Operational Risk Senior Associate, Gemini

• Bachelor's degree in finance, economics, business, or a related field
• 5+ years of experience in operational risk, enterprise risk management, or internal audit, preferably in the crypto industry or fintech/financial services
• Strong understanding of ORM principles, frameworks (e.g., Basel II/III, COSO, ISO31000), and risk taxonomies
• Familiarity with governance, risk, and compliance (GRC) tools and data management systems
• Analytical mindset with strong problem-solving skills and attention to detail
• Effective communication and interpersonal skills to work across business lines and senior management

Desirable

• At Gemini, our Risk function plays a critical role in proactively identifying, assessing, responding to, and communicating Gemini’s exposure, both internally and externally. Gemini is building a robust second line of defense in a first-of-its kind industry; our goal: safeguard Gemini and our users so that we can continue to empower the individual through crypto
• The Operational Risk Senior Associate is responsible for supporting and maintaining the Operational Risk Management (ORM) Framework
• This role supports the enterprise-wide identification, assessment, mitigation, monitoring, and reporting of operational risks
• The Operational Risk Senior Associate works in close partnership with business departments, compliance, audit, and other stakeholders to uphold a strong risk culture and ensure effective risk management practices across the organization
• Framework Execution: Implement and support the firm-wide Operational Risk Management Framework, ensuring alignment with regulatory expectations and internal standards
• Risk Assessment Oversight: Lead and facilitate Risk and Control Self-Assessments (RCSAs) across business units; and analyze risk profiles and ensure timely identification of emerging risks, and ad hoc support of any other risk assessments, as needed
• Control Evaluation: Review and challenge the design and effectiveness of controls; work with business lines to identify key controls and areas requiring enhancement
• Incident and Loss Event Management: Oversee the collection, analysis, and reporting of operational loss data and incidents; support root cause analysis and help design action plans to prevent recurrence, inclusive of conducting of post mortem analysis, when necessary. Additional analysis and QA of Incident data
• Metrics and Reporting: Monitor Key Risk Indicators (KRIs) and other risk metrics; prepare periodic risk dashboards and reports for senior management and governance committees. Proposals for new KRIs or threshold modification, in partnership with ERM
• Third-Party Risk: Support risk oversight and monitoring activities related to third-party vendors, particularly for critical outsourced activities
• Policy and Governance: Assist in maintaining operational risk management policies, procedures, and guidelines. Ensure they are embedded in business practice
• Continuous Improvement: Contribute to the evolution of the ORM framework, including exploring advanced measurement techniques (e.g., scenario analysis, operational risk capital modeling)
• Token Listing Risk Assessments: Conduct and support comprehensive risk assessments for new token listings. Oversee the end-to-end planning and management of token launches, including governance, stakeholder communication, and pipeline tracking and reporting