Head of Enterprise Risk Management (Relocation to Malta)

The Head of Enterprise Risk Management (ERM) plays a crucial role in overseeing the creation, implementation, and continual management of the enterprise risk framework within the organization. Responsibilities include maintaining essential risk documentation such as the ERM matrix, risk logs, and incident registers, as well as actively engaging in Business Continuity Management (BCM) planning and testing.

Additionally, this position entails close collaboration with relevant group-level risk and compliance functions to ensure consistent implementation of group-wide risk practices, policies, and reporting standards at the local level.

Responsibilities:

• Oversee Enterprise Risk Management (ERM) by developing, updating, and enhancing the Enterprise Risk Matrix, Risk Register, and Control Logs in accordance with the company's risk appetite and regulatory requirements.
• Identify, evaluate, and monitor risks across all departments, establishing and implementing appropriate risk treatment and mitigation strategies.
• Monitor and report on risk incidents and events, maintaining detailed logs with thorough documentation of root cause analysis, remediation efforts, and control enhancements.
• Ensure compliance with MiCA and EMI regulatory requirements and internal governance frameworks.
• Support Business Continuity Management (BCM) by assisting in the development and periodic review of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP).
• Actively participate in business impact analyses, risk scenario planning, and annual testing exercises.
• Work collaboratively with operational and technical teams to ensure the effectiveness and documentation of resilience measures.
• Assist in security compliance programs, encompassing DORA, ISO27001, ISO27701, PCI-DSS, and SOC 2.
• Participate in internal security and privacy assessments, as well as internal and external audits.
• Provide accurate responses to information security compliance inquiries from both internal and third-party sources.
• Serve as the primary liaison with group-level risk and compliance teams to ensure alignment between local risk management practices and the broader group strategy.
• Implement group-wide policies, standards, and procedures tailored to local regulatory and operational contexts.
• Coordinate and support group risk reporting requirements and contribute to consolidated risk dashboards, reviews, and audits.

Requirements:

• Bachelor's or Master's degree in Risk Management, Finance, Law, or related field.
• 5+ years of experience in enterprise or operational risk management within regulated financial services, fintech, or crypto-asset industries.
• Strong familiarity with MiCA, EMI frameworks, and applicable EU financial regulations.
• Proven experience in maintaining ERM tools, registers, and governance documentation.
• Previous involvement in BCM/DRP planning and implementation.
• Preferred certifications/qualifications: CISSP, CRISC, CISM, CISA, ISO27001 LA, CIPT, CIPP/E.
• Experience in Cybersecurity or Information Security roles is advantageous.
• Knowledge of group or multinational operating models is a plus.
• Strong organizational and documentation skills with attention to detail.
• Excellent stakeholder management and interdepartmental coordination abilities.
• Analytical mindset with proactive problems-solving skills.
• Strong written and verbal communication skills.
• Integrity and professionalism in handling sensitive risk information.

Life @ Crypto.com:

Empowered to think big and explore new opportunities within a talented, ambitious, and supportive team. Transformational and proactive work environment fostering innovative solutions. Focus on personal and professional growth through skills development. Collaborative work culture, providing support and assistance to colleagues in accomplishing common goals. Dedication to achieving the ultimate goal of enabling cryptocurrency adoption for all.

Benefits:

• Competitive salary.
• Comprehensive medical insurance package with extended coverage for dependents.
• Generous annual leave entitlements, including birthday and work anniversary.
• Flexible work arrangements and hybrid or remote setup.
• Internal mobility program promoting career development.
• Crypto.com visa card upon joining.

About Crypto.com:

A global cryptocurrency platform aiming to drive cryptocurrency adoption through security, privacy, and compliance. Focused on innovation and supporting the next generation of innovators and entrepreneurs in creating an equitable digital ecosystem.

Equal Opportunity Employer: Committed to diversity, inclusion, and transparency in providing fair opportunities to all candidates.

Applicant's personal data is used solely for recruitment purposes. Artificial intelligence tools are employed for application review, complementing human judgment for final hiring decisions. For more information on personal data processing, contact us.