Senior IT Risk

First Digital; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Competitive total compensation package

FDFI token allocation with multi-yearv

Hands-on role at intersection of on‑r)

Direct mentorship from leadership

Clear path to Growth Lead role

Job summary

First Digital Trust is seeking an experienced IT Risk Specialist to join our fintech team, focusing on DeFi and Web3 risk management. You will assess threats, review smart contracts, and shape risk controls across on-chain infrastructure.

You will work with engineering and product teams to embed security-by-design principles, develop risk policies, and stay current with regulations. A 3-5 year background in technical risk or DeFi/Web3 in finance is preferred, with certifications a plus.

Qualifications

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 3-5 years of experience in technical risk, security, or DeFi/Web3-focused roles, ideally with exposure to financial services or fintech.
• Familiarity with stablecoin services and the associated risks and challenges.
• Willingness to grow into regulatory frameworks (SOC 1/2, ISO 27001, NIST, CIS, GDPR, AML/KYC) is important.

Responsibilities

• Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity.
• Review and assess the security posture of smart contracts and blockchain infrastructure.
• Track emerging Web3 attack vectors and translate them into actionable risk controls.
• Collaborate with engineering and product teams to embed security-by-design principles into Web3 builds.
• Develop and implement IT risk management strategies, policies, and procedures.
• Identify potential IT risks related to information security, data privacy, technology infrastructure, and operational processes.
• Conduct risk assessments and vulnerability analyses to proactively address threats.

Skills

DeFi security

Smart contracts

Blockchain infra

Security risks

Education

Bachelor’s or Master’s in IT/CS/Cybersecurity

Tools

CISSP

CISA

CISM

CRISC

Job description

About us

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

About us

First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.

Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.

Overview

We are seeking an experienced IT Risk Specialist to join our dynamic team and ensure the security and resilience of our platform, with a strong focus on the risks specific to DeFi and Web3. As the IT Risk Specialist, you will have a great opportunity to work in a rapidly growing fintech company at the forefront of blockchain and Web3 innovation, an area that has drawn increasing regulatory attention around the world. This role will be central to how we manage technical and security risk as our on-chain and DeFi footprint grows.

Responsibilities

• Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity, including exploits, protocol vulnerabilities, and counterparty/custody risk.
• Review and assess the security posture of smart contracts and blockchain infrastructure the company interacts with or builds on.
• Track emerging Web3 attack vectors (bridge exploits, oracle manipulation, flash loan attacks, etc.) and translate them into actionable risk controls.
• Actively participate in product discussions, providing risk and security input as new blockchain/DeFi features and integrations are developed.
• Partner with engineering and product teams to embed security-by-design principles into Web3-related builds.
• Develop and implement IT risk management strategies, policies, and procedures.
• Identify potential IT risks related to information security, data privacy, technology infrastructure, and operational processes.
• Conduct risk assessments and vulnerability analysis to proactively address potential threats.
• Collaborate with cross-functional teams to promote a culture of risk awareness and compliance with regulatory requirements.
• Monitor and assess IT security incidents, perform root cause analysis, and develop remediation plans.
• Stay updated on industry best practices, emerging threats, and regulatory changes to enhance the organization's IT risk framework.
• Oversee the implementation of security measures, encryption protocols, access controls, and disaster recovery plans.
• Establish incident response protocols and coordinate with external security agencies if necessary.
• Conduct periodic audits and reviews of IT systems, applications, and infrastructure to ensure compliance with internal and external standards.
• Provide risk assessment reports and recommendations to senior management and stakeholders.

Requirements

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Proven experience (3-5 years) in technical risk, security, or DeFi/Web3-focused roles, ideally with some exposure to financial services or fintech.
• Strong, hands-on understanding of DeFi protocols, smart contracts, blockchain infrastructure, and associated security risks — this is core to the role.
• Familiarity with stablecoin services and the associated risks and challenges.
• Traditional IT risk / compliance experience is a plus, not a prerequisite — willingness to grow into regulatory frameworks (SOC 1/2, ISO 27001, NIST, CIS, GDPR, AML/KYC) is important.
• Professional certifications such as CISSP, CISA, CISM, or CRISC are a plus.
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Comfortable using AI tools to support research, analysis, and staying current on frameworks outside core expertise.

What We Offer

• Competitive total compensation package
• FDFI token allocation with multi-year vesting
• A hands-on role at the intersection of stablecoins, AI agents, and the on-chain economy
• Direct mentorship from the Finance District Lead
• A clear path to the Growth Lead role for strong performers as the function scales

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. This job description is intended to convey information essential to understanding the scope of the job and the general nature and level of work performed by job holders within this job. However, this job description is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position. First Digital Trust reserves the right to amend this job description at any time.