ICT Risk Oversight Lead (Crypto)

Location: Luxembourg, Luxembourg; based in the Luxembourg office with in-person attendance expected at least 3 days per week

Company

Robinhood is a financial technology company whose Bitstamp business operates a regulated cryptocurrency exchange and digital asset services.

What you will do

• Implement and enhance the ICT Risk Management framework, policies, and procedures in line with group standards and Luxembourg regulatory requirements.
• Provide second-line oversight of technology and security initiatives, business-as-usual operations, risk metrics, and control issues.
• Perform risk assessments for new products, systems, processes, and technology arrangements.
• Collaborate with IT, Security, the CISO, and other stakeholders to provide independent challenge to first-line teams.
• Enhance ICT risk appetite frameworks and KRIs, report findings and risk themes through governance bodies, and strengthen risk culture.
• Champion the secure and effective use of AI for automation, efficiency, and scalable risk management.

Requirements

• 8+ years of experience in cyber, technology, or ICT risk, including second-line oversight, control effectiveness, and independent challenge.
• Experience in highly regulated environments, ideally financial services, with knowledge of governance and regulatory expectations.
• Understanding of technology, cyber, operational, resilience, exchange, custody, and third-party risks in cryptocurrency and digital asset businesses.
• Knowledge of DORA, MiCA, the EU AI Act, CSSF expectations, and related European regulatory frameworks.
• Experience with technology risk, control assurance, incident response, business continuity, identity and access management, and secure software development.
• Strong written and verbal English communication skills are required. CISSP, CISA, CISM, or CRISC certifications are strongly preferred.

Nice to have

• Technology audit experience.
• ISO 27001, ISO 22301, or similar certifications.

Culture & Benefits

• High-impact work focused on secure and resilient financial and digital asset services.
• Performance-driven compensation with bonus programs.
• Supplemental health insurance, ancillary insurance, and mental health support.
• Flexible lifestyle wallet covering wellness, childcare, learning, and other expenses.
• Paid time off, sick time, volunteer time off, parental leave, and company holidays.
• Office meals and events, comfortable workspaces, and a monthly commuter stipend.