Head of Tech Risk, Brazil

OSL; Brasil; Presencial; BRL 600 000 - 900 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Restaurant discounts

Resumo da oferta

OSL is seeking an experienced Statutory Risk Officer to lead its risk management framework in Brazil, acting as the principal interface with BACEN and other regulators. The role focuses on operational and technology risk, ensuring resilience, security, and regulatory compliance across fast-paced operations.

You will oversee regulatory duties, push risk reporting, BCP/DR planning, and third-party risk, while collaborating with business and technology leaders.

Qualificações

• Bachelor's degree or higher in a relevant field (Law, Economics, Business Admin, Finance).
• Strong risk management and internal controls experience in regulated Brazilian financial institutions.

Responsabilidades

• Act as Statutory Risk Director before BACEN and oversee regulatory duties.
• Lead ORM/operational risk, KRIs, RCSA, and incident management.
• Drive BCP/DR planning and technology risk oversight.
• Review and challenge third-party risk management (TPRM).

Conhecimentos

Regulatory liaison

Strategic leadership

Regulatory compliance

Fluent Portuguese

Advanced English

Experience in risk management

Formação académica

Bachelor's degree in Law/Economics/Business/Admin/Finance

Ferramentas

BCB regulations

VASP frameworks

Descrição da oferta de emprego

Role Objective:

We are seeking an experienced and highly strategic Statutory Risk Officer to

lead our Risk Management function in Brazil. This executive role is pivotal in acting as the

primary interface with local regulatory bodies, specifically the Central Bank of Brazil (BACEN).

The ideal candidate will possess deep expertise in Operational and Technology Risk, ensuring

our fast-paced operations remain resilient, secure, and fully compliant.

About the Role

As the Statutory Risk Officer, you will hold statutory responsibility for the company's risk

management framework in Brazil. You will act as the designated point of contact for BACEN and

other relevant regulatory bodies, advocating for the business while ensuring strict adherence to local regulatory expectations. While the role requires holistic oversight of the enterprise risk landscape, the primary mandate is to architect, implement, and govern a robust Operational Risk and Technology Risk framework. You will partner with business and technology leaders to identify vulnerabilities, mitigate technological threats, and foster a culture of proactive risk management.

Key Responsibilities

Regulatory Leadership & Statutory Duties

• Act as the formally appointed Statutory Risk Director before the Central Bank of Brazil (BACEN),fulfilling all duties required by BACEN Resolution and related regulations.
• Serve as the primary liaison for all regulatory inquiries, audits, and supervisory exams related to risk management.
• Ensure accurate and timely submission of all mandated risk reports to regulators.
• Monitor regulatory developments and proactively adapt the risk framework to meet emerging legislative and supervisory requirements.

Operational cum Technology Risk Management

• Oversee the end-to-end Operational Risk Management (ORM) framework, including Risk Control Self-Assessments (RCSA), Key Risk Indicators (KRIs), and Incident Management.
• Establish and monitor operational risk appetite metrics and thresholds, escalating breaches to the management
• Drive business continuity planning (BCP) and disaster recovery (DR) strategies to ensure operational resilience.
• Provide in-depth oversight of Technology Risk, Information Security, and Cyber Security
• frameworks.
• Evaluate risks associated with digital transformations, cloud migrations, API integrations, and new technology deployments.
• Oversee Third-Party Risk Management (TPRM), focusing heavily on critical IT vendors and outsourced technology service providers.
• Review and challenge incident response protocols and post-mortem analysis for IT disruptions or cyber incidents.

Financial Risk (Advantageous Focus)

Good knowledge over end-to-end financial, fraud risk management during payment and money conversion and transfer process, for dual B2C (high-volume, rapid retail transactions) and B2B (high-value invoice/account-to-account payouts) flows.

Requirements

• Bachelor's degree in Law, Economics, Business Administration, Finance, or related field.
• Strong experience in risk management and/or internal controls within regulated financial institutions in Brazil (banks, payment institutions, brokerages, or asset managers).
• Solid working knowledge of BCB regulatory processes, norms, and resolutions.
• Prior experience engaging directly with BCB and/or CVM in a regulatory/supervisory context.
• Strong understanding of prudential risk frameworks (capital, RWA, operational risk).
• Brazilian national or foreign national with valid Brazilian residency (statutory officer requirement).
• Availability and willingness to be formally listed as a company officer with associated legal responsibilities.
• Fluent Portuguese and Advanced English.
• Prior experience in virtual assets, crypto, or fintech risk management.
• Domain Expertise: SME-level knowledge in Operational Risk and Technology/Cyber Risk methodologies.
• Professional certifications in risk management (e.g., FRM, CRM) a plus.
• Familiarity with VASP-specific prudential frameworks and evolving BCB guidance on RWA treatment for digital asset activities.

P/S: Only shortlisted candidates will be contacted due to overwhelming applicants.

Vision & Mission

OSL is the first SFC-licensed digital asset platform in Hong Kong and a PayFi innovator. Through stablecoin payments, cross-border settlement and global licensing, we are building the next-generation payments network. Stablecoins have become everyday money across emerging markets and are widely viewed as blockchain's "killer app," with industry focus shifting from token issuance to real-world consumer and enterprise payment adoption. The strongest growth lies in cross-border B2B payments, where providers embedding stablecoins into corporate settlement flows can capture significant volume and float. Long-term defensibility comes from regulatory licences, banking partners and cross-border corridors.

OSL holds or has acquired licences in Hong Kong, Japan, Australia, Bermuda and Indonesia, and is expanding into Europe, Brazil, Southeast Asia and Africa through acquisitions and licence applications. With OSL Pay and StableX, we embed stablecoin settlement into bank accounts and card networks, support 150+ digital assets, and provide 24/7 fiat–stablecoin conversion. As a regulated pioneer with a startup mindset, we believe the future of payments will be driven by real adoption and scalable deployment, not technology narratives. We welcome builders who are passionate about crypto and payments to join us in shaping compliant, global payment infrastructure.