Risk Officer

Job description

Your Role As the Risk Officer, you're doing the analytical work that keeps Blockrise's risk framework operational and credible. You will work across risk domains and help the company grow hands-on. This is not a head-of-risk role. You are the person who makes sure the analytical work gets done. The role gives you direct exposure to regulatory risk management at a growing digital asset firm, with real scope, real responsibility, and no bureaucratic distance from the work. What you'll do Maintain the risk register. Keep entries current, track status, and flag emerging risks as they surface. Execute risk assessments. Run periodic and event-driven assessments across operational and ICT risk domains. Apply quantitative and qualitative methodologies and document findings clearly. Prepare Risk Committee materials. Pack the agenda, write the risk updates, and make sure the committee has what it needs to make decisions. Track treatment plans. Follow risk treatment plans from agreement through to completion. Chase owners, track progress, and escalate where plans are slipping. Support regulatory reporting. Support regulatory reporting cycles to DNB and AFM. Gather evidence, structure submissions, and flag where gaps need addressing. Develop risk scenarios. Play a leading role in developing risk scenarios, controls, and mitigations across our risk frameworks to support operations, product development, and business strategy. Build risk awareness. Design and run risk awareness campaigns and training for Blockrise staff so a risk-aware culture is sustained in practice, not just on paper. Contribute to DORA work. Contribute to the ongoing DORA implementation, particularly the ICT risk management requirements under Articles 5 to 15. What you bring 2 to 4 years of experience in risk management, preferably at a regulated financial institution: a bank, payment institution, investment firm, or CASP. Working knowledge of risk assessment methodologies, both quantitative and qualitative, including likelihood and impact scoring and defining treatment plans. Familiarity with at least one of: DORA, MiCAR, Wft, Wwft, or comparable EU financial regulation. A clear understanding of the three lines of defence model and where a second-line risk analyst sits within it. Experience maintaining risk registers and producing risk reporting for management or boards. An analytical mindset: comfortable with data, identifying patterns, and turning findings into recommendations someone can act on. Strong written English. Dutch is a plus. Bachelor's degree in finance, economics, risk management, or a related field. FRM, PRM, or working toward one is a plus but not required. Comfortable in a fast-paced scale-up where processes are still being built, and the expectation is that you help build them. NICE TO HAVE Experience with crypto-assets, custody, or DeFi risk. Familiarity with Vanta or similar GRC tooling. Experience with ICT risk assessments under DORA Articles 5 to 15. What we offer Competitive monthly salary EUR 3.000 - 4.000 based on full-time employment depending on your experience. Up to EUR 300 to invest in tools that improve your workflow (headphones, keyboards, etc.) Monthly Bitcoin pension of EUR 50 25 vacation days Option to participation in our share certificate program Travel reimbursement or NS Business Card for your commute Opportunities for hybrid work, though in-person collaboration is highly valued Paid training and learning resources to keep your skills sharp and up to date A fully stocked pantry and fridge at the office, with meals, snacks, and drinks included Discounted access to Urban Sports Club and LeaseBike plans Contact Us To apply, please fill in the form below. For questions about the job opening, your application, or Blockrise, please contact . We expect to get back to you within one week. We consider every application regardless of your background and beliefs. After an introduction, an assignment may be part of the application process. Please note that by submitting your application, Blockrise (in accordance with our Privacy Policy) obtains permission to request, store, and process your application data for the purpose of considering employment. We will delete your application data within 30 days when your application is no longer under consideration. Unsolicited recruitment We do not accept unsolicited CVs from recruiters or employment agencies. We will not consider or agree to payment of any referral compensation or recruiter fee relating to unsolicited CVs.