Senior IT Risk

As a Senior IT Risk Specialist at First Digital, you ensure the security and resilience of our platform with a strong focus on risks specific to DeFi and Web3. You work in a rapidly growing fintech company at the forefront of blockchain and Web3 innovation, and this role is central to how we manage technical and security risk as our on-chain and DeFi footprint grows.

What you'll do

• Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity, including exploits, protocol vulnerabilities, and counterparty/custody risk.
• Review and assess the security posture of smart contracts and blockchain infrastructure the company interacts with or builds on.
• Track emerging Web3 attack vectors such as bridge exploits, oracle manipulation, and flash loan attacks, and translate them into actionable risk controls.
• Actively participate in product discussions, providing risk and security input as new blockchain and DeFi features and integrations are developed.
• Partner with engineering and product teams to embed security-by-design principles into Web3-related builds.
• Develop and implement IT risk management strategies, policies, and procedures.
• Conduct risk assessments and vulnerability analysis to proactively address potential threats.
• Collaborate with cross-functional teams to promote a culture of risk awareness and compliance with regulatory requirements.
• Monitor and assess IT security incidents, perform root cause analysis, and develop remediation plans.
• Stay updated on industry best practices, emerging threats, and regulatory changes to enhance the organization's IT risk framework.
• Oversee the implementation of security measures, encryption protocols, access controls, and disaster recovery plans.
• Establish incident response protocols and coordinate with external security agencies if necessary.
• Conduct periodic audits and reviews of IT systems, applications, and infrastructure to ensure compliance with internal and external standards.
• Provide risk assessment reports and recommendations to senior management and stakeholders.

What you bring

• A Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 3-5 years of proven experience in technical risk, security, or DeFi/Web3-focused roles, ideally with some exposure to financial services or fintech.
• A strong, hands-on understanding of DeFi protocols, smart contracts, blockchain infrastructure, and associated security risks.
• Familiarity with stablecoin services and the associated risks and challenges.
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Comfort using AI tools to support research, analysis, and staying current on frameworks outside your core expertise.

Nice to have

• Traditional IT risk and compliance experience.
• Willingness to grow into regulatory frameworks such as SOC 1/2, ISO 27001, NIST, CIS, GDPR, and AML/KYC.
• Professional certifications such as CISSP, CISA, CISM, or CRISC.

What we offer

• Competitive total compensation package
• FDFI token allocation with multi-year vesting
• A hands-on role at the intersection of stablecoins, AI agents, and the on-chain economy
• Direct mentorship from the Finance District Lead
• A clear path to the Growth Lead role for strong performers as the function scales

About First Digital

First Digital is a digital asset focused trust, custody, and financial technology company at the vanguard of the digitalization of assets. The company provides a best-in-class custodian and near-banking layer, and has developed FDUSD, Asia's first home-grown blockchain-based USD stable-coin, to help economies, institutions, and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance.