Job description
Responsibilities
Comprehensive Risk Management System
Responsible for building and continuously improving the enterprise-level risk management framework, including risk appetite, risk tolerance, risk limits, key risk indicators, risk event classification, and escalation mechanisms.
Develop market risk, liquidity risk, credit risk, counterparty risk, operational risk, model risk, and third-party risk policies in conjunction with business scale, product structure, and regulatory requirements.
Establish a risk committee working mechanism and regularly submit independent risk reports to the CEO, board of directors, and relevant committees.
Trading and Market Risk
Establish a risk control system for pre-trade, in-trade, and post-trade, including price deviation, order quantity, account exposure, self-trading, abnormal orders, and extreme market protection mechanisms.
Supervise abnormal trading and market behavior monitoring, organize investigations into concentrated trading, related accounts, abnormal price fluctuations, and potential market misconduct.
Assess risks that may arise from matching, market quotes, index prices, market making liquidity, and external trading venue interruptions.
When significant risk thresholds are triggered, responsible for proposing or executing limit adjustments, business downgrades, trading restrictions, and emergency response measures.
Asset and Liquidity Risk
Establish monitoring mechanisms for customer asset coverage, on-chain asset and internal ledger consistency, hot and cold wallet balances, and withdrawal liquidity.
Supervise customer asset isolation, asset allocation permissions, multi-level approvals, daily reconciliations, and discrepancy handling processes.
Assess the credit quality and concentration of banks, custodians, liquidity service providers, stablecoin issuers, and other counterparties.
Organize stress tests for concentrated withdrawals, market liquidity exhaustion, significant deviations in stablecoin prices, and counterparty defaults.
Product and Asset Access Risk
Participate in risk assessments for new products, new businesses, and major system changes, providing independent risk opinions.
Establish standards for digital asset access and ongoing assessment, focusing on liquidity, position concentration, technical security, governance mechanisms, price reliability, and potential conflicts of interest.
Participate in the access and regular review of liquidity service providers, custodians, banks, data providers, and key technology suppliers.
Propose restrictions, rectifications, suspensions, or exit recommendations for products or partners that do not meet risk standards.
Operational Risk and Business Continuity
Organize departments to conduct risk and control self-assessments, maintain risk registers, key risk indicators, and control matrices.
Establish major incident management processes covering system interruptions, asset discrepancies, abnormal trading, account security incidents, and third-party service failures.
Lead or supervise business continuity, disaster recovery, and extreme scenario drills, and track issue rectifications.
Review key permissions, segregation of duties, system changes, manual operations, and high-risk approval processes.
Risk Systems and Data Governance
Promote the construction of risk rule engines, real-time alerts, risk dashboards, case management, and management reporting systems.
Develop risk data standards to ensure that order, transaction, account, wallet, and financial data are traceable, consistent, and complete.
Organize reviews, backtesting, effect analysis, and regular validation of risk models and rules.
Supervise false positives, missed reports, rule bypasses, and data quality issues, and drive product and technology teams to complete rectifications.
Regulation, Audit, and Governance
Cooperate with compliance officers, anti-money laundering officers, information security officers, and internal auditors to complete regulatory inspections and independent assessments.
Maintain complete records of risk policies, committee records, limit adjustments, major exceptions, and risk acceptance matters.
Follow up on issues identified in regulatory, audit, and risk assessment findings, clarifying responsible parties, rectification deadlines, and verification standards.
In the event of significant risk incidents, promptly escalate reports to the CEO, board of directors, and applicable regulatory contacts.
Team and Risk Culture
Build a risk management team, clarifying responsibilities for market risk, liquidity risk, operational risk, and risk data.
Promote the implementation of first-line responsibilities by business, product, technology, operations, finance, and compliance departments.
Organize risk training and case reviews to enhance risk awareness among management and key positions.
Establish performance and accountability mechanisms that do not suppress risk reporting.
Requirements
Bachelor's degree or above in finance, economics, mathematics, statistics, computer science, auditing, or related fields.
More than 10 years of risk management experience in financial institutions, securities trading platforms, fintech, or digital assets, including at least 5 years of team management experience.
Experience in digital asset trading platforms, stock exchanges, broker electronic trading, automated trading systems, or payment clearing platforms is preferred.
Familiar with enterprise risk management frameworks and methods for managing market, liquidity, credit, counterparty, and operational risks.
Understand the basic principles of order books, matching systems, market monitoring, customer asset custody, wallet architecture, on-chain trading, and account reconciliation.
Practical experience in building real-time risk indicators, limit systems, early warning systems, or risk data platforms.
Ability to independently articulate significant risk issues to the board of directors, senior management, audit institutions, and regulatory agencies.
Strong independent judgment, cross-departmental promotion, crisis management, and written expression skills.
Ability to use English as a working language; proficiency in Cantonese or Mandarin is a plus for Hong Kong business.
Possession of FRM, CFA, CISA, CRISC, or similar professional qualifications is preferred.
Preferred Qualifications
Experience in license applications, regulatory inspections, or rectification work for trading platforms or financial institutions;
Experience with extreme market conditions, concentrated withdrawals, counterparty defaults, or major system events;
Familiarity with SQL, Python, BI tools, or real-time risk data systems;
Experience in customer asset protection, custody risk, market monitoring, or liquidity stress testing;
Familiarity with the digital asset regulatory frameworks in Hong Kong, Singapore, the EU, or other major financial markets.