Risk Specialist

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Crypto Risk team's mission is to identify, assess, and mitigate risk across Robinhood Crypto's products, operations, and platforms, protecting customers and the firm as the business scales. We work to deliver an excellent end-customer experience while upholding the safety and soundness of the business, so Robinhood can keep expanding access to crypto responsibly. The team partners with engineering, product, compliance, crypto operations, and enterprise risk to keep a consistent view of risk across the organization. It's an exciting time to join as we launch new products and expand our crypto offering! As a Risk Specialist, you will support the execution of our crypto risk management program, partnering closely with Crypto Risk leadership to monitor, assess, and report on risk across the business. You will play a hands-on role in building and running operational risk management, with a particular focus on technical and product risk. Day to day, you will assess new products and business changes for risk, run risk and control self-assessments, and prepare reporting for governance forums. You will translate technical risks into clear terms for colleagues outside engineering and work closely with partner teams across the business. Your work will help us keep pace with new launches while protecting customers and the firm! This role is based in our New York, NY and Menlo Park, CA offices, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll do • Facilitate Technical Risk Assessments (TRAs) and product risk assessments for new and existing crypto products, features, and business changes: document and assess risks and controls in collaboration with engineering and product owners. • Analyze incident and issue data to identify recurring root causes, control weaknesses and systemic themes; lead or support retrospectives on material events and translate findings into actionable risk insights for leadership. • Mature the operational loss tracking process, including loss definitions, intake, taxonomy, linkage to incidents and issues, and trend reporting. • Manage the issue management lifecycle, from identification and prioritization through remediation tracking and closure, ensuring issues are handled and escalated appropriately. • Perform and refresh Risk and Control Self-Assessments (RCSAs) and support Business Impact Analyses. • Monitor, refine and develop key risk indicators (KRIs), and prepare risk reporting for governance forums, including risk committee and board materials and escalations.Translate technical risks into clear, actionable terms for non-engineering stakeholders. • Translate technical risks into clear, actionable terms for non-engineering partners. • Partner with engineering, product, compliance, crypto operations, and enterprise risk teams to maintain a consistent view of risk across the organization. What you bring • 5+ years of experience in operational risk, enterprise risk management, or technology risk at a regulated financial services or crypto/fintech firm. (US-based ERM experience is preferred). • Hands-on experience facilitating risk assessments (RCSA, technology or product risk assessments, process risk assessments), including working directly with business, product and engineering owners. • Experience designing, running or materially contributing to business continuity or disaster recovery exercises, including scenario design, facilitation and after action reporting. • Experience performing root cause analysis or thematic analysis across incidents, with the ability to identify patterns and systemic issues from operational data. • Deep understanding of risk management methodologies, including risk taxonomies, control design, KRIs and issue management. • Technical exposure and comfort working in a technical environment, with the ability to read engineering design documents and incident post mortems and extract the risk. A software engineering background is not required. • Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical colleagues and present risk findings to stakeholders across the organization. • Detail oriented, with a proactive, independent approach to identifying and addressing risk. Bonus points • Direct experience in the cryptocurrency industry, with familiarity with crypto products, custody, and blockchain fundamentals. • A computer science or engineering degree, especially if you have built a career in risk, compliance, or another non-engineering role. • Experience building or operating an operational loss event program • Exposure to third party and vendor risk management, particularly for critical technology or custody providers. • Familiarity with operational resilience regulatory expectations such as NYDFS 23 NYCRR 500, DORA or MiCA. • Experience with governance, risk, and compliance (GRC) tools such as LogicGate or similar platfo