Senior IT Risk

First Digital; Polska; On-site; PLN 90,000 - 130,000; Full time

Job summary

First Digital seeks an experienced IT Risk Specialist to secure our DeFi/Web3 platforms and blockchain infrastructure, overseeing risk assessments, incident response, and regulatory alignment. You will collaborate with engineering and product teams to embed security-by-design and manage evolving security standards across the fintech stack.

The role focuses on DeFi risk, security controls, and governance within a rapidly growing digital asset company, offering opportunities to influence security

Qualifications

• 3–5 years in technical risk, security, or DeFi/Web3 roles
• Strong understanding of DeFi protocols, smart contracts, and blockchain infrastructure security
• Familiarity with stablecoin services and related risks
• Willingness to grow in regulatory frameworks (SOC 1/2, ISO 27001, NIST, CIS, GDPR, AML/KYC)
• Professional certifications such as CISSP, CISA, CISM, or CRISC are a plus
• Strong analytical and problem-solving skills with attention to detail
• Comfortable using AI tools to support research and analysis

Responsibilities

• Identify risks specific to DeFi protocols, smart contracts, and on-chain activity.
• Review security posture of smart contracts and blockchain infrastructure.
• Track emerging Web3 attack vectors and translate them into risk controls.
• Partner with engineering and product teams to embed security-by-design principles.
• Develop IT risk management strategies, policies, and procedures.
• Conduct risk assessments and vulnerability analyses to address threats.
• Coordinate with cross-functional teams to ensure regulatory compliance.
• Oversee incident response protocols and remediation plans.

Skills

DeFi/Web3 security

Blockchain security

Risk assessment

Security incident response

AI tools for research

Education

Bachelor's or Master's in IT/Cybersecurity

Tools

SOC 1/2

ISO 27001

NIST/CIS/GDPR/AML-KYC frameworks

Job description

About us

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

About us

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.

About us

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.

Overview

We are seeking an experienced IT Risk to join our dynamic team and ensure the security and resilience of our platform, with a strong focus on the risks specific to DeFi and Web3. As the IT Risk Specialist, you will have a great opportunity to work in a rapidly growing fintech company at the forefront of blockchain and Web3 innovation, an area that has drawn increasing regulatory attention around the world. This role will be central to how we manage technical and security risk as our on-chain and DeFi footprint grows.

Responsibilities

• Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity, including exploits, protocol vulnerabilities, and counterparty/custody risk.
• Review and assess the security posture of smart contracts and blockchain infrastructure the company interacts with or builds on.
• Track emerging Web3 attack vectors (bridge exploits, oracle manipulation, flash loan attacks, etc.) and translate them into actionable risk controls.
• Actively participate in product discussions, providing risk and security input as new blockchain/DeFi features and integrations are developed.
• Partner with engineering and product teams to embed security-by-design principles into Web3-related builds.
• Develop and implement IT risk management strategies, policies, and procedures.
• Identify potential IT risks related to information security, data privacy, technology infrastructure, and operational processes.
• Conduct risk assessments and vulnerability analysis to proactively address potential threats.
• Collaborate with cross-functional teams to promote a culture of risk awareness and compliance with regulatory requirements.
• Monitor and assess IT security incidents, perform root cause analysis, and develop remediation plans.
• Stay updated on industry best practices, emerging threats, and regulatory changes to enhance the organization's IT risk framework.
• Oversee the implementation of security measures, encryption protocols, access controls, and disaster recovery plans.
• Establish incident response protocols and coordinate with external security agencies if necessary.
• Conduct periodic audits and reviews of IT systems, applications, and infrastructure to ensure compliance with internal and external standards.
• Provide risk assessment reports and recommendations to senior management and stakeholders.

Requirements

• Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Proven experience (3-5 years) in technical risk, security, or DeFi/Web3-focused roles, ideally with some exposure to financial services or fintech.
• Strong, hands‑on understanding of DeFi protocols, smart contracts, blockchain infrastructure, and associated security risks — this is core to the role.
• Familiarity with stablecoin services and the associated risks and challenges.
• Traditional IT risk / compliance experience is a plus, not a prerequisite — willingness to grow into regulatory frameworks (SOC 1/2, ISO 27001, NIST, CIS, GDPR, AML/KYC) is important.
• Professional certifications such as CISSP, CISA, CISM, or CRISC are a plus.
• Strong analytical and problem‑solving skills with a detail‑oriented approach.
• Comfortable using AI tools to support research, analysis, and staying current on frameworks outside core expertise.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. This job description is intended to convey information essential to understanding the scope of the job and the general nature and level of work performed by job holders within this job. However, this job description is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position. First Digital Trust reserves the right to amend this job description at any time.