Technology & Cyber Risk Manager

zerohash moves money and digital assets for banks, brokerages and payment companies, on infrastructure that has to be secure and available 24/7. We're hiring our Technology & Cyber Risk Manager to be the independent voice on whether that infrastructure is as safe as the first line says it is.
This is a second-line role. You report to the Head of Risk, not the CISO, and you assess and challenge the controls protecting our custody systems, infrastructure and partner-facing platforms. You then turn that assessment into quantified risk views for senior leadership and the board. Our risk program is built on FAIR, so your work is measured in dollars and likelihoods, not red-amber-green.
You are one of the first people in this function. The risk register, the AI governance program and the vendor technical diligence process are all yours to build, and there is no established team or playbook to inherit.
This role is for someone who has taken a finding and pushed until the organization changed, including when engineering, a CISO or a launch date said no. If your past work was mostly producing assessments and registers, it is probably not the right fit.

• Build and own the cyber risk framework: methodology, risk appetite metrics and a FAIR scenario library. Produce independent risk views for senior leadership and the board.
• Keep the technology and cyber risk register live, not annual.
• Review and challenge first-line security work, including penetration test results, vulnerability metrics and control assessments, and issue independent risk opinions. Escalate and track findings until they are fixed.
• Partner with Engineering and Security to find risk across infrastructure, applications and AI systems.
• Build the AI governance program: use case registry, risk classification, and oversight of AI systems that touch end-user or transaction data.
• Provide independent technical risk assessments of custody-critical and security-critical vendors, as an input to the broader vendor risk program.
• Support regulatory and counterparty risk assessments as the second-line technology risk owner.
• Track emerging risks, including AI and model risk and cryptographic risk.

• 5+ years in technology risk, cyber risk or information security risk, including 2+ years in a dedicated second-line role at a bank, insurer or regulated fintech, in a function separate from the security team you reviewed. 7+ years is typical.
• A specific story of escalating a finding over real objections and getting the control implemented, not just documenting the gap.
• Experience reading first-line security work (pen test results, vulnerability metrics, control assessments) and forming an independent opinion that differs from the first line's.
• Quantitative risk modeling experience. FAIR is ideal. Other real modeling backgrounds, such as actuarial work, statistics or engineering, are welcome.
• Exposure to GSIB-caliber third-party technology assessments, as the assessor or as the vendor being assessed.
• Clear writing for boards and executives. Risk Committee and board reporting is a core deliverable.

None of these is a requirement. We will teach what you haven't done yet.

• Open FAIR or equivalent quantitative risk certification.
• AI or model risk governance: model inventories, use case classification, human-in-the-loop design.
• Familiarity with DORA ICT risk requirements or similar EU regulation.
• Experience at a digital asset, payments or crypto-adjacent regulated firm.
• Familiarity with post-quantum cryptography standards and cryptographic inventory frameworks.

• Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
• Vision & Dental Insurance (U.S. only)
• Chance to earn equity
• Maternity & Paternity leave (after 6 months)
• WeWork All Access Membership
• WFH Yearly Stipend
• L&D Yearly Stipend (after 6 months)

zerohash is the leading crypto and stablecoin infrastructure platform and the operating system for digital money, powering the next generation of financial services. Founded in 2017, zerohash enables banks, brokerages, fintechs, and payment companies to offer crypto trading, stablecoin payments, and tokenized assets without having to build or manage complex blockchain infrastructure on their own.
The zerohash platform supports three core pillars: Trade, Transact, and Tokenize. Through a single integration, customers can launch regulated crypto buy, sell, and custody services; enable 24/7 stablecoin-based funding, payouts, and settlement; and issue and manage tokenized assets with built-in compliance, risk controls, and reporting. By abstracting away technical, regulatory, and operational complexity, zerohash allows partners to treat digital assets as just another financial primitive: fast, programmable, and global.
zerohash is trusted by some of the world’s most recognized financial and consumer brands, including Interactive Brokers, Morgan Stanley, Stripe, Franklin Templeton, BlackRock, DraftKings, Gusto, Worldpay, Kalshi, One Pay, among others. Today, zerohash infrastructure supports millions of end users across brokerage, wealth, payments, and marketplace platforms globally.
The company is deeply regulated and compliance-first, operating across the U.S. and internationally with licenses and approvals that allow partners to enter crypto and stablecoins with confidence. zerohash has become a trusted partner for enterprises seeking to modernize financial products while meeting the highest standards for security, risk management, and regulatory oversight.
To date, zerohash has raised over $280 million in funding from a mix of leading venture firms and strategic investors, including Morgan Stanley, Interactive Brokers, SoFi, Point72 Ventures, Bain Capital Crypto, Lightspeed Venture Partners, and more.
zerohash has been featured in top-tier media outlets such as Bloomberg, CNBC, The Wall Street Journal, Financial Times, Reuters, Forbes, and CoinDesk, and its leadership team regularly contributes to global conversations on the future of payments, investing, and financial infrastructure.
At zerohash, we're building the infrastructure that makes digital money work securely, compliantly, and at global scale.

All zerohash employees are guided by the following characteristics and core principles:

• Independence/Ownership - An ability to work autonomously. Join zerohash, pitch ideas, and shape the work you do.
• Passion - We are innovating quickly and challenging the status quo. We want you to think big, be creative and ​make a difference every day.
• Collaborative - A good attitude and respect for others. We’re teammates, not co-workers. Everything we do is a shared success and equally a shared failure - we talk in terms of “we” not “me”.
• Initiative - An ability and passion for learning and asking questions. We will champion you, challenge you and push you to achieve your best - and we expect you to do the same.
• Empathy - An ability to listen, respect, and understand your co-workers, customers, and everyone you interact with no matter how different they are to you.
• Adaptability - An ability to respond quickly. We are in a fast-paced industry and so we expect you to be creative when solving a new problem and comfortable under pressure.
• Transparency - We believe that transparency is critical to empowering everyone to make the best decisions, both the company to its people and vice versa.
• Integrity - Integrity creates trust. As both an organization collectively and as individuals, it is our most valuable asset.

Follow us

Twitter

LinkedIn

Youtube

Blog

For candidates based in Colorado, please contact colorado-wages @zerohash.com to request compensation and benefits information regarding a particular role(s). Please include with your email the city you reside (or intend to reside in Colorado) and the title/link to the roles you're interested in.

**We’ve recently seen an increase in individuals impersonating zerohash recruiters to target job seekers. Please stay vigilant and keep the following in mind to ensure you are communicating with the real zerohash team:

• Verified Emails Only: Official outreach will only come from a  @zerohash.com email address.
• No Messaging Apps: We will never contact you via unsolicited text messages, WhatsApp, or Telegram.
• Official Applications: Only apply directly through our careers webpage (zerohash.com/careers) or zero-hash.breezy.hr.

See something suspicious?
If you want to verify an interview request or report a fake job posting or suspicious communication, please contact us immediately at talent @zerohash.com. This email is for fraud reports only. Candidate application inquiries will not be responded to.