Head of Risk, Brazil

OSL; Brasil; Presencial; BRL 900 000 - 1 400 000; Tempo integral

Resumo da oferta

OSL is seeking an experienced Statutory Risk Officer to lead its risk management function in Brazil. The role interfaces with BACEN and other regulators to ensure full compliance and robust governance across operational and technology risk domains.

The incumbent will architect and govern a comprehensive risk framework, collaborate with business and technology leaders, and drive resilience, incident management, and regulatory reporting across the organization.

Qualificações

• Bachelor's degree in Law, Economics, Business Administration, Finance, or related field.
• Strong experience in risk management and/or internal controls within regulated financial institutions in Brazil.
• Solid working knowledge of BCB regulatory processes, norms, and resolutions.
• Prior experience engaging directly with BCB and/or CVM in a regulatory context.
• Strong understanding of prudential risk frameworks (capital, RWA, operational risk).
• Brazilian residency and willingness to be listed as a company officer.
• Fluent Portuguese and Advanced English.
• Experience in virtual assets, crypto, or fintech risk management.
• Domain Expertise: Operational Risk and Technology/Cyber Risk methodologies.
• Professional certifications in risk management (e.g., FRM, CRM) a plus.
• Familiarity with VASP prudential frameworks and evolving BCB guidance on RWA for digital assets.

Responsabilidades

• Act as the formally appointed Statutory Risk Director before the Central Bank of Brazil (BACEN), fulfilling all duties required by BACEN Resolution and related regulations.
• Serve as the primary liaison for regulatory inquiries, audits, and supervisory exams related to risk management.
• Ensure accurate and timely submission of all mandated risk reports to regulators.
• Monitor regulatory developments and proactively adapt the risk framework to meet emerging legislative and supervisory requirements.
• Oversee the end-to-end Operational Risk Management (ORM) framework, including RCSA, KRIs, and Incident Management.
• Establish and monitor operational risk appetite metrics and thresholds, escalating breaches to management.
• Drive business continuity planning (BCP) and disaster recovery (DR) strategies for resilience.
• Provide in-depth oversight of Technology Risk, Information Security, and Cyber Security frameworks.
• Evaluate risks from digital transformations, cloud migrations, API integrations, and new technology deployments.
• Oversee Third-Party Risk Management (TPRM), focusing on critical IT vendors and outsourced technology providers.
• Review and challenge incident response protocols and post-mortem analysis for IT disruptions or cyber incidents.

Conhecimentos

Regulatory risk management

Operational risk

Technology risk

Regulatory liaison

C-level collaboration

Formação académica

Bachelor's degree in Law, Economics, Business Administration, Finance, or related field

Descrição da oferta de emprego

Role Objective:

We are seeking an experienced and highly strategic Statutory Risk Officer to

lead our Risk Management function in Brazil. This executive role is pivotal in acting as the

primary interface with local regulatory bodies, specifically the Central Bank of Brazil (BACEN).

The ideal candidate will possess deep expertise in Operational and Technology Risk, ensuring

our fast-paced operations remain resilient, secure, and fully compliant.

About the Role

As the Statutory Risk Officer, you will hold statutory responsibility for the company's risk

management framework in Brazil. You will act as the designated point of contact for BACEN and

other relevant regulatory bodies, advocating for the business while ensuring strict adherence to local regulatory expectations. While the role requires holistic oversight of the enterprise risk landscape, the primary mandate is to architect, implement, and govern a robust Operational Risk and Technology Risk framework. You will partner with business and technology leaders to identify vulnerabilities, mitigate technological threats, and foster a culture of proactive risk management.

Key Responsibilities

Regulatory Leadership & Statutory Duties

• Act as the formally appointed Statutory Risk Director before the Central Bank of Brazil (BACEN),fulfilling all duties required by BACEN Resolution and related regulations.
• Serve as the primary liaison for all regulatory inquiries, audits, and supervisory exams related to risk management.
• Ensure accurate and timely submission of all mandated risk reports to regulators.
• Monitor regulatory developments and proactively adapt the risk framework to meet emerging legislative and supervisory requirements.

Operational cum Technology Risk Management

• Oversee the end-to-end Operational Risk Management (ORM) framework, including Risk Control Self-Assessments (RCSA), Key Risk Indicators (KRIs), and Incident Management.
• Establish and monitor operational risk appetite metrics and thresholds, escalating breaches to the management
• Drive business continuity planning (BCP) and disaster recovery (DR) strategies to ensure operational resilience.
• Provide in-depth oversight of Technology Risk, Information Security, and Cyber Security
• frameworks.
• Evaluate risks associated with digital transformations, cloud migrations, API integrations, and new technology deployments.
• Oversee Third-Party Risk Management (TPRM), focusing heavily on critical IT vendors and outsourced technology service providers.
• Review and challenge incident response protocols and post-mortem analysis for IT disruptions or cyber incidents.

Financial Risk (Advantageous Focus)

Good knowledge over end-to-end financial, fraud risk management during payment and money conversion and transfer process, for dual B2C (high-volume, rapid retail transactions) and B2B (high-value invoice/account-to-account payouts) flows.

Requirements

• Bachelor's degree in Law, Economics, Business Administration, Finance, or related field.
• Strong experience in risk management and/or internal controls within regulated financial institutions in Brazil (banks, payment institutions, brokerages, or asset managers).
• Solid working knowledge of BCB regulatory processes, norms, and resolutions.
• Prior experience engaging directly with BCB and/or CVM in a regulatory/supervisory context.
• Strong understanding of prudential risk frameworks (capital, RWA, operational risk).
• Brazilian national or foreign national with valid Brazilian residency (statutory officer requirement).
• Availability and willingness to be formally listed as a company officer with associated legal responsibilities.
• Fluent Portuguese and Advanced English.
• Prior experience in virtual assets, crypto, or fintech risk management.
• Domain Expertise: SME-level knowledge in Operational Risk and Technology/Cyber Risk methodologies.
• Professional certifications in risk management (e.g., FRM, CRM) a plus.
• Familiarity with VASP-specific prudential frameworks and evolving BCB guidance on RWA treatment for digital asset activities.

P/S: Only shortlisted candidates will be contacted due to overwhelming applicants.

Vision & Mission

OSL is the first SFC-licensed digital asset platform in Hong Kong and a PayFi innovator. Through stablecoin payments, cross-border settlement and global licensing, we are building the next-generation payments network. Stablecoins have become everyday money across emerging markets and are widely viewed as blockchain's "killer app," with industry focus shifting from token issuance to real-world consumer and enterprise payment adoption. The strongest growth lies in cross-border B2B payments, where providers embedding stablecoins into corporate settlement flows can capture significant volume and float. Long-term defensibility comes from regulatory licences, banking partners and cross-border corridors.

OSL holds or has acquired licences in Hong Kong, Japan, Australia, Bermuda and Indonesia, and is expanding into Europe, Brazil, Southeast Asia and Africa through acquisitions and licence applications. With OSL Pay and StableX, we embed stablecoin settlement into bank accounts and card networks, support 150+ digital assets, and provide 24/7 fiat–stablecoin conversion. As a regulated pioneer with a startup mindset, we believe the future of payments will be driven by real adoption and scalable deployment, not technology narratives. We welcome builders who are passionate about crypto and payments to join us in shaping compliant, global payment infrastructure.