The ad says“ORM, FRM, PRM, or equivalent risk credential”
The ad says“ORM, FRM, PRM, or equivalent risk credential”
The ad says“ORM, FRM, PRM, or equivalent risk credential”
The ad says“Experience with operational loss event management: loss event categorization, database design, and root cause analysis at the program level”
The ad says“Familiarity with model risk management concepts: inventories, validation requirements, tiering frameworks”
The ad says“Hands-on experience building or running a RCSA process: designed the methodology, facilitated assessments, and produced outputs for a risk committee or board”
The ad says“Experience with operational loss event management: loss event categorization, database design, and root cause analysis at the program level”
The ad says“Familiarity with scenario analysis methodology: can design and facilitate OpRisk scenarios and produce quantified board-level outputs”
Zerohash is looking for an experienced Operational Risk Manager to own operational risk as a dedicated discipline within the enterprise risk program
You will design and run the RCSA process, own the loss event database, conduct scenario analysis, and serve as the Risk function’s embedded presence in the Engineering incident lifecycle
Operational risk is bottom-up and event-driven; ERM is top-down and strategic — and separating them properly is how institutional-grade risk programs are built
Design and implement a formal operational risk framework: loss event categories, business line ownership model, and integration with the broader enterprise risk program
Build and own the operational loss event database — ensure every material operational failure is captured, categorized, root-caused, and used to improve controls
Design and run the RCSA process across all business lines: facilitate assessments, challenge results, and produce outputs that feed risk reporting
Run scenario analysis against zerohash’s top operational risks; model tail outcomes across settlement failure, infrastructure outage, third-party dependency failure, and payment disruption; produce Risk Committee and board outputs
Independently test key operational controls on a defined annual cycle; report findings to CRO and Risk Committee
Serve as Risk’s embedded presence in the Engineering post-incident process: review PIR outputs, track remediation commitments, and escalate recurring patterns to the CRO
Benefits
Excellent healthcare + dental + vision coverage. Zero Hash covers roughly 100% of employee premiums
33 Days Flexible PTO
Equity ownership
WFH setup
Learning & Development Stipend
Mental health and wellness program
Preferred experience
Strong written communication — RCSA narratives, scenario summaries, and board-level reports are core deliverables
Hands-on experience building or running a RCSA process: designed the methodology, facilitated assessments, and produced outputs for a risk committee or board
Experience with operational loss event management: loss event categorization, database design, and root cause analysis at the program level
5+ years of operational risk management experience, with at least 2 years in a dedicated OpRisk role at a regulated financial services institution
Familiarity with scenario analysis methodology: can design and facilitate OpRisk scenarios and produce quantified board-level outputs
Experience working alongside Engineering or Technology teams in a risk capacity
Experience at a digital asset, payments, or fintech company with complex technology-dependent operations
Familiarity with model risk management concepts: inventories, validation requirements, tiering frameworks
