Head of Risk

About the Role: One owner for the entire risk function at a fintech operating between crypto and traditional payments. You will own enterprise risk end to end, including the risk framework and appetite, DORA and operational resilience, B2B partner risk, fraud risk appetite, capital adequacy, and risk gating for new products. It is an individual contributor role reporting directly to the CEO, with a seat on the leadership team. You will work daily with Compliance, Legal, Finance, Technology, and the B2B Partnerships team. The foundations are in place (risk register, appetite framework, DORA workstreams). The function needs an owner who proactively surfaces risk, takes a position, and stands behind it. What You'll Do: Enterprise Risk & Governance: Own the enterprise risk framework: risk register, risk appetite statement, taxonomy, and escalation policy. Run the risk reporting cycle: structured updates to the CEO and leadership, plus regulatory risk reporting. Chair or co-chair the risk committee: agenda, cadence, participants, and decision authority. Build risk ownership across business units. DORA & Operational Resilience: Own the DORA ICT risk framework and lead the Register of Information workstream ahead of the 2027 submission window. Own business continuity and disaster recovery planning. Own third-party and vendor risk: critical providers, concentration risk, and exit planning. Own the PSD2 operational resilience framework, including 4-hour major incident reportin