Lead, IT Risk

Responsibilities

• Execute the IT Risk Management Framework, including risk identification, analysis, and reporting.
• Conduct annual IT risk assessments, such as RCSAs and targeted risk reviews.
• Maintain the IT risk register and ensure accurate reporting of exposures.
• Assist in maintaining risk policies and standards aligned with regulatory expectations (NYDFS, DFS, OCC, CFTC).
• Partner with Internal Audit, IT, and Security teams to assess the effectiveness of IT and cyber controls.
• Support control testing for internal/external audits and regulatory examinations.
• Execute and maintain the Business Continuity Management (BCM) program.
• Develop periodic risk dashboards and key risk indicators (KRIs) for senior leadership.

Requirements

• Bachelor’s or advanced degree in Information Security, Risk Management, or a related field.
• 8+ years of experience in IT internal audit, IT risk management, or similar roles in highly regulated industries.
• Proven experience implementing risk management frameworks, control testing, and data governance.
• Strong knowledge of regulatory requirements including NYDFS, SOC2, and PCI DSS.
• Excellent communication and stakeholder engagement skills.

Preferred Qualifications

• Previous experience working at a digital asset institution.
• Relevant industry certifications such as CISSP, CISM, CRISC, or CISA.
• Experience utilizing GRC tools like AuditBoard or Archer.
• Strong executive presence with the ability to drive enterprise-wide alignment.

Benefits

• Competitive starting pay and discretionary annual bonus.
• Long-term incentive via new hire equity grants.
• Comprehensive health plans and 401K with company matching.
• Paid parental leave and flexible time off.

About the Company

Gemini is a global crypto and Web3 platform founded in 2014. We offer a wide range of secure crypto products and services to individuals and institutions in over 70 countries. Our mission is to unlock the next era of financial, creative, and personal freedom by providing trusted access to the decentralized future.