Risk Specialist, Robinhood

• We're looking for bold thinkers
• Sharp problem-solvers
• Builders who are wired to make an impact
• 5+ years of experience in operational risk, enterprise risk management, or technology risk at a regulated financial services or crypto/fintech firm. (US-based ERM experience is preferred)
• Hands-on experience facilitating risk assessments (RCSA, technology or product risk assessments, process risk assessments), including working directly with business, product and engineering owners
• Experience designing, running or materially contributing to business continuity or disaster recovery exercises, including scenario design, facilitation and after action reporting
• Experience performing root cause analysis or thematic analysis across incidents, with the ability to identify patterns and systemic issues from operational data
• Deep understanding of risk management methodologies, including risk taxonomies, control design, KRIs and issue management
• Technical exposure and comfort working in a technical environment, with the ability to read engineering design documents and incident post mortems and extract the risk. A software engineering background is not required
• Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical colleagues and present risk findings to stakeholders across the organization
• Detail oriented, with a proactive, independent approach to identifying and addressing risk

Desirable

• The Crypto Risk team's mission is to identify, assess, and mitigate risk across Robinhood Crypto's products, operations, and platforms, protecting customers and the firm as the business scales
• We work to deliver an excellent end-customer experience while upholding the safety and soundness of the business, so Robinhood can keep expanding access to crypto responsibly
• The team partners with engineering, product, compliance, crypto operations, and enterprise risk to keep a consistent view of risk across the organization
• It's an exciting time to join as we launch new products and expand our crypto offering!
• As a Risk Specialist, you will support the execution of our crypto risk management program, partnering closely with Crypto Risk leadership to monitor, assess, and report on risk across the business
• You will play a hands-on role in building and running operational risk management, with a particular focus on technical and product risk
• Day to day, you will assess new products and business changes for risk, run risk and control self-assessments, and prepare reporting for governance forums
• You will translate technical risks into clear terms for colleagues outside engineering and work closely with partner teams across the business
• Your work will help us keep pace with new launches while protecting customers and the firm!
• Facilitate Technical Risk Assessments (TRAs) and product risk assessments for new and existing crypto products, features, and business changes: document and assess risks and controls in collaboration with engineering and product owners
• Analyze incident and issue data to identify recurring root causes, control weaknesses and systemic themes; lead or support retrospectives on material events and translate findings into actionable risk insights for leadership
• Mature the operational loss tracking process, including loss definitions, intake, taxonomy, linkage to incidents and issues, and trend reporting
• Manage the issue management lifecycle, from identification and prioritization through remediation tracking and closure, ensuring issues are handled and escalated appropriately
• Perform and refresh Risk and Control Self-Assessments (RCSAs) and support Business Impact Analyses
• Monitor, refine and develop key risk indicators (KRIs), and prepare risk reporting for governance forums, including risk committee and board materials and escalations.Translate technical risks into clear, actionable terms for non-engineering stakeholders
• Translate technical risks into clear, actionable terms for non-engineering partners
• Partner with engineering, product, compliance, crypto operations, and enterprise risk teams to maintain a consistent view of risk across the organization