About the Role
You will play a key role in implementing and managing the enterprise risk management framework for First Answer Custody FZE (brand name: Chainberg). You will identify, assess, monitor, and mitigate risks across operational, regulatory, and technology domains, ensuring full compliance with VARA's Risk Management and Compliance Rulebooks. You will maintain the entity's Risk Appetite Statement, Risk Register, and Risk Control Self-Assessments, and help design risk policies and internal controls. You will conduct risk reviews for new products, services, and geographies, support scenario analysis, stress testing, and business continuity planning, monitor key risk indicators, and prepare periodic risk reports for senior management and the Board Risk Committee. You will collaborate closely with Compliance, Product, Technology, Legal, and Operations to embed a strong risk culture, and advise business units on emerging risks and mitigation strategies. You will also ensure regulatory obligations under the VARA Risk Management Rulebook are implemented and documented, and contribute to regulatory filings and reports.
Requirements
- 7 - 10 years of experience in enterprise risk management, operational risk, or internal controls in financial services, fintech, or digital asset firms
- Strong understanding of the UAE regulatory environment; experience with VARA, ADGM or DFSA is highly desirable
- Knowledge of risk frameworks (e.g., ISO 31000, COSO ERM), governance principles, and control testing
- Background in digital asset or technology risk is a strong advantage
- Bachelor's or Master's degree in Finance, Risk, Business, or related field; certifications like FRM, IRM, or CRISC preferred
Responsibilities
- Support the implementation of the Risk Management Framework (RMF) in line with VARA's requirements
- Maintain and periodically update the Risk Appetite Statement, Risk Register, and Risk Control Self-Assessments (RCSAs)
- Assist in the design and documentation of risk policies, procedures, and internal controls
- Identify and assess risks across operational, cyber, regulatory, vendor, financial, and third-party areas
- Conduct risk reviews for new products, services, and geographies
- Support scenario analysis, stress testing, and business continuity planning (BCP)
- Monitor key risk indicators (KRIs), control effectiveness, and early warning signals
- Prepare and present periodic risk reports to senior management and the Board Risk Committee
- Support internal and external audits, regulatory inspections, and VARA submissions
- Work closely with Compliance, Product, Technology, Legal, and Operations to embed a strong risk culture
- Participate in Risk & Control Self-Assessment (RCSA) workshops and lead issue remediation tracking
- Advise business units on emerging risks and risk mitigation strategies
- Ensure all risk-related obligations under the VARA Risk Management Rulebook are implemented, tested, and documented
- Contribute to the development of regulatory filings and reports required by VARA
- Stay current on UAE and global risk management expectations in the digital asset ecosystem