Technology & Cyber Risk Manager

About the Job zerohash is looking for an experienced Technology & Cyber Risk Manager to own the second-line technology and cyber risk function. You will assess and independently challenge the controls that protect zerohash’s infrastructure, custody systems, and partner-facing platforms — and translate that assessment into quantitative risk views for senior leadership and the board. The role covers the full scope of technology risk at a regulated digital asset platform: infrastructure, application security, model and AI risk, and the evolving threat landscape that comes with operating at the intersection of financial services and crypto. Responsibilities Own zerohash’s cyber risk framework: risk methodology, risk appetite metrics, and scenario library; produce independent risk views for senior leadership and the board Maintain the technology and cyber risk register as a live, continuously updated record Review and challenge first-line security deliverables — penetration test results, vulnerability metrics, and control assessments — and produce independent risk opinions Partner with Engineering and Security on risk identification across infrastructure, application, and AI systems Own the AI governance program: use case registry, risk classification, and oversight of AI systems touching end-user or transaction data Support regulatory and counterparty risk assessments as the second-line technology risk owner Track emerging technology risks including AI, model risk, and cryptographic risk Provide independent technical risk assessment for custody-critical and security-critical vendors as an input into the broader vendor risk program, supplementing commercial and contractual review owned elsewhere in the business Requirements 5+ years in technology risk, cyber risk, or information security risk management, with at least 2 years in a dedicated second-line role at a bank, regulated fintech, or equivalent Direct experience with GSIB-style third-party assessments, either as the assessor or as the party being assessed Ability to read and critically assess first-line security deliverables and produce independent risk opinions Hands-on experience with quantitative risk modeling — FAIR methodology or equivalent Familiarity with AI/ML risk governance concepts: model inventories, use case classification, human-in-the-loop design Familiarity with DORA ICT risk requirements or equivalent EU financial regulation Strong written communication — board and regulatory-grade risk reporting is a core deliverable Preferred Experience at a digital asset, payments, or crypto-adjacent regulated institution Formal FAIR certification or equivalent quantitative risk credential Familiarity with post-quantum cryptography standards and cryptographic inventory frameworks Benefits Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only) Vision & Dental Insurance (U.S. only) Chance to earn equity Maternity & Paternity leave (after 6 months) WeWork All Access Membership WFH Yearly Stipend L&D Yearly Stipend (after 6 months) About zerohash zerohash is the leading crypto and stablecoin infrastructure platform and the operating system for digital money, powering the next generation of financial services. Founded in 2017, zerohash enables banks, brokerages, fintechs, and payment companies to offer crypto trading, stablecoin payments, and tokenized assets without having to build or manage complex blockchain infrastructure on their own. The zerohash platform supports three core pillars: Trade, Transact, and Tokenize. Through a single integration, customers can launch regulated crypto buy, sell, and custody services; enable 24/7 stablecoin-based funding, payouts, and settlement; and issue and manage tokenized assets with built-in compliance, risk controls, and reporting. By abstracting away technical, regulatory, and operational complexity, zerohash allows partners to treat digital assets as just another financial primitive: fast, programmable, and global. zerohash is trusted by some of the world’s most recognized financial and consumer brands, including Interactive Brokers, Morgan Stanley, Stripe, Franklin Templeton, BlackRock, DraftKings, Gusto, Worldpay, Kalshi, One Pay, among others. Today, zero infrastructure supports millions of end users across brokerage, wealth, payments, and marketplace platforms globally. The company is deeply regulated and compliance-first, operating across the U.S. and internationally with licenses and approvals that allow partners to enter crypto and stablecoins with confidence. zerohash has become a trusted partner for enterprises seeking to modernize financial products while meeting the highest standards for security, risk management, and regulatory oversight. To date, zerohash has raised over $280 million in funding from a mix of leading venture firms and strategic investors, including Morgan Stanley, Interactive Brokers, SoFi, Point72 Ventures, Bain Capital Crypto, Lightspeed Venture Partners, and more. zerohash has been featured in top-tier media outlets such as Bloomberg, CNBC, The Wall Street Journal, Financial Times, Reuters, Forbes, and CoinDesk, and its leadership team regularly contributes to global conversations on the future of payments, investing, and financial infrastructure. At zerohash, we're building the infrastructure that makes digital money work securely, compliantly, and at global scale. The zerohash Culture All zerohash employees are guided by the following characteristics and core principles: Independence/Ownership - An ability to work autonomously. Join zerohash, pitch ideas, and shape the work you do. Passion - We are innovating quickly and challenging the status quo. We want you to think big, be creative and ​make a difference every day. Collaborative - A good attitude and respect for others. We’re teammates, not co-workers. Everything we do is a shared success and equally a shared failure - we talk in terms of “we” not “me”. Initiative - An ability and passion for learning and asking questions. We will champion you, challenge you and push you to achieve your best - and we expect you to do the same. Empathy - An ability to listen, respect, and understand your co-workers, customers, and everyone you interact with no matter how different they are to you. Adaptability - An ability to respond quickly. We are in a fast-paced industry and so we expect you to be creative when solving a new problem and comfortable under pressure. Transparency - We believe that transparency is critical to empowering everyone to make the best decisions, both the company to its people and vice versa. Integrity - Integrity creates trust. As both an organization collectively and as individuals, it is our most valuable asset. Follow us Twitter LinkedIn Youtube For candidates based in Colorado, please contact colorado-wages @zerohash.com to request compensation and benefits information regarding a particular role(s). Please include with your email the city you reside (or intend to reside in Colorado) and the title/link to the roles you're interested in. **We’ve recently seen an increase in individuals impersonating zerohash recruiters to target job seekers. Please stay vigilant and keep the following in mind to ensure you are communicating with the real zerohash team: Verified Emails Only: Official outreach will only come from a @zerohash.com email address. No Messaging Apps: We will never contact you via unsolicited text messages, WhatsApp, or Telegram. Official Applications: Only apply directly through our careers webpage () or . See something suspicious? If you want to verify an interview request or report a fake job posting or suspicious communication, please contact us immediately at talent @zerohash.com. This email is for fraud reports only. Candidate application inquiries will not be responded to.