Senior IT Risk

As a Senior IT Risk specialist at First Digital, you ensure the security and resilience of our platform with a strong focus on risks specific to DeFi and Web3. You join a rapidly growing fintech company at the forefront of blockchain innovation, where this role is central to managing technical and security risk as our on-chain and DeFi footprint grows.

What you'll do

• Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity, including exploits, protocol vulnerabilities, and counterparty/custody risk
• Review and assess the security posture of smart contracts and blockchain infrastructure the company interacts with or builds on
• Track emerging Web3 attack vectors such as bridge exploits, oracle manipulation, and flash loan attacks, and translate them into actionable risk controls
• Actively participate in product discussions, providing risk and security input as new blockchain/DeFi features and integrations are developed
• Partner with engineering and product teams to embed security-by-design principles into Web3-related builds
• Develop and implement IT risk management strategies, policies, and procedures
• Identify potential IT risks related to information security, data privacy, technology infrastructure, and operational processes
• Conduct risk assessments and vulnerability analysis to proactively address potential threats
• Collaborate with cross-functional teams to promote a culture of risk awareness and compliance with regulatory requirements
• Monitor and assess IT security incidents, perform root cause analysis, and develop remediation plans
• Stay updated on industry best practices, emerging threats, and regulatory changes to enhance the organization's IT risk framework
• Oversee the implementation of security measures, encryption protocols, access controls, and disaster recovery plans
• Establish incident response protocols and coordinate with external security agencies if necessary
• Conduct periodic audits and reviews of IT systems, applications, and infrastructure to ensure compliance with internal and external standards
• Provide risk assessment reports and recommendations to senior management and stakeholders

What you bring

• A Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Proven experience of 3-5 years in technical risk, security, or DeFi/Web3-focused roles, ideally with some exposure to financial services or fintech
• Strong, hands-on understanding of DeFi protocols, smart contracts, blockchain infrastructure, and associated security risks
• Familiarity with stablecoin services and the associated risks and challenges
• Strong analytical and problem-solving skills with a detail-oriented approach
• Comfort using AI tools to support research, analysis, and staying current on frameworks outside core expertise

Nice to have

• Traditional IT risk and compliance experience
• Willingness to grow into regulatory frameworks such as SOC 1/2, ISO 27001, NIST, CIS, GDPR, and AML/KYC
• Professional certifications such as CISSP, CISA, CISM, or CRISC

About First Digital

First Digital is a digital asset focused trust, custody, and financial technology company building best-in-class custodian and near-banking infrastructure for payments, asset management, and financial inclusion. The company operates FDUSD, Asia's first home-grown blockchain-based USD stablecoin, enabling economies, institutions, and developers to access digital asset technology breakthroughs.