Risk Officer

Your RolepAs the Risk Officer, you're doing the analytical work that keeps Blockrise's risk framework operational and credible. You will work across risk domains and help the company grow hands‑on. This is not a head‑of‑risk role. You are the person who makes sure the analytical work gets done. /pbrVergroot uw kans om de sollicitatieronde te bereiken door de volledige functieomschrijving te lezen en snel te solliciteren.brpThe role gives you direct exposure to regulatory risk management at a growing digital asset firm, with real scope, real responsibility, and no bureaucratic distance from the work. /pWhat you'll doulliMaintain the risk register.Keep entries current, track status, and flag emerging risks as they surface. /liliExecute risk assessments.Run periodic and event-driven assessments across operational and ICT risk domains. Apply quantitative and qualitative methodologies and document findings clearly. /liliPrepare Risk Committee materials.Pack the agenda, write the risk updates, and make sure the committee has what it needs to make decisions. /liliTrack treatment plans.Follow risk treatment plans from agreement through to completion. Chase owners, track progress, and elevate where plans are slipping. /liliSupport regulatory reporting.Support regulatory reporting cycles to DNB and AFM. Gather evidence, structure submissions, and flag where gaps need addressing. /liliDevelop risk scenarios.Play a leading role in developing risk scenarios, controls, and mitigations across our risk frameworks to support operations, product development, and business strategy. /liliBuild risk awareness.Design and run risk awareness campaigns and training for Blockrise staff so a risk‑aware culture is sustained in practice, not just on paper. /liliContribute to DORA work.Contribute to the ongoing DORA implementation, particularly the ICT risk management requirements under Articles 5 to 15. /li /ulWhat you bringulli2 to 4 years of experience in risk management, preferably at a regulated financial institution: a bank, payment institution, investment firm, or CASP. /liliWorking knowledge of risk assessment methodologies, both quantitative and qualitative, including likelihood and impact scoring and defining treatment plans. /liliFamiliarity with at least one of: DORA, MiCAR, Wft, Wwft, or comparable EU financial regulation. /liliA clear understanding of the three lines of defence model and where a second‑line risk analyst sits within it. /liliExperience maintaining risk registers and producing risk reporting for management or boards. /liliAn analytical mindset: comfortable with data, identifying patterns, and turning findings into recommendations someone can act on. /liliStrong written English. Dutch is a plus. /liliBachelor's degree in finance, economics, risk management, or a related field. FRM, PRM, or working toward one is a plus but not required. /liliComfortable in a fast‑paced scale‑up where processes are still being built, and the expectation is that you help build them. /li /ulNICE TO HAVEulliExperience with crypto‑assets, custody, or DeFi risk. /liliFamiliarity with Vanta or similar GRC tooling. /liliExperience with ICT risk assessments under DORA Articles 5 to 15. /li /ulWhat we offerulliCompetitive monthly salary EUR 3. based on full‑time employment depending on your experience. /liliUp to EUR 300 to invest in tools that improve your workflow (headphones, keyboards, etc.) /liliMonthly Bitcoin pension of EUR 50 /lili25 vacation days /liliOption to participation in our share certificate program /liliTravel reimbursement or NS Business Card for your commute /liliOpportunities for hybrid work, though in‑person collaboration is highly valued /liliPaid training and learning resources to keep your skills sharp and up to date /liliA fully stocked pantry and fridge at the office, with meals, snacks, and drinks included /liliDiscounted access to Urban Sports Club and LeaseBike plans /li /ulContact UspWe expect to get back to you within one week. We consider every application regardless of your background and beliefs. After an introduction, an assignment may be part of the application process. /ppWe will delete your application data within 30 days when your application is no longer under consideration. xgiwjmb /ppUnsolicited recruitmentWe do not accept unsolicited CVs from recruiters or employment agencies. We will not consider or agree to payment of any referral compensation or recruiter fee relating to unsolicited CVs. /pbr