Job description
Job Overview
This position deeply integrates with the company's comprehensive risk management system, responsible for the full lifecycle planning, design, and implementation of cryptographic security products for the financial technology service platform. It focuses on core scenarios such as trading risk control, fund security assurance, operational risk prevention, and compliance data encryption, transforming commercial cryptography technology and information security capabilities into implementable and quantifiable risk control products and security tools, supporting the platform's risk governance system and business compliance development.
Core Responsibilities
1. Construction of Cryptographic Products Supporting the Risk Management System
1. Interface with the enterprise-level risk management framework, designing corresponding cryptographic security product capabilities around risk appetite, risk tolerance, risk limits, risk classification, and escalation mechanisms, and outputting the roadmap and version iteration plan for cryptographic risk control products.
2. Combine various risk policy requirements such as market risk, liquidity risk, credit risk, and operational risk to translate control rules into functional requirements for cryptographic products, outputting PRD, product prototypes, and requirement specifications.
3. Oversee the overall architectural design of the cryptographic risk control product matrix, connecting the cryptographic data links of trading, funds, operations, compliance, etc., to form an integrated cryptographic security product system.
2. Implementation of Trading Risk Cryptographic Products
1. Responsible for the design of cryptographic risk control products covering the entire chain before, during, and after trading, including productization of scenarios such as order price deviation verification, order quantity limits, account exposure cryptographic calculations, self-trade interception, abnormal order identification, and protection of extreme business scenarios.
2. Build cryptographic monitoring product capabilities for trading behaviors, supporting the identification and verification of risk scenarios such as centralized trading, related accounts, abnormal price fluctuations, and potential market misconduct, ensuring the confidentiality, integrity, and tamper-proofing of risk control data transmission and storage.
3. Assess the risk impact of interruptions in order trading systems, business trading indicators, liquidity services, and external cooperation interfaces, designing corresponding emergency product mechanisms for cryptographic risk control, supporting limit adjustments and trading restrictions when major risk thresholds are triggered.
3. Design of Fund Security Products
1. Responsible for the design of cryptographic products related to customer fund security, establishing mechanisms for customer fund coverage verification, consistency reconciliation of multi-system accounting data, multi-level account balance monitoring, and liquidity risk control cryptographic verification for fund transfers.
2. Design product functions for fund isolation permission control, multi-level cryptographic approval for fund allocation, and encrypted verification of daily reconciliation discrepancies, ensuring the security of customer funds and traceability of operational processes.
3. Assess the credit risk and concentration risk of partners such as banks, custodians, liquidity service providers, and payment settlement institutions, designing corresponding cryptographic risk control assessment tools for partners.
4. Assist in conducting stress tests for centralized fund transfers, market liquidity depletion, abnormal fluctuations in settlement channels, and partner defaults, building capabilities for cryptographic data verification and fund security simulation products.
4. Risk Support for Product and Service Provider Access
1. Participate in the cryptographic security risk assessment of new products, new businesses, and major system changes, providing independent risk opinions from the perspectives of cryptographic technology, fund security, and data encryption.
2. Establish cryptographic security standards for business product access and continuous assessment, covering liquidity, position concentration, technical security, contract security, partner risk, and price reliability.
3. Participate in the cryptographic security access and regular review of liquidity service providers, custodians, banks, data suppliers, and key technology suppliers, proposing rectification, suspension, or exit suggestions for partners that do not meet risk standards.
5. Operational Risk and Risk Control System Construction
1. Responsible for the design of cryptographic products related to operational risk, covering key lifecycle management, multi-level permission cryptographic control, secondary cryptographic verification of sensitive operations, system change encryption audits, and encryption traceability for high-risk processes.
2. Promote the construction of cryptographic modules in the risk rules engine, including real-time alert cryptographic data channels, encrypted display of risk dashboards, encrypted storage of case management, and encrypted transmission of risk data.
3. Formulate standards and criteria for risk data encryption, ensuring the traceability, consistency, and integrity of order, transaction, account, fund, and financial data, preventing data tampering and leakage risks.
4. Organize the online review, backtesting, and effect verification of risk models and cryptographic rules, supervising false positives, missed reports, rule bypasses, and data quality issues, and promoting the technical team to complete rectifications.
6. Regulatory Compliance and Audit Cooperation
1. Track domestic financial industry regulatory policies, data security regulations, and commercial cryptography standards, transforming compliance requirements into cryptographic product functions to support scenarios such as anti-money laundering, customer information protection, and regulatory reporting.
2. Assist compliance, anti-money laundering, information security, and internal audit departments in completing regulatory inspections and independent assessments, providing design documents, compliance certificates, and operation logs for cryptographic security products.
3. Maintain complete encrypted archives of cryptographic risk policies, permission adjustments, major exceptions, and risk acceptance matters, ensuring that risk matters are auditable and traceable.
4. In the event of a major risk incident, provide product support and investigation tools at the cryptographic technology level, assisting with risk escalation reports and emergency responses.
Qualifications
Basic Requirements
1. Bachelor’s degree or above in cryptography, information security, computer science, software engineering, financial engineering, mathematics, or related fields.
2. More than 3 years of experience in cryptographic security, risk control products, or financial technology product management, with experience in payment settlement systems and financial information platforms preferred.
3. Possess complete product lifecycle management experience, capable of independently completing requirement research, product design, development promotion, and online iteration processes.
Professional Knowledge Reserve
1. Solid grasp of the basic theories of cryptography, familiar with core technical principles such as symmetric encryption, asymmetric encryption, hash algorithms, digital signatures, and key management.
2. Familiar with the business logic and architecture of payment settlement, account management, and financial risk control systems, and understand the financial-grade information security protection system and implementation methods.
3. Understand the basic framework of comprehensive risk management, familiar with control scenarios and product implementation logic for trading risk, liquidity risk, operational risk, and credit risk.
4. Understand the basic principles of order management, transaction processing, customer fund custody, accounting settlement, and reconciliation.
5. Understand the