Technology & Cyber Risk Manager

About the role

zero-hash seeks an experienced Technology & Cyber Risk Manager to lead the second‑line technology and cyber risk function for its regulated digital‑asset platform. You will evaluate controls across infrastructure, custody systems and partner‑facing platforms, turning findings into quantitative risk insights for senior leadership and the board.

Key responsibilities

• Own and maintain the cyber risk framework, methodology, appetite metrics and scenario library.
• Maintain a live technology and cyber risk register and produce independent risk views for leadership.
• Review and challenge first‑line security deliverables such as penetration test results, vulnerability metrics and control assessments.
• Partner with Engineering and Security to identify risks across infrastructure, applications and AI systems.
• Lead the AI governance program, including use‑case registry, risk classification and oversight of AI systems handling end‑user or transaction data.
• Support regulatory and counter‑party risk assessments as the second‑line technology risk owner.
• Track emerging technology risks, including AI, model risk and cryptographic risk.
• Provide independent technical risk assessments for custody‑critical and security‑critical vendors.

Required profile

• 5+ years in technology risk, cyber risk or information security risk management, with at least 2 years in a dedicated second‑line role at a regulated financial institution.
• Direct experience with GSIB‑style third‑party assessments.
• Strong ability to read and critically assess first‑line security deliverables.
• Hands‑on experience with quantitative risk modeling (FAIR or equivalent).
• Familiarity with AI/ML risk governance concepts and DORA ICT risk requirements.
• Excellent written communication for board‑level and regulatory reporting.

Required skills

• FAIR quantitative risk methodology
• AI/ML risk governance (model inventories, use‑case classification, human‑in‑the‑loop design)
• DORA ICT risk compliance
• Third‑party assessment frameworks (GSIB‑style)
• Penetration testing and vulnerability assessment review

What we offer

• Healthcare, vision and dental insurance (U.S. coverage with high employer contribution)
• Equity participation opportunities
• Maternity & paternity leave after six months of service
• WeWork All Access membership
• Annual work‑from‑home and learning & development stipends