Skip to content

Open nowPosted 70 days ago

Head of Risk Management

Aloha Consulting Group187 open roles

Where
Ha Noi, Vietnam
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of Risk ManagementAloha Consulting Group · Ha Noi, Vietnam
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Aloha Consulting Group's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Aloha Consulting Group postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 70 days ago

Aloha Consulting Group median: 1 days open

The posting

ACG_3715_JOB Our client, a leading company in financial services sector in Vietnam, is looking for a qualified candidate to join their firm. KEY RESPONSIBILTIES Lead the establishment, implementation, and continuous enhancement of the Company's Enterprise Risk Management Framework (ERMF) as well as risk management framework for material risks to seek approval from the Company's Board, ensuring alignment with the business model, regulatory requirements and VPB Group risk management principles and standards; Lead the development, review and ongoing monitoring of the Company's Risk Appetite Statement, risk limits, early warning systems for material risks, ensuring risk exposure is measured as well as control measures and remediation plans are developed, monitored, and reported in a timely manner; Lead the development and implementation of the Company's risk governance model, including the Three Lines of Defense, risk committee/council governance, escalation mechanism and risk reporting structure; and interaction with VPB Group Risk; Oversee the identification, assessment, monitoring and reporting of material risks arising from the Company's current and planned business activities, including crypto-asset trading market services, proprietary trading, custody and asset protection, and asset tokenization/issuance-related services; Lead the risk oversight of IT and Cybersecurity risk, including technology architecture risk, system availability/resilience, cyber threat and vulnerability management, penetration testing and red-teaming oversight, security incident response, third-party/vendor technology risk, and alignment with international standards (e.g. ISO 27001, NIST) and applicable regulatory requirements for crypto-asset trading infrastructure; Lead the risk oversight of Custody and Digital Asset Protection, including wallet architecture risk (hot/warm/cold storage), private key management and multi-signature/MPC controls, custody operational controls, asset segregation, proof-of-reserves practices, and third-party custody/sub-custody arrangements; Regularly evaluate the effectiveness of risk management policy, regulations/processes and risk appetite/limits; and propose to BOD for review and modification as necessary; Report to BOD on the status of risk management activities and propose risk mitigation measures/solutions based on co-operation with relevant stakeholders, including review of risk reports prepared by risk functions prior to submission to senior leadership; Provide independent oversight and challenge over risk assessments relating to new products/services/platforms, material technology changes and strategic initiatives, with particular focus on cybersecurity, IT resilience and custody control readiness prior to go-live; Lead the implementation of core risk management tools and programs, including but not limited to RCSA, risk incident & loss data collection & analysis, issue/action tracking, scenario analysis, stress testing, business continuity risk oversight and control readiness assessment for trading, IT/cyber and custody functions; Build and promote a sound risk culture across the organization and lead the Risk Management function, including defining risk governance structure, roles and responsibilities, capability requirements and coordination mechanisms with relevant internal and Group stakeholders. Direct the risk functions to closely co-ordinate with compliance, IT security and custody operations to ensure effectiveness and efficiency of established risk management frameworks; Decide and approve matters related to risk management within the authority of Head of Risk Management, authorized by the Board. For material risk management issues, seek the opinion of the CAEX Board as well as VPB CRO (where applicable) prior to exercising the delegated authority, in accordance with the Group Governance Framework and the applicable delegation of authority. Requirements Bachelor's degree or above in Finance, Economics, Risk Management, Information Technology, Computer Science, Data Science, Fintech or a related field; Minimum 10 years of relevant experience in risk management, enterprise risk management, risk governance across financial services, fintech, securities, trading platform, payment, digital banking, crypto/digital asset business or consulting; including experience in a risk leadership role, leading a diverse team of risk professionals across risk disciplines; Strong understanding of enterprise risk management principles, risk governance, Risk Appetite Statement, limit framework, risk taxonomy, Three Lines of Defense, risk reporting, escalation, stress testing, and leading risk management tools; Strong understanding of IT and Cybersecurity risk management, including security architecture, threat and vulnerability management, security incident response and cyber resilience frameworks; Solid understanding of custody and digital asset protection risk, including wallet infrastructure, key management practices (multi-signature/MPC), and asset segregation controls; Solid understanding of other key risk areas relevant to crypto-asset exchange operations, including market risk, liquidity risk, third-party risk, compliance risk, AML risk and reputational risk; Strategic thinking and strong business acumen with a risk control mindset, with the ability to balance business growth, regulatory expectations, customer protection and prudent risk management; Strong stakeholder management, communication and presentation skills, with the ability to engage effectively with the Board, Executive Management, regulators, business units, technology teams and external partners; Proficient in English, with the ability to communicate and work effectively with domestic and international stakeholders. Prefered Qualifications Experience working with or advising digital asset exchanges, trading platforms, fintech companies, securities firms, payment companies, custody infrastructure providers, wallet/key management providers, blockchain companies or other regulated financial institutions; Experience establishing or scaling a risk management function, ERMF, Risk Appetite Statement, risk committee governance, risk reporting framework, or IT/cybersecurity/custody control readiness program from an early-stage setup; Experience in a 24/7 trading, digital asset, financial market infrastructure, brokerage, payment or technology-driven operating environment; Professional certifications such as FRM, CFA, PRM, CIA, CISA, CRISC, CISSP, ISO 27001, ISO 22301, or other relevant risk, audit, cybersecurity, technology or financial market certifications. Contact: Thao Phan or Giang Van or Huy Le Due to the immense number of applicants, only shortlisted candidates will be contacted.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Aloha Consulting Group's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Aloha Consulting Group's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Aloha Consulting Group's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.