Operational Risk, Senior Associate

Applying to Paxos? Our only careers site is paxos.com/careers, and we only recruit via @paxos.com email. Details below.___

About Paxos

Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it.

We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world's leading financial institutions, like PayPal, Venmo, Mastercard, Interactive Brokers and Charles Schwab.

About the team

The Operational Risk team is part of Paxos Risk Management. We set and run the framework Paxos uses to identify, assess and monitor operational risk across a business supervised by financial regulators in the US and abroad. We work with product, engineering, compliance and operations teams on new products, vendors and blockchain integrations, and we support the firm’s audits and regulatory exams.

About the role

As an Operational Risk, Senior Associate, you’ll own core parts of our risk and control framework: running Risk and Control Self-Assessments, keeping the risk register current and helping teams close control gaps. You’ll prepare evidence for audits and regulatory exams, assess the risk in new products, vendors and blockchains before launch, and bring risk themes to senior leadership.

What you'll do

• Run Risk and Control Self-Assessments with first-line business and engineering owners, and rate risks consistently using Paxos’s severity and likelihood methodology

• Maintain the enterprise process, risk, and control inventory and the firm’s process, risk and control inventories

• Oversee the implementation of an issues management program. Identify control gaps, document them with owners and remediation dates, and track them to closure

• Assess operational risk in new products, vendors, blockchains and regulatory changes before they reach production

• Prepare evidence for internal audits, external audits and regulatory exams, and respond to examiner requests

• Design and run independent monitoring and testing of key controls

• Report risk themes and key risk indicators to senior leadership and risk committees

About you

• 5-7 years in operational risk at a financial services institution, a financially regulated company, or a consultancy or regulator that built or enforced operational risk requirements

• Hands-on experience running Risk and Control Self-Assessments, maintaining a risk register and rating risks with a defined severity and likelihood methodology

• Working knowledge of OCC expectations, Basel operational risk principles, SOC 2 and third-party risk guidance

• Experience preparing audit and regulatory exam evidence and answering examiner questions directly

• Clear, concise writing and a track record of getting business and engineering owners to agree on ratings and remediation plans

• Comfort using AI tools to speed up research, drafting and analysis

• Bonus: experience building independent monitoring and testing programs, building process, risk and control inventories, or working in blockchain or crypto

Important Notice for Paxos ApplicantsFraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.

To verify a legitimate Paxos opportunity:

• Our only official careers site is paxos.com/careers

• We only use @paxos.com email addresses

• We never ask for payment or financial details to apply, interview, or work here

• For technical roles, we do not perform a coding interview without prior screening by our engineering team

Thanks for your interest in Paxos!