Blockchain Risk Management, Director

About the Role

We are looking for an experienced technology risk professional to join our client’s expanding team, responsible for the various risks in the blockchain/ Web3 ecosystem, helping to navigate the complex intersection of blockchain technology, regulatory change, and risk management.

This is a great opportunity to move beyond traditional technology risk and into one of the most dynamic and fast-moving sectors in finance. You will have a platform to influence and build a career at the forefront of the digital economy.

Key Responsibilities

1. Lead and manage complex projects focused on blockchain and virtual asset risk.
2. Assess risks including those related to wallet infrastructure, private key management, consensus mechanisms, and token governance, translating technical understanding into practical control frameworks.
3. Help design internal control structures and governance protocols aligned with the expectations of regulators like the HKMA and SFC, as well as international standards.
4. Stay ahead of emerging trends like real-world asset (RWA) tokenization and DeFi.
5. Develop and refine risk assessment methodologies and toolkits for the virtual asset space.
6. Mentor and develop high-performing team, fostering deep expertise in blockchain technology and risk management.

Candidate Profile

1. Relevant experience in financial services, with a strong background in technology risk, IT audit or cybersecurity. This experiencemust include direct exposure to blockchain, cryptocurrencies, or virtual assets.
2. A deep, demonstrable understanding of the inherent risks of blockchain technology. This includes practical knowledge of
3. Wallet & Key Management: The operational and security risks of hot/cold wallets, multi-signature setups, and private key custody.
4. Token & Protocol Risk: The ability to assess risks associated with different token standards and blockchain protocols.
5. Governance Frameworks: Experience in designing or assessing governance models for decentralized systems or digital asset operations (acknowledging that this is an evolving field).
6. Must possess a strong technical understanding of blockchain fundamentals, cryptocurrencies, tokenization, and the broader Web3 ecosystem to credibly engage with both technical and non-technical stakeholders.
7. Regulatory Knowledge: Familiarity with the Hong Kong regulatory landscape for virtual assets (HKMA, SFC guidelines) and international crypto compliance frameworks.
8. Standards & Frameworks: Experience with industry-standard control frameworks (e.g., COBIT, ISO 27001) and familiarity with attestation reports (e.g., SOC reports) is highly advantageous.
9. Qualifications: A Bachelor’s or Master’s degree in a relevant field (Finance, Accounting, Computer Science, Information Systems). Professional certifications such as CISA, CISSP, or CISM are strongly preferred.
10. Soft Skills: Excellent leadership and communication skills, with a proven ability to manage teams, coach junior professionals, and build expertise in emerging technology risks.

Less experienced candidates will be considered for a more junior position.

How to apply

If you are interested in discussing this role further, please apply for the position or contact Christy Zhang at [email protected] (Job code 73814).