Senior IT Risk

About us
First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.
Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.
About us
First Digital is a digital asset focused trust, custody, financial technology company at the vanguard of the emerging digitalization of assets, where the full value for your worldly assets can finally unite like other digital data. Our best-in-class custodian and near-banking layer enables previously unattainable options for payments, asset management and access to products that can help enhance financial inclusion.
Our infrastructure – including FDUSD, Asia’s 1st home grown blockchain-based USD stable-coin – Developed to help economies, institutions and developers gain access to technology breakthroughs and capitalize on the digital evolution of finance, trust, and technology.
Overview
We are seeking an experienced IT Risk to join our dynamic team and ensure the security and resilience of our platform, with a strong focus on the risks specific to DeFi and Web3. As the IT Risk Specialist, you will have a great opportunity to work in a rapidly growing fintech company at the forefront of blockchain and Web3 innovation, an area that has drawn increasing regulatory attention around the world. This role will be central to how we manage technical and security risk as our on-chain and DeFi footprint grows.
Responsibilities
Identify, assess, and monitor risks specific to DeFi protocols, smart contracts, and on-chain activity, including exploits, protocol vulnerabilities, and counterparty/custody risk.
Review and assess the security posture of smart contracts and blockchain infrastructure the company interacts with or builds on.
Track emerging Web3 attack vectors (bridge exploits, oracle manipulation, flash loan attacks, etc.) and translate them into actionable risk controls.
Actively participate in product discussions, providing risk and security input as new blockchain/DeFi features and integrations are developed.
Partner with engineering and product teams to embed security-by-design principles into Web3-related builds.
Develop and implement IT risk management strategies, policies, and procedures.
Identify potential IT risks related to information security, data privacy, technology infrastructure, and operational processes.
Conduct risk assessments and vulnerability analysis to proactively address potential threats.
Collaborate with cross-functional teams to promote a culture of risk awareness and compliance with regulatory requirements.
Monitor and assess IT security incidents, perform root cause analysis, and develop remediation plans.
Stay updated on industry best practices, emerging threats, and regulatory changes to enhance the organization's IT risk framework.
Oversee the implementation of security measures, encryption protocols, access controls, and disaster recovery plans.
Establish incident response protocols and coordinate with external security agencies if necessary.
Conduct periodic audits and reviews of IT systems, applications, and infrastructure to ensure compliance with internal and external standards.
Provide risk assessment reports and recommendations to senior management and stakeholders.
Requirements
Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
Proven experience (3-5 years) in technical risk, security, or DeFi/Web3-focused roles, ideally with some exposure to financial services or fintech.
Strong, hands-on understanding of DeFi protocols, smart contracts, blockchain infrastructure, and associated security risks — this is core to the role.
Familiarity with stablecoin services and the associated risks and challenges.
Traditional IT risk / compliance experience is a plus, not a prerequisite — willingness to grow into regulatory frameworks (SOC 1/2, ISO 27001, NIST, CIS, GDPR, AML/KYC) is important.
Professional certifications such as CISSP, CISA, CISM, or CRISC are a plus.
Strong analytical and problem-solving skills with a detail-oriented approach.
Comfortable using AI tools to support research, analysis, and staying current on frameworks outside core expertise.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. This job description is intended to convey information essential to understanding the scope of the job and the general nature and level of work performed by job holders within this job. However, this job description is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position. First Digital Trust reserves the right to amend this job description at any time.

Work arrangement
Yes