Risk

• Enable risk informed business outcomes: Enable teams and leadership to make risk-based decisions by clearly communicating quantitative and qualitative tradeoffs.
• Manage risks throughout the risk lifecycle: Intake, triage, analyze, and calculate (inherent/residual) risk in collaboration with subject matter experts and risk owners. Facilitate agreement and documentation of risk treatment decisions; pressure testing treatment decisions and validating execution of mitigation plans across stakeholders as required. Participate in continuous monitoring or risk treatment.
• Maintain source of truth risk register: Quality control of data, tooling support, and implementing automation/process improvements to establish a baseline and iteratively improve risk management data and tooling.
• Iterating on program elements: Analysis of multiple variables to inform improvements to threat models/risk scoring methodologies.
• Reporting on risk posture: Support synchronous and asynchronous reporting on findings, metrics, and recommend mitigations to business leadership. This includes ad hoc and scheduled meetings with leadership and business risk owners.
• Communications and training: Support develop, execution, and maintenance of communication and training plans to roll out the technology risk program across the organization. Maintain team runbooks, team intra-web pages, and risk register metrics dashboards.
• Build, grow, and coach a team of technology and security risk analysts; foster a culture of agility and innovation, and provide ongoing performance feedback.
• Enterprise risk alignment: Work in lockstep with Enterprise Risk Management to escalate risks through the enterprise risk register and report relevant metrics to senior leadership as determined necessary.
• Global Engagement: Collaborate with stakeholders to help scale the program’s risk framework across Coinbase entities, products, and geographies/markets. Regularly collaborate with GRC teams, Legal and Compliance for risks, assessments, and reporting to meet regulatory requirements.
• Support audit and regulatory inspections: Support data compilation to respond to US and international audit/regulator inquiries.
• Maintain an industry pulse: Maintain awareness of international regulation, emerging threats, forecasts, policies, and benchmarks

Manager, Technology Risk

Senior Manager, Risk Advanced Analytics

Risk Assessment Manager

Product Governance Consultant

Risk Management Specialist, German – Infrastructure Managed Services

Relationship Lending Manager – Market Risk