Risk Officer

Blockrise; Rotterdam; Hybrid; EUR 33,000 - 45,000; Full time

Benefits offered by this job

Tools allowance

Bitcoin pension

25 vacation days

Share program

Travel reimbursement

Hybrid work

Training resources

Office pantry

Urban Sports Club

Job summary

Blockrise is seeking a Risk Officer to strengthen its risk framework across multiple domains with hands-on analytical work. You will maintain the risk register, perform assessments, and support regulatory reporting to ensure a credible risk posture for growth.

The role requires 2–4 years in risk management, familiarity with EU regulations, and the ability to translate data into actionable steps. Hybrid work and competitive compensation offered.

Qualifications

• 2 to 4 years of experience in risk management, ideally at a regulated financial institution.
• Knowledge of risk assessment methodologies, including likelihood and impact scoring and treatment plans.
• Familiarity with DORA, MiCAR, Wft, Wwft, or similar EU regulation.
• Understanding of the three lines of defence model.
• Experience maintaining risk registers and producing risk reporting for management or boards.
• Strong written English; Dutch is a plus.
• Comfortable in a fast-paced scale-up where processes are still being built.

Responsibilities

• Maintain the risk register, keep entries current, flag emerging risks.
• Execute risk assessments across operational and ICT domains with quantitative and qualitative methods.
• Prepare Risk Committee materials and updates for decision making.
• Track treatment plans from agreement through completion and escalate delays.
• Support regulatory reporting to DNB and AFM with evidence gathering.
• Develop risk scenarios, controls, and mitigations to support operations and business strategy.
• Build risk awareness through campaigns and staff training.
• Contribute to DORA implementation for ICT risk management.

Skills

Risk management

Risk assessment

Regulatory knowledge

Data analysis

English writing

Education

Bachelor's degree in finance, economics, risk management, or related field

Tools

GRC tooling (e.g., Vanta)

Job description

Your Role

As the Risk Officer, you're doing the analytical work that keeps Blockrise's risk framework operational and credible. You will work across risk domains and help the company grow hands‑on. This is not a head‑of‑risk role. You are the person who makes sure the analytical work gets done.

The role gives you direct exposure to regulatory risk management at a growing digital asset firm, with real scope, real responsibility, and no bureaucratic distance from the work.

What you'll do

• Maintain the risk register.Keep entries current, track status, and flag emerging risks as they surface.


• Execute risk assessments.Run periodic and event-driven assessments across operational and ICT risk domains. Apply quantitative and qualitative methodologies and document findings clearly.


• Prepare Risk Committee materials.Pack the agenda, write the risk updates, and make sure the committee has what it needs to make decisions.


• Track treatment plans.Follow risk treatment plans from agreement through to completion. Chase owners, track progress, and elevate where plans are slipping.


• Support regulatory reporting.Support regulatory reporting cycles to DNB and AFM. Gather evidence, structure submissions, and flag where gaps need addressing.


• Develop risk scenarios.Play a leading role in developing risk scenarios, controls, and mitigations across our risk frameworks to support operations, product development, and business strategy.


• Build risk awareness.Design and run risk awareness campaigns and training for Blockrise staff so a risk‑aware culture is sustained in practice, not just on paper.


• Contribute to DORA work.Contribute to the ongoing DORA implementation, particularly the ICT risk management requirements under Articles 5 to 15.

What you bring

• 2 to 4 years of experience in risk management, preferably at a regulated financial institution: a bank, payment institution, investment firm, or CASP.


• Working knowledge of risk assessment methodologies, both quantitative and qualitative, including likelihood and impact scoring and defining treatment plans.


• Familiarity with at least one of: DORA, MiCAR, Wft, Wwft, or comparable EU financial regulation.


• A clear understanding of the three lines of defence model and where a second‑line risk analyst sits within it.


• Experience maintaining risk registers and producing risk reporting for management or boards.


• An analytical mindset: comfortable with data, identifying patterns, and turning findings into recommendations someone can act on.


• Strong written English. Dutch is a plus.


• Bachelor's degree in finance, economics, risk management, or a related field. FRM, PRM, or working toward one is a plus but not required.


• Comfortable in a fast‑paced scale‑up where processes are still being built, and the expectation is that you help build them.

NICE TO HAVE

• Experience with crypto‑assets, custody, or DeFi risk.


• Familiarity with Vanta or similar GRC tooling.


• Experience with ICT risk assessments under DORA Articles 5 to 15.

What we offer

• Competitive monthly salary EUR 3.000 - 4.000 based on full‑time employment depending on your experience.


• Up to EUR 300 to invest in tools that improve your workflow (headphones, keyboards, etc.)


• Monthly Bitcoin pension of EUR 50


• 25 vacation days


• Option to participation in our share certificate program


• Travel reimbursement or NS Business Card for your commute


• Opportunities for hybrid work, though in‑person collaboration is highly valued


• Paid training and learning resources to keep your skills sharp and up to date


• A fully stocked pantry and fridge at the office, with meals, snacks, and drinks included


• Discounted access to Urban Sports Club and LeaseBike plans

Contact Us

We expect to get back to you within one week. We consider every application regardless of your background and beliefs. After an introduction, an assignment may be part of the application process.

We will delete your application data within 30 days when your application is no longer under consideration.

Unsolicited recruitment
We do not accept unsolicited CVs from recruiters or employment agencies. We will not consider or agree to payment of any referral compensation or recruiter fee relating to unsolicited CVs.