Senior Risk Management / GRC Manager, Zero Hash
Plus chance to earn equity
Digital assets-as-a-Service
Posted today
Digital assets-as-a-Service
101-200 employees
Posted today
Plus chance to earn equity
101-200 employees
Company mission
To enable businesses to easily create amazing crypto products, unlocking digital assets for everyone, everywhere.
Role
Who you are
- This role requires a deep technical understanding of IT security measures and risk management practices to ensure the security and integrity of the company's systems and data, align operations with regulatory requirements, and mitigate IT risks
- Prior experience in a Risk Management / GRC leadership role is required
- Prior experience with the Digital Operational Resilience Act (DORA) is required
- Professional certifications such as CISSP, CISM, CRISC or CISA is a plus
- Proven experience in technical IT security, governance, risk management, and compliance roles
- Strong technical knowledge of IT governance frameworks, regulatory requirements, and best practices
- Experience with SOC 1, SOC 2, and ISO 27001 is strongly preferred
- Strong analytical and problem-solving skills with attention to detail
- Ability to manage multiple technical projects and priorities in a fast-paced environment
- Experience with technical security and GRC tools and software
- Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams
- Proficiency in risk assessment methodologies and tools
- Experience with IT audit processes and procedures
- Knowledge of other relevant laws and regulations such as GDPR, NYDFS Part 500, etc. is a plus
What the job involves
- The Governance, Risk and Compliance (GRC) Manager will be responsible for developing, implementing, and maintaining the organization’s security and governance, risk management, and compliance programs within the Risk Function of zerohash in Europe, with a particular focus on DORA compliance
- Provide day to day ownership and management of the company’s compliance with DORA
- Stay current on and compliant with relevant laws, regulations, and industry standards related to IT security and compliance such as DORA, GDPR, NY DFS Part 500, and others
- Manage technical compliance programs and initiatives
- Conduct compliance assessments to evaluate adherence to regulatory requirements and internal policies
- Prepare compliance reports and documentation for regulatory audits and review
- Develop and maintain governance policies, procedures, and standards in alignment with industry best practices and regulatory requirements
- Develop and maintain governance frameworks, technical policies, and procedures
- Manage governance frameworks such as ISO 27001, SOC 1, SOC 2, etc., in coordination with global zerohash security and audit staff, to ensure effective IT governance across the organization
- Coordinate with key stakeholders to establish governance committees and facilitate regular meetings to review and update policies and procedures
- Facilitate governance structures and technical committees
- Develop and implement advanced IT security strategies and solutions
- Manage and monitor security systems, including firewalls, intrusion detection systems, and endpoint protection
- Conduct detailed security assessments, vulnerability scans, and penetration tests
- Respond to and resolve complex security incidents, including conducting forensic investigations and root cause analysis
- Ensure the implementation of security controls and best practices across IT systems and networks
- Identify, assess, and prioritize technical risks, in coordination with the global Risk function
- Develop and implement risk management strategies and technical mitigation plans
- Conduct regular technical risk assessments and identify potential threats and vulnerabilities within zerohash infrastructure
- Develop risk mitigation strategies and action plans to address identified risks
- Monitor and track risk mitigation activities to ensure timely resolution and compliance with established policies and procedures
- Monitor and report on the status of technical risks and control effectiveness
- Develop, implement, and maintain technical security policies and procedures
- Ensure technical policies and procedures are communicated and enforced across the organization
- Oversee the technical incident management process, in coordination with global zerohash response teams
- Ensure timely identification, reporting, and resolution of technical security incidents
- Conduct root cause analysis and implement corrective technical actions
- Develop and deliver technical security, governance, risk, and compliance training programs
- Collaborate with the security team to develop and deliver training programs on governance, risk management, and compliance
- Promote a culture of security awareness and compliance throughout the organization
- Collaborate with internal and external stakeholders, including auditors, regulators, and technical teams
- Provide technical guidance and support to management and staff on security and GRC-related matters
- Prepare and present regular technical reports on security, governance, risk, and compliance to senior management and the board of directors
- Maintain accurate technical records and documentation
Our take
Zero Hash provides embedded crypto solutions, including for risk and settlement, post-trade management, compliance, liquidity, and asset management. This breadth of scope, in combination with Zero Hash’s API-driven business model, means its clients can access a competitively broad range of crypto products; and get them up and running competitively fast.
Zero Hash's gamble is that an increasing number of companies will be looking to offer crypto products to their customers, and it's being firmly vindicated. NFT minting, trading, and ownership has skyrocketed over recent years, and crypto trading has broken into the mainstream.
Despite the boom in crypto trading, November 2022's FTX crash has given way to a more cautious market. Internal controls, governance, and closer attention from regulatory bodies have somewhat slowed the pace of trading.
As a global exchange, though, Zero Hash is carving out a role for itself as a watchdog and overseer. Crypto firms such as Juno are turning to Zero Hash to improve the user experience. With some other major players like MoneyLion, DraftKings, and MoonPay under its belt, Zero Hash has risen above the tumult, reaching unicorn status after an impressive 2025 funding round.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
28% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2025
$104m
SERIES D
Jan 2022
$105m
SERIES D
Total funding: $273.9m
Company benefits
- Excellent healthcare + dental + vision coverage. Zero Hash covers roughly 100% of employee premiums
- 33 Days Flexible PTO
- Equity ownership
- WFH setup
- Learning & Development Stipend
- Mental health and wellness program
Company HQ
Fulton Market District, Chicago, IL
Leadership
Edward Woodford
(Co-Founder & CEO)Previously also the Co-founder and CEO of How App and Seed CX.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 17 more jobs at Zero Hash