Risk Manager

As a Risk Manager at Direct Crypto Limited, you will lead the development and ongoing management of the firm's Enterprise Risk Management Framework. Reporting to the Chief Operating & Risk Officer, you play a key role in establishing robust risk management practices across the business, ensuring material risks are identified, assessed, monitored, and appropriately mitigated. Direct Crypto Limited is a newly established entity at an advanced stage of applying for a MiCA-regulated Crypto Asset Service Provider (CASP) license, headquartered in Cyprus and part of Wirex Holdings Ltd. You will work closely with executive leadership, senior stakeholders, and the Board, providing clear and insightful risk analysis to support sound, risk-based decision-making.

What you'll do

• Design, implement, maintain, and continuously enhance a comprehensive Enterprise Risk Management Framework (ERMF) aligned with MiCAR, applicable CySEC requirements, and the firm's business strategy.
• Establish and maintain the firm's Risk Appetite Framework, Key Risk Indicators (KRIs), risk register, and risk reporting processes.
• Identify, assess, monitor, and report material risks across the organization.
• Prepare high-quality risk reports and management information for the Board of Directors, Management Board, and relevant governance committees.
• Provide independent risk insights and recommendations to senior management and drive continuous improvement in risk management practices.
• Support the implementation and oversight of regulatory requirements under MiCAR, AMLR, DORA, and applicable CySEC requirements.
• Provide second-line risk oversight of financial crime and compliance controls, including AML/CFT, sanctions, and customer due diligence.
• Monitor regulatory developments and assess their potential impact on the firm's risk profile and control environment.
• Support regulatory licensing activities, filings, inspections, and responses to CySEC and other supervisory authorities where required.
• Identify and escalate regulatory and compliance risks to the appropriate governance forums.
• Establish and maintain an effective operational risk management framework across business operations.
• Identify, assess, monitor, and mitigate operational risks, including process, people, technology, and third-party risks.
• Support outsourcing and third-party risk management, including risk assessments and ongoing monitoring.
• Contribute to operational resilience and business continuity risk management.
• Support incident management, root cause analysis, remediation tracking, and lessons-learned activities.
• Monitor emerging risks and assess their potential impact on the firm's operations and strategic objectives.
• Promote a strong risk culture and ensure appropriate risk awareness and ownership across the organization.
• Work collaboratively with Compliance, Operations, Technology, Information Security, and other functions to identify and manage cross-functional risks.
• Challenge risk decisions and control effectiveness constructively and independently where appropriate.
• Support the resolution of complex or conflicting risk matters involving senior stakeholders through objective analysis and sound judgment.
• Engage with external risk professionals, industry bodies, and relevant stakeholders to strengthen the firm's risk management practices.

What you bring

• Minimum 3 years of experience in a risk management role within a payments firm, EMI, bank, fintech, or other regulated financial services environment.
• Demonstrable experience managing and assessing risks associated with digital assets, crypto-asset services, payments, or financial technology.
• Strong understanding of first- and second-line-of-defense responsibilities and effective risk governance.
• Practical experience developing or maintaining risk frameworks, risk registers, risk appetite frameworks, KRIs, and risk reporting.
• Experience presenting risk information and recommendations to senior management or governance forums.
• Strong understanding of operational risk and experience identifying, assessing, and mitigating operational risks.
• Strong analytical and data interpretation skills, with excellent attention to detail.
• Excellent written and verbal communication skills in English.
• Strong stakeholder management and influencing skills, with the ability to communicate complex risk matters clearly.
• Current residency in Cyprus is mandatory.

Nice to have

• Previous experience within a MiCA, CASP, EMI, payments, or EU-regulated financial services environment.
• Familiarity with CySEC regulatory requirements and CASP authorization requirements.
• Experience with DORA, ICT risk, outsourcing risk, operational resilience, or third-party risk management.
• Professional certification such as FRM, IRM, CAMS, or an equivalent risk/compliance qualification.
• Experience working directly with regulators or supporting regulatory examinations and inspections.
• Greek language skills.

What we offer

• Flexible working arrangements with hybrid working options.
• Annual training and professional development allowance.
• Support for relevant professional certifications, including FRM, IRM, or equivalent.
• The opportunity to help shape an entity from inception.
• A high-impact role with direct exposure to senior management and Board-level risk governance.
• Extensive career development opportunities within an innovative, globally regulated FinTech group.
• The opportunity to work as part of the wider Wirex Group.

About Direct Crypto Limited

Direct Crypto Limited is a newly established entity at an advanced stage of applying for a MiCA-regulated Crypto Asset Service Provider (CASP) license, headquartered in Cyprus and part of Wirex Holdings Ltd. The firm builds a compliance-first, institutionally focused crypto infrastructure platform providing safekeeping, exchange, and transfer services to regulated financial institutions, fintechs, and Web3 businesses across the EEA.