and stress tests relevant to cryptocurrency market volatility, cyber incidents, and operational failures.
• Lead post-incident reviews and drive implementation of lessons learned.
• Act as a trusted risk advisor to Compliance, Finance, Legal, and Technology teams.
• Facilitate risk training, awareness campaigns, and promote a risk-aware culture across all functions.
• Support product and business development teams in assessing risk implications of new services and market expansions.

What you bring

• A deep understanding of blockchain technology, tokenomics, and digital asset risk vectors, including smart contract risk, oracle manipulation, and protocol vulnerabilities.
• A strong grasp of AML/KYC/CTF frameworks, FATF Recommendations, and Travel Rule compliance.
• An understanding of cybersecurity risk principles including ISO 27001, SOC 2, and NIST frameworks.
• A Bachelor's degree in Finance, Risk Management, Business Administration, Law, or a related field.
• 5 to 7 years of progressive experience in Risk Management, Compliance, or Internal Audit within financial services or regulated technology environments.
• Demonstrable experience in a Virtual Assets, FinTech, Crypto, or DeFi context, either at a VASP, exchange, custody provider, or digital asset fund.
• Prior exposure to VARA, ADGM/FSRA, SCA, or CBUAE regulatory frameworks.
• A track record of designing or overhauling risk frameworks from the ground up.

Nice to have

• A Master's degree or MBA.
• Professional certifications such as FRM (GARP), CAMS, CRISC, or CISSP.
• Familiarity with on-chain analytics tools such as Chainalysis, TRM Labs, or Elliptic.

What we offer

• Working hours Monday to Friday, 9 AM to 5 PM.
• Annual airticket allowance.
• Comprehensive medical insurance.
• Annual leave after completion of one year in service.