Head of Risk, Brazil

Role Objective: We are seeking an experienced and highly strategic Statutory Risk Officer to

lead our Risk Management function in Brazil. This executive role is pivotal in acting as the

primary interface with local regulatory bodies, specifically the Central Bank of Brazil (BACEN).

The ideal candidate will possess deep expertise in Operational and Technology Risk, ensuring

our fast-paced operations remain resilient, secure, and fully compliant.

About the Role

As the Statutory Risk Officer, you will hold statutory responsibility for the company's risk

management framework in Brazil. You will act as the designated point of contact for BACEN and

other relevant regulatory bodies, advocating for the business while ensuring strict adherence to local regulatory expectations. While the role requires holistic oversight of the enterprise risk landscape, the primary mandate is to architect, implement, and govern a robust Operational Risk and Technology Risk framework. You will partner with business and technology leaders to identify vulnerabilities, mitigate technological threats, and foster a culture of proactive risk management.

Key Responsibilities

Regulatory Leadership & Statutory Duties

• Act as the formally appointed Statutory Risk Director before the Central Bank of Brazil (BACEN),fulfilling all duties required by BACEN Resolution and related regulations.
• Serve as the primary liaison for all regulatory inquiries, audits, and supervisory exams related to risk management.
• Ensure accurate and timely submission of all mandated risk reports to regulators.
• Monitor regulatory developments and proactively adapt the risk framework to meet emerging legislative and supervisory requirements.

Operational cum Technology Risk Management

• Oversee the end-to-end Operational Risk Management (ORM) framework, including Risk Control Self-Assessments (RCSA), Key Risk Indicators (KRIs), and Incident Management.
• Establish and monitor operational risk appetite metrics and thresholds, escalating breaches to the management
• Drive business continuity planning (BCP) and disaster recovery (DR) strategies to ensure operational resilience.
• Provide in-depth oversight of Technology Risk, Information Security, and Cyber Security
• frameworks.
• Evaluate risks associated with digital transformations, cloud migrations, API integrations, and new technology deployments.
• Oversee Third-Party Risk Management (TPRM), focusing heavily on critical IT vendors and outsourced technology service providers.
• Review and challenge incident response protocols and post-mortem analysis for IT disruptions or cyber incidents.

Financial Risk (Advantageous Focus)

Good knowledge over end-to-end financial, fraud risk management during payment and money conversion and transfer process, for dual B2C (high-volume, rapid retail transactions) and B2B (high-value invoice/account-to-account payouts) flows.

Requirements

• Bachelor's degree in Law, Economics, Business Administration, Finance, or related field.
• Strong experience in risk management and/or internal controls within regulated financial institutions in Brazil (banks, payment institutions, brokerages, or asset managers).
• Solid working knowledge of BCB regulatory processes, norms, and resolutions.
• Prior experience engaging directly with BCB and/or CVM in a regulatory/supervisory context.
• Strong understanding of prudential risk frameworks (capital, RWA, operational risk).
• Brazilian national or foreign national with valid Brazilian residency (statutory officer requirement).
• Availability and willingness to be formally listed as a company officer with associated legal responsibilities.
• Fluent Portuguese and Advanced English.
• Prior experience in virtual assets, crypto, or fintech risk management.
• Domain Expertise: SME-level knowledge in Operational Risk and Technology/Cyber Risk methodologies.
• Professional certifications in risk management (e.g., FRM, CRM) a plus.
• Familiarity with VASP-specific prudential frameworks and evolving BCB guidance on RWA treatment for digital asset activities.

P/S: Only shortlisted candidates will be contacted due to overwhelming applicants.

Vision & Mission

OSL is the first SFC-licensed digital asset platform in Hong Kong and a PayFi innovator. Through stablecoin payments, cross-border settlement and global licensing, we are building the next-generation payments network. Stablecoins have become everyday money across emerging markets and are widely viewed as blockchain's \"killer app,\" with industry focus shifting from token issuance to real-world consumer and