ERM Director (Abu Dhabi)

Bybit; Abu Dhabi; On-site; AED 600,000 - 1,000,000; Full time

Job summary

Bybit seeks an experienced Enterprise Risk Management (ERM) Lead to establish and head the second-line risk function. You will design and maintain the ERM framework, oversee risk governance, appetite, and monitoring, and ensure alignment with global regulatory expectations for a cryptocurrency exchange.

The role interfaces with regulators and group risk teams to support Bybit’s growth and regulatory readiness.

Qualifications

• Bachelor’s degree required in a relevant field.
• 12–15+ years in enterprise/regulatory risk roles in crypto/fintech.
• Experience designing and operating ERM frameworks across regions.
• Proven experience engaging regulators and senior management.

Responsibilities

• Lead the group-wide ERM framework as second-line owner.
• Design risk governance structures, policies, and standards.
• Develop risk taxonomy, appetite statements, and KRIs.
• Coordinate risk identification across regions and business units.
• Act as risk advisor on topics like third-party, liquidity, and operational risk.
• Maintain risk registers, logs, and dashboards for senior management and board.
• Support BCM activities including BCP/DRP development.

Skills

Stakeholder management

Analytical thinking

Communication

Bilingual English/Chinese

Education

Bachelor’s degree in Risk Management, Finance, Accounting, Business, Engineering, or related

Tools

COSO ERM

ISO 31000

Job description

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.

Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.

Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.

We are seeking a highly experienced and capable Enterprise Risk Management (ERM) Lead to establish and lead the second-line enterprise risk function for Bybit. This role is responsible for designing and maintaining the ERM framework, providing independent second-line oversight across financial and non-financial risks, and ensuring alignment with global regulatory expectations applicable to cryptocurrency exchanges.

The role will focus on strengthening risk governance, risk appetite articulation, risk identification and monitoring, and regulatory-facing risk capabilities.

This position serves as a key interface with regulators and group-level risk teams and plays a critical role in supporting Bybit’s sustainable growth and regulatory readiness. This position reports to the Global Head of Internal Audit and Enterprise Risk.

Responsibilities

• Lead the establishment and ongoing enhancement of the group-wide ERM framework, acting as the second-line owner of ERM.
• Design and enhance risk governance structures, policies, and standards in alignment with COSO ERM, ISO 31000, and relevant regulatory requirements.
• Develop and maintain risk taxonomy, risk classification standards, and risk appetite statements to ensure consistency across regions and business units.
• Coordinate the identification and assessment of enterprise-wide risks across regions and BUs, covering both financial and non-financial risk domains.
• Work collaboratively with first-line and second-line functions (e.g. Finance, Security, Legal and Compliance, and group-level risk teams) to ensure appropriate and sufficient risk mitigation and monitoring measures are in place.
• Ensure risk identification, assessment, and monitoring approaches are consistent, proportionate, and aligned with Bybit’s approved risk appetite, strategic objectives, and regulatory expectations.
• Maintain the enterprise Risk Register, and associated risk and control logs covering all material financial and non-financial risks across the business.
• Act as a central risk advisory function on specific risk topics (e.g. third-party and outsourcing risks, liquidity risk, operational and technology risks), working collaboratively with relevant teams to support effective risk mitigation and monitoring.
• Design and coordinate Risk and Control Self-Assessments (RCSAs) to assess the adequacy of key controls and to identify emerging risk trends across the business.
• Develop and maintain Key Risk Indicators (KRIs) to enable ongoing monitoring of material risks and early identification of risk deterioration.
• Maintain enterprise-level risk dashboards, heatmaps, and reporting, providing clear visibility of risk trends, incidents, and control effectiveness to senior management and the board.
• Ensure risk incidents, material risk events, and remediation actions are appropriately captured, analyzed, and reflected in enterprise risk reporting

Business Continuity Management (BCM)

• Support the development and periodic review of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP).
• Participate in business impact analyses and risk scenario planning, and ensure resilience measures are well-documented and effective.

Group & Regulatory Coordination

• Act as the primary liaison with group-level risk and compliance teams, ensuring local ERM implementation aligns with broader group strategy and expectations.
• Implement group-wide risk policies, standards, and procedures, tailoring them to local regulatory and operational contexts.
• Coordinate and support group risk reporting requirements, contributing to consolidated dashboards, reviews, regulatory engagements, and audits.

Requirements

Qualifications & Experience

• Bachelor’s degree in Risk Management, Finance, Accounting, Business, Engineering, or a related discipline.
• 12–15+ years of experience in enterprise risk management, second-line risk, or regulatory risk roles within a cryptocurrency exchange, financial institution, regulator or fintech.
• Proven experience designing, implementing, and operating ERM frameworks in multi-jurisdictional and regulated environments.
• Demonstrated experience engaging with regulators and senior management on enterprise risk matters.
• Candidates with less extensive experience may be considered for a Senior Manager role, subject to demonstrated depth in ERM expertise, regulatory engagement capability, and overall role fit. Appointment at Director level will be reserved for candidates with proven ability to lead ERM frameworks, engage regulators independently, and operate at a strategic level.

Technical Expertise

• Strong knowledge of ERM frameworks, including COSO ERM and ISO 31000.
• Solid understanding of financial and non-financial risks, including financial and treasury, market integrity and trading, operational, technology, cybersecurity, and third-party risks.
• Experience in risk appetite implementation, KRI design, scenario analysis, and stress testing.
• Familiarity with crypto exchange operating models, technology infrastructure, and regulatory expectations is highly desirable.

Leadership & Soft Skills

• Strong stakeholder management and influencing skills, with the ability to provide effective second-line challenge.
• Excellent analytical, structuring, and documentation skills.
• Clear and confident communicator, capable of engaging senior leadership, boards, and regulators.

Certifications

• Professional certifications such as FRM, PRM, CRM or equivalent ERM-related certifications are strongly preferred.

Other Requirements

• Ability to operate effectively in a fast-paced, evolving regulatory environment.
• Experience working across regions and cultures.
• Proficiency in English and Chinese.

Why Join Us

At Bybit, we are committed to fostering a supportive and enriching work environment.

Our benefits include:

• - Study Growth Fund: We support your professional development and continuous learning.
• - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
• - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
• - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
• - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.