RISK OFFICER / HEAD OF RISK – VARA-REGULATED VASP

We are looking for an experienced Risk Officer / Head of Risk to join a VARA-regulated Virtual Asset Service Provider (VASP) in Dubai.This is a senior risk management role requiring someone who understands that risk within a regulated virtual asset business goes far beyond maintaining a risk register.The successful candidate will be responsible for building, maintaining and continuously strengthening the organisation’s enterprise-wide risk management framework across operational, financial, technology, cybersecurity, custody, counterparty, liquidity, market, outsourcing and regulatory risks.THE ROLEYou will take ownership of the VASP’s risk management framework and provide independent oversight of the organisation’s overall risk exposure.Key responsibilities will include:🔹 Develop, implement and maintain the organisation’s Enterprise Risk Management Framework (ERM) in alignment with VARA requirements.🔹 Establish and continuously review the organisation’s Risk Appetite Framework and Risk Appetite Statement.🔹 Maintain the enterprise Risk Register, including risk ownership, inherent risk, controls, residual risk, mitigation actions and escalation thresholds.🔹 Develop and operate Risk & Control Self-Assessment (RCSA) methodologies across business functions.🔹 Define, monitor and report Key Risk Indicators (KRIs) and risk limits.🔹 Prepare regular risk reporting and dashboards for Senior Management and the Board.🔹 Provide independent challenge to business, operational and technology teams regarding material risk exposures.🔹 Conduct risk assessments relating to:

• Operational risk
• Market risk
• Liquidity risk
• Credit and counterparty risk
• Custody and safeguarding risk
• Wallet and private-key management risk
• Technology and cybersecurity risk
• Information security risk
• Third-party and outsourcing risk
• Business continuity and operational resilience
• Fraud risk
• Concentration risk
• Client asset risk
• New product and service risk
• Regulatory and compliance-related risk🔹 Conduct New Product Risk Assessments before the introduction of new virtual assets, products, services, counterparties or material changes to the operating model.🔹 Review risks associated with exchanges, liquidity providers, custodians, banking partners, technology providers and other critical third parties.🔹 Establish appropriate third-party and outsourcing risk management controls, including due diligence, risk classification and ongoing monitoring.🔹 Work closely with Compliance, MLRO, Information Security, Technology, Finance, Operations and Senior Management while maintaining the independence of the risk function.🔹 Support the development and testing of Business Continuity, Disaster Recovery and Operational Resilience arrangements.🔹 Participate in scenario analysis, stress testing and assessment of severe but plausible risk events.🔹 Establish appropriate processes for risk incidents, breaches, control failures, root-cause analysis, remediation tracking and escalation.🔹 Assess emerging risks arising from virtual assets, blockchain infrastructure, smart contracts, custody models, DeFi exposure, APIs and digital-asset market infrastructure.🔹 Ensure material risks and breaches are escalated appropriately to Senior Management and the Board.🔹 Support regulatory examinations, audits, supervisory reviews and information requests relating to risk management.🔹 Maintain appropriate documentation and evidence demonstrating the effective operation of the risk management framework.🔹 Monitor changes to the regulatory environment and evaluate their impact on the organisation’s risk profile.VARA & REGULATORY KNOWLEDGEThe ideal candidate should have a strong working understanding of the VARA regulatory framework, particularly:
• VARA Compliance and Risk Management Rulebook
• VARA Company Rulebook
• VARA Technology and Information Rulebook
• VARA Market Conduct Rulebook
• Relevant activity-specific VARA Rulebooks
• UAE AML/CFT regulatory environment
• Governance and Board reporting requirements
• Operational resilience and business continuity
• Technology and cybersecurity risk
• Virtual asset custody and safeguarding arrangementsPrevious direct experience working within a VARA-regulated VASP or VARA licensing environment is highly preferred.EXPERIENCE & QUALIFICATIONSWe are looking for candidates with:✅ Minimum 5+ years of relevant risk management experience, preferably within banking, financial services, payments, FinTech, digital assets or virtual assets.✅ Strong preference for candidates with direct experience in virtual assets, crypto exchanges, custody, brokerage, payments or regulated FinTech.✅ Experience developing and operating enterprise risk management frameworks.✅ Strong knowledge of risk appetite, RCSA, KRIs, risk registers, incident management and Board-level risk reporting.✅ Experience dealing with regulators, external auditors, internal auditors and senior stakeholders.✅ Strong understanding of the Three Lines Model and independence of the risk function.✅ Ability to translate regulatory requirements into practical controls and operating procedures.✅ Strong analytical, documentation and communication skills.✅ Ability to independently challenge Senior Management and business functions when required.✅ Bachelor’s degree in Finance, Risk Management, Economics, Business, Accounting, Law or a related discipline.Professional qualifications such as FRM, PRM, CFA, ICA or equivalent would be advantageous but are not mandatory.DIGITAL-ASSET EXPERIENCE IS IMPORTANTWe are particularly interested in candidates who understand risks associated with:🔐 Hot and cold wallet architecture 🔐 Private-key management 🔐 MPC and custody infrastructure 🔐 Blockchain transactions 🔐 Digital asset exchanges 🔐 Counterparty and liquidity-provider exposure 🔐 Stablecoins 🔐 Token listing and asset onboarding 🔐 Smart contracts 🔐 Blockchain analytics 🔐 APIs and third-party integrations 🔐 Market volatility and liquidity 🔐 Transaction monitoring 🔐 Operational resilience of digital-asset infrastructureThis is not purely a traditional banking risk role.We need someone who can apply institutional risk-management principles to the realities of operating a regulated virtual asset business.WHO WE ARE LOOKING FORWe want someone who can walk into a Board meeting and clearly answer:What are our biggest risks?How exposed are we?Are our controls effective?What is outside our risk appetite?What needs immediate management attention?You should be comfortable operating independently, challenging assumptions and working directly with senior leadership.LOCATION📍 Dubai, United Arab EmiratesCandidates already based in the UAE will be preferred.APPLYIf you have genuine experience in risk management within regulated financial services, FinTech or virtual assets, we would like to hear from you.Please apply through LinkedIn with your CV.When applying, please clearly highlight any experience involving:
• VARA
• Virtual Assets / VASPs
• Digital Asset Exchanges
• Custody
• FinTech
• Payments
• DFSA / FSRA / CBUAE or other financial regulators
• Enterprise Risk ManagementCandidates with direct VARA/VASP experience are strongly encouraged to apply.