Operations Risk Manager

Nymcard; Dubai; Hybrid; AED 350,000 - 550,000; Full time

Benefits offered by this job

Hybrid work model

Learning & development

Travel opportunities

Job summary

NymCard is hiring an Operational Risk Manager to strengthen our risk programme across card issuing, payments, and operations. You’ll work with Product, Technology, Operations, Fraud, Finance, Compliance, and Legal to identify risks, run RCSAs, manage incidents, and provide clear risk insights for senior leadership.

Success means accurate risk records, timely analysis, practical remediation, and readiness for audits and regulatory reviews.

Qualifications

• 5–10 years of experience in operational risk within fintech or financial services.
• Strong understanding of UAE regulatory expectations (CBUAE).
• Knowledge of payments, card-issuing processes, and reconciliations.
• Experience in incident tracking, KRIs, and risk reporting.
• Excellent documentation and stakeholder communication.

Responsibilities

• Maintain and operate the Operational Risk Management Framework in line with CBUAE expectations.
• Clarify roles, responsibilities, review cycles, and evidence requirements.
• Coordinate risk & control self-assessments across core areas including card issuing and processing.
• Document inherent and residual risks, control design and effectiveness, and remediation actions.
• Track incidents, near-misses, and control breaches with clear owners and timelines.
• Prepare risk dashboards and trend analysis for management and governance.
• Assist in investigations of operational incidents and losses.
• Support risk assessments for new products, processes, and outsourcing.
• Work with Product/Tech to embed risks in design, testing, rollout.
• Assist in regulatory requests and audits with robust risk evidence.
• Deliver operational risk awareness sessions and maintain training materials.
• Coordinate with Compliance and Procurement on third-party risk reviews.
• Support business continuity and resilience exercises with lessons learned.

Skills

Operational risk

Regulatory compliance

RCSA

Incident tracking

Documentation & reporting

Job description

Our Company

NymCard is a full-stack payments infrastructure company. Founded in 2018, we give banks and financial institutions one platform, nCore, to issue cards, move money, lend, settle, and manage financial crime as a single system, not separate vendors stitched together. nCore is AI-native and built on a real-time data core, so every product runs on one shared view of the customer.

We're a team of 150+ with a high bar. AI isn't a department here, it's how every team works, and we back decisions with data, not opinion. The way we work has a name, BOLD: we build trust through transparency, we own outcomes rather than tasks, we lead with speed because in payments a delay is a real cost, and we deliver excellence as a habit. If you want real ownership and room to move fast, this is the team for you.

The Role

We are hiring an Operational Risk Manager to support and strengthen our operational risk programme across card issuing, payment processing, and supporting operations. The role focuses on the day-to-day execution of operational risk activities, ensuring risks are identified, assessed, monitored, and remediated in a structured, evidence-based manner.

You will work closely with Product, Technology, Operations, Fraud, Finance, Compliance, and Legal to assess operational risks arising from business-as-usual activities, new products, and change initiatives. You will help maintain risk frameworks, run RCSAs, track incidents and losses, and produce clear management information to support senior management and committee oversight.

Success in this role means accurate and current risk records, timely incident analysis, practical remediation actions, and consistent readiness for internal reviews, audits, and regulatory interactions.

What You’ll Be Doing

• Maintain and support the Operational Risk Management Framework in line with CBUAE expectations and internal policies.
• Ensure roles, responsibilities, review cycles, and evidence requirements are clearly documented and followed.
• Coordinate and execute risk and control self-assessments across core operational areas including card issuing, transaction processing, settlements, fraud operations, reconciliations, customer support, and vendor-supported services.
• Document inherent and residual risks, control design and effectiveness, and agreed remediation actions with clear owners and timelines.
• Support the definition, tracking, and ongoing monitoring of key risk indicators, incidents, near-misses, and control breaches.
• Assist in preparing concise risk dashboards and trend analysis for management and governance forums.
• Support the investigation and documentation of operational incidents and losses.
• Assist in root cause analysis, identification of contributing factors, and tracking of corrective and preventive actions until closure, ensuring evidence is retained.
• Support operational risk assessments for new products, process changes, system enhancements, and outsourcing arrangements.
• Work with Product and Technology teams to ensure risks and controls are considered during design, testing, and rollout.
• Assist in responding to regulatory requests, audits, and internal assurance reviews by preparing supporting documentation, risk evidence, and working papers in a structured and traceable manner.
• Support the delivery of operational risk awareness sessions for relevant teams and new joiners.
• Help maintain training materials and attendance records.
• Contribute to operational risk inputs for outsourcing and third-party reviews, including control assessments, SLA monitoring, and remediation tracking in coordination with Compliance and Procurement.
• Support business continuity and operational resilience activities, including scenario reviews, testing outcomes, and follow-up actions, ensuring lessons learned are reflected in risk assessments and KRIs.

What You Bring

• 5F to 10 years of experience in operational risk, internal control, or risk management within a fintech, payments, or regulated financial services environment.
• Working knowledge of UAE regulatory expectations, particularly CBUAE guidelines, with the ability to operate in a regulated environment.
• Understanding of core payments and card-issuing processes, including transaction processing, settlements, chargebacks, fraud operations, and reconciliations.
• Hands-on experience supporting RCSAs, incident tracking, KRIs, and operational risk reporting.
• Strong analytical and documentation skills, with attention to detail and a practical, risk-based mindset.
• Ability to work collaboratively with business and technical teams and communicate risk issues clearly and proportionately.
• Familiarity with recognized risk management concepts such as Basel principles and ISO 31000 is an advantage.

Bonus Points

• A balanced hybrid approach that supports in-office collaboration for workshops, reviews, and stakeholder engagement, alongside flexibility for focused individual work.
• Exposure to end-to-end operational risk activities within a growing FinTech, with opportunities for learning, professional development, and progression based on performance and impact.
• Hands-on experience working with clients, partners, and stakeholders across the UAE and wider MENA region in a live payments environment.
• The opportunity to contribute directly to the safety, resilience, and scalability of a regulated card-issuing platform, with visible outcomes from your work.