Director of Enterprise Risk Management

About Bybit

Founded in 2018, Bybit is a premier global digital financial platform and cryptocurrency exchange serving over 80 million users in more than 200 countries. We leverage world-class technology and a user-first philosophy to deliver an integrated ecosystem covering trading, payments, wealth management, custody, institutional services, and Web3 solutions. Our culture encourages innovation, collaboration, and high performance, backed by 24/7 multilingual support and a commitment to transparency and regulatory compliance. We aim to build the future of digital finance on a global scale.

Role Overview

We are looking for a seasoned Enterprise Risk Management (ERM) Director to lead the second-line ERM function at Bybit. This leader will develop and maintain the ERM framework, oversee the identification and management of enterprise risks both financial and non-financial, and ensure compliance with global regulatory standards relevant to cryptocurrency exchanges. Reporting to the Global Head of Internal Audit and Enterprise Risk, this role is pivotal for regulatory engagement, risk governance, and sustaining Bybit's growth internationally.

Key Responsibilities

• Establish and continuously improve the organization-wide ERM framework as the primary second-line ERM owner.
• Design governance structures, policies, and standards aligned to COSO ERM and ISO 31000 frameworks and applicable regulations.
• Create and maintain consistent risk taxonomies, classifications, and appetite statements across all business units and geographies.
• Coordinate enterprise-wide risk identification and assessment across financial and non-financial domains, collaborating closely with first-line and other second-line teams (Finance, Security, Legal, Compliance).
• Manage a comprehensive Risk Register and associated control logs for all significant financial and operational risks.
• Provide expert risk advisory services on areas like third-party, liquidity, operational, and technology risks to support mitigation efforts.
• Develop and conduct Risk and Control Self-Assessments (RCSAs) to evaluate controls and emerging risks.
• Implement Key Risk Indicators (KRIs) and maintain enterprise dashboards and heatmaps to report risk trends, incidents, and control effectiveness to senior leadership and the board.
• Ensure proper documentation and follow-up on risk events and remediation actions.
• Support business continuity planning including developing and reviewing Business Continuity and Disaster Recovery Plans, along with business impact and scenario analyses.
• Act as liaison with group-level risk and compliance teams to align local ERM implementations with global strategies and regulatory requirements.
• Coordinate group risk reporting and assist with regulatory audits and engagements.

Candidate Profile and Qualifications

• Bachelor’s degree in Risk Management, Finance, Accounting, Business, Engineering, or related fields.
• 12 to 15+ years of demonstrated experience in enterprise, regulatory, or second-line risk management within crypto exchanges, financial institutions, regulators, or fintech sectors.
• Strong track record designing and operating ERM frameworks across multiple jurisdictions with regulatory oversight.
• Capability to independently interface with senior management and regulators on enterprise risk matters.
• Expertise with ERM standards such as COSO ERM and ISO 31000.
• In-depth understanding of financial risks, market integrity, operational risk, technology including cybersecurity, and third-party risk management.
• Experience in risk appetite settings, scenario analysis, stress testing, and key risk indicator metrics.
• Knowledge of cryptocurrency exchange operational models, technology stacks, and regulatory environments is highly advantageous.
• Professional certifications like FRM, PRM, or CRM are strongly preferred.
• Excellent interpersonal, stakeholder management, analytical, and communication skills with proficiency in English and Chinese.
• Ability to excel in fast-moving, evolving regulatory landscapes and across diverse regional cultures.
• Location flexibility to work in Abu Dhabi, Hong Kong, or Malaysia.

Benefits

• Access to a Study Growth Fund supporting professional development and ongoing learning.
• Participation in internal events and workshops that nurture team collaboration and creativity.
• Opportunity to work within a global, diverse team fostering wide-ranging collaboration.
• Clear career progression possibilities within an expanding international company.
• Internal mobility options supporting long-term career development.