Head of Risk

About the role

The Head of Risk will lead the development and execution of the company’s risk management framework, ensuring that all risk exposures are identified, measured, and mitigated in line with strategic objectives. Reporting to senior management and the Board, this role is pivotal for safeguarding the business, especially within the fast‑evolving crypto‑asset sector.

Key responsibilities

• Design, implement and continuously improve the Risk Management Framework, including policies, procedures and risk appetite statements.
• Maintain a comprehensive risk register covering integrity, ICT, operational, market, credit, legal, compliance and other relevant risks.
• Conduct regular risk assessments, quantify exposures and develop mitigation actions across business lines and outsourced activities.
• Oversee credit and counter‑party risk management, enforce policies and monitor exposures.
• Develop risk measurement methodologies, set appetite thresholds and build monitoring tools.
• Ensure compliance with all applicable regulatory requirements and support regulator‑led reviews.
• Collaborate with senior management to highlight risk exposures, provide analysis and support new product development.
• Lead incident response and crisis management, coordinating cross‑functional actions.
• Report risk metrics to the Board, senior management, auditors and regulators, and prepare required documentation.

Required profile

• Minimum 5 + years of experience in risk management, preferably within crypto, investment or banking sectors.
• Relevant qualification in financial services, compliance or risk management.
• Strong analytical abilities, sound judgment and excellent verbal and written communication skills.
• Experience preparing reports for boards, regulators and auditors.
• Willingness to undergo the MFSA PQ certification process.

Required skills

• Knowledge of AML/CFT, fraud prevention and other integrity risk frameworks.
• Familiarity with regulatory requirements for crypto‑asset services.
• Experience with risk appetite definition and risk register maintenance.