The Risk Head for Investor Services Digital Assets will be a strategic leader responsible for designing, implementing, and overseeing a comprehensive risk management framework tailored to our digital asset products and operations. This role requires deep expertise in traditional financial risk management principles combined with a profound understanding of blockchain technology, cryptocurrencies, and the evolving regulatory landscape of digital assets. The Risk Head will act as a primary advisor to senior management, ensuring all digital asset activities align with regulatory requirements, internal policies, and the company's risk appetite.

Key Responsibilities

Strategic Leadership & Framework Development

• Lead the design, implementation, and continuous improvement of the digital assets risk management program, balancing innovation with commercial viability within the risk framework.
• Develop, maintain, and continuously enhance the Digital Assets Risk Management Framework, including policies, standards, procedures, and controls, ensuring alignment with current regulatory expectations.
• Serve as the primary First Line of Defense contact and risk oversight lead for all digital asset initiatives within Investor Services.
• Evaluate and challenge digital asset use cases, models, and emerging technologies from a risk and compliance perspective.

Regulatory Compliance & Oversight

• Act as the primary subject matter expert on regulations such as the Bank Secrecy Act (BSA), Anti-Money Laundering (AML), OFAC, FinCEN guidelines, and other relevant financial regulations pertaining to digital assets.
• Develop, implement, and maintain a robust and effective risk and compliance program tailored to the unique risks of digital assets.
• Oversee transaction monitoring systems and processes to detect and report suspicious activities (SARs) in accordance with regulatory requirements.
• Ensure the robust implementation and ongoing effectiveness of Know Your Customer (KYC) and Customer Due Diligence (CDD) processes.
• Stay abreast of emerging regulatory trends, enforcement actions, and industry best practices in the crypto compliance space.
• Serve as the primary liaison for regulatory examinations, internal audits, and external assessments related to compliance, coordinating responses and remediation efforts.

Risk Assessment & Management

• Conduct regular risk assessments specific to digital asset activities, identifying potential vulnerabilities, and implementing effective mitigation strategies.
• Design and implement market risk management strategies and policies to identify, measure, and manage market-related risks, including the unique volatility, liquidity, regulatory, and smart contract risks of digital/on-chain assets.
• Integrate digital risks into broader Services risk management frameworks, understanding inter-relationships with second line of defense risk functions.
• Ensure appropriate digital controls, including patches for vulnerabilities in critical assets, and align with IT compliance frameworks such as NIST, COSO, COBIT, and ISO 27001.
• Identify risk levels and associated controls using quantitative and qualitative techniques.

Stakeholder Collaboration & Communication

• Partner with key stakeholders (Product, Operations, Technology, Data, Legal, Compliance, Audit,) to align digital asset risk management with enterprise objectives.
• Report on digital asset risk posture to senior leadership across the business and firm.
• Provide expert advice and guidance to senior management and various departments on compliance matters.
• Foster a strong risk culture, promoting accountability and effective risk management at all levels.

Team Leadership

• Build, mentor, and lead a high-performing risk and compliance team, fostering a collaborative and growth-oriented environment.
• Oversee all people management functions for the team.

Qualifications

Experience

• Minimum of 10-15+ years of progressive experience in risk management, audit, model governance, or AI/Digital Asset development within a large financial institution, regulatory body, or related field.
• Demonstrable experience (3-5+ years) in the digital asset and blockchain industry, with a deep understanding of tokens, staking, digital funds, crypto custody, DeFi, NFTs, stablecoins, and tokenized assets.
• Proven expertise in designing and managing BSA/AML programs within regulated financial institutions.
• Experience working with regulators (e.g., NYDFS, OCC, SEC, MAS) including new product non-objection submissions and responding to regulatory inquiries.
• Track record of influencing change and delivering results in a dynamic, multinational organization.
• Experience in developing and implementing compliance policies, procedures, and internal monitoring controls.

Skills & Knowledge

• Deep understanding of blockchain technologies, regulatory expectations and enterprise risk principles.
• Strong analytical, quantitative, and problem-solving abilities with a keen eye for detail.
• Familiarity with IT compliance frameworks such as NIST, COSO, COBIT, and ISO 27001.
• Excellent communication (written and verbal), presentation, and interpersonal skills, with the ability to articulate complex regulatory concepts to diverse audiences, including executives and shareholders.
• Proven leadership and team management capabilities.
• Ability to work independently, manage multiple priorities, and thrive in a fast-paced, evolving environment, comfortable with ambiguity and uncertainty.
• Proficiency in data analysis techniques and visualization tools (e.g., Tableau) is a plus.
• SQL and Python programming experience are a plus.
• Strong project management skills.

------------------------------------------------------

Job Family Group:

Risk Management

------------------------------------------------------

Job Family:

Risk Functional Management

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Analytical Thinking, Credible Challenge, Escalation Management, Governance, Policy and Procedure, Policy and Regulation, Regulatory Compliance, Risk Controls and Monitors, Risk Identification and Assessment, Stakeholder Management.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

 

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.