Risk Control Manager

QUTOU TECHNOLOGY PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading cryptocurrency exchange in Singapore seeks a Risk Control Manager to develop and oversee a comprehensive risk management framework. The role involves identifying, assessing, and mitigating various operational and market risks while ensuring regulatory compliance. Ideal candidates hold a relevant degree and possess at least three years of experience in the financial services or cryptocurrency sectors. Strong analytical skills and familiarity with risk management tools like SQL and Python are required.

Qualifications

• Bachelor's degree in a quantitative field; advanced degrees or certifications are a plus.
• Minimum 3 years of experience in risk management or internal audit.
• Understanding of financial risk management frameworks like COSO or ISO 31000.
• Strong knowledge of cryptocurrency and blockchain risks.
• Hands-on experience with risk programs including KRIs and business continuity.
• Proficiency in risk management tools and SQL/Python for data analysis.

Responsibilities

• Develop and implement a comprehensive risk management framework.
• Identify and assess operational, market, credit, regulatory, and technology risks.
• Monitor key risk metrics and mitigate identified risks.
• Ensure compliance with regulatory requirements and industry standards.
• Collaborate with cross-functional teams on risk integration.

Skills

Risk management

Analytical skills

Collaboration

Problem-solving

Decision-making

Education

Bachelor's degree in Finance, Economics, Business, or related field

Advanced degree (Master's, MBA) or professional certifications (FRM, CFA, CAMS)

Tools

Risk management software

SQL

Python

GRC systems (e.g., Archer)

Job description

Job Summary

The Risk Control Manager will be instrumental in developing, implementing, and overseeing a robust risk management framework to identify, assess, monitor, and mitigate all types of risks associated with crypto exchange operations, products, and services. This role requires a deep understanding of the cryptocurrency landscape, financial market risks, regulatory requirements, and the ability to collaborate effectively across various teams to foster a strong risk‑aware culture.

Key Responsibilities

• Risk Framework Development & Implementation:

  • Design, implement, and maintain a comprehensive enterprise‑wide risk management framework, policies, and procedures tailored to the unique risks of a cryptocurrency exchange.
  • Develop and manage Risk Appetite Statements and Key Risk Indicators (KRIs), defining clear thresholds and establishing reporting mechanisms.
  • Lead and coordinate Risk & Control Self‑Assessments (RCSAs), Product Risk Assessments, and Enterprise Risk Assessments to identify and address key risk areas.

• Risk Identification & Assessment:

  • Proactively identify, analyze, and assess various types of risks, including but not limited to:
    • Operational Risk: System failures, human error, process breakdowns, fraud, cyber security risks, business continuity, disaster recovery.
    • Market Risk: Volatility, liquidity risk, price manipulation, unexpected market movements.
    • Credit/Counterparty Risk: Risks associated with institutional clients, lending, or decentralized finance (DeFi) protocols.
    • Regulatory & Compliance Risk: Evolving AML/CFT regulations, licensing requirements, data privacy, and other local/international crypto‑specific regulations.
    • Technology Risk: Smart contract vulnerabilities, blockchain network issues, platform security, data integrity.
    • Product Risk: Risks inherent in new crypto products (e.g., derivatives, staking, NFTs).
  • Conduct targeted data‑driven risk assessments and develop risk management reporting using data visualization tools.

• Risk Monitoring & Mitigation:

  • Implement and oversee control measures to mitigate identified risks effectively.
  • Monitor key risk metrics and dashboards for proactive risk detection and incident management.
  • Manage crypto‑related risk incidents and issues, collaborating with stakeholders for timely resolution and effective remediation.
  • Develop and implement tools and systems for real‑time fraud detection, suspicious activity alerts, and anti‑abuse mechanisms.
  • Regularly review and question hedging positions, diversification, and exposure risk.

• Compliance & Governance:

  • Ensure alignment of risk management practices with regulatory requirements and industry best practices.
  • Collaborate with legal, compliance, and audit teams to address regulatory inquiries, close gaps, and ensure adherence to evolving regulations (e.g., MiCA, travel rule, local DPT regulations).
  • Participate in risk committees and forums, escalating issues and updating crypto risk policies and procedures.
  • Prepare and present regular and ad‑hoc risk reports to internal committees, senior management, and boards.

• Stakeholder Collaboration & Culture:

  • Collaborate closely with cross‑functional teams, including Product, Engineering, Trading, Operations, Legal, and Compliance, to integrate risk management into business processes and new product development.
  • Provide risk guidance and training to employees to raise awareness of risk obligations and promote a strong risk‑aware culture within the organization.
  • Liaise with regulatory authorities and external auditors as needed.

Required Qualifications

• Bachelor's degree in Finance, Economics, Business, Risk Management, Law, or a related quantitative field. Advanced degree (Master's, MBA) or professional certifications (FRM, CFA, CAMS) are a significant plus.
• At least 3 years of proven experience in risk management, internal audit, or risk and controls, with a strong preference for experience within the cryptocurrency, FinTech, or financial services industry (e.g., investment banking, asset management).
• In‑depth understanding of financial risk management frameworks (e.g., COSO, ISO 31000) and methodologies.
• Strong knowledge of cryptocurrency products, blockchain technology, and the associated risks and infrastructure.
• Familiarity with relevant regulatory frameworks and compliance requirements for virtual asset service providers (VASPs).
• Hands‑on experience with risk programs such as KRIs, risk assessments, control testing, and business continuity planning.
• Excellent analytical, problem‑solving, and decision‑making skills with a keen eye for detail.
• Proficiency in risk management tools and software applications; experience with GRC systems (e.g., Archer) is a plus.
• SQL and Python programming experience for data analysis and automation is highly desirable.

Preferred Qualifications

• Prior experience building and scaling fraud or risk detection systems from scratch.
• Experience with blockchain analytics tools.
• Exposure to derivatives and spot trading in crypto markets.
• Experience working in a global organization with diverse teams.