{"id":2497007,"url":"https://alion.io/job/kucoin-ict-risk-manager","title":"ICT Risk Manager","company":{"id":12718,"name":"Kucoin","domain":"kucoin.com","url":"https://alion.io/company/kucoin","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Moka","truth_index":{"grade":"C","score":66,"open_postings":16,"ghost_share":0.563,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Management","role_family":"Management","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austria"],"countries":["AT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":90000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":15},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-07-20T18:23:02Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-09T02:07:57Z","board_verified":true,"closed_at":null,"days_open":111,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":110},"description":"About the Job\nAs Senior Compliance & Risk Manager (f/m/d), you will lead KuCoin EU’s key operational resilience pillars, including Third-Party Risk Management (TPRM), ICT risk management, and Business Continuity Management (BCM). You will ensure that our governance, processes, and controls comply with MiCAR, DORA, EU GDPR, and Austrian regulatory expectations while supporting strong cross-functional collaboration. In this role, you will manage due diligence and oversight of external service providers, maintain the ICT risk framework and central risk register, coordinate BCM and Disaster Recovery activities, support incident and vendor monitoring, and prepare clear reporting for the Head of Risk, CISO, Management Board, and relevant committees.\nWorking at KuCoin EU\nWork at the heart of it. Our modern Vienna office is located directly at the historic Trabrennbahn in the Prater - a vibrant and accessible location.\nTeam culture matters. We believe in strong collaboration and organize regular team events to foster a positive and connected work environment.\nWe take care of the details. A daily selection of snacks, beverages, and weekly Friday breakfasts help keep our team energized.\nAn international mindset. Join a diverse, forward-thinking team that thrives on innovation and cross-border collaboration.\nInvest in your development. We offer clear career progression, supported by learning and development opportunities tailored to your professional growth.\nRewarding performance. Benefit from a competitive salary, performance-based bonuses, and a comprehensive benefits package on top.\nShape the industry. Make a direct contribution to one of Europe’s most ambitious crypto platforms as we scale our regulatory capabilities.\nWhat makes You special\nYou hold a university degree in Law, Economics, Finance, Business, IT Risk, or a related field\nYou have 4+ years of experience in compliance, risk management, audit, or internal control (financial services/fintech/crypto experience is a strong plus)\nYou bring practical expertise in TPRM, ICT risk governance, or EU GDPR-related compliance work\nYou can interpret system diagrams, vulnerability reports, penetration tests, and security certifications\nYou understand European and Austrian regulatory frameworks, including DORA, MiCAR, NIS2, and relevant ISO standards\nYou can translate regulatory requirements into clear, actionable, and scalable processes\nYou communicate well and collaborate effectively with cross-functional teams and external partners\nYou are proactive, detail-oriented, and comfortable working in a fast-evolving regulatory environment\nYou are fluent in English; German proficiency is a strong advantage\nJoin us.\nAt KuCoin EU, you will be part of a team committed to innovation, integrity, and regulatory excellence. If you’re ready to contribute to the future of finance in a fast-moving, global environment - we look forward to hearing from you.\nKuCoin EU is an equal opportunity employer. We are committed to building a diverse and inclusive workplace. All qualified applicants will be considered for employment without regard to race, religion, gender, sexual orientation, gender identity, national origin, disability, or age. We welcome applications from people of all backgrounds and experiences.\nDetailed Job Description\nYour Mission\nAs a Senior Compliance & Risk Manager, you will play a key role in strengthening our compliance and risk management framework, including Third-Party Risk Management (TPRM) and ICT Risk Management. You will also be developing, overseeing and coordinating the company's Business Continuity Management (BCM) framework. Working across Compliance and Risk Management, you will ensure the company meets its regulatory obligations under MiCAR, DORA, MiFID II, PSD II and related frameworks, while building a robust governance environment and effectively mitigating risks arising from external service providers. You are also expected to prepare regular risk and continuity reports for the Head of Risk, CISO, Management Board and relevant committees.\nWhat You Will Do\nThird-Party Risk Management\nLead and further develop the company’s Third-Party Risk Management (TPRM) framework, ensuring alignment with DORA, MiCAR, EU GDPR, and ICT risk expectations\nConduct pre-contract due diligence, risk classification, and criticality assessments-including EU GDPR data protection impact assessments where relevant\nMaintain and enhance the DORA-compliant ICT Third-Party Register, ensuring complete, accurate, and up-to-date documentation\nEnsure that ICT outsourcing and third-party contracts include mandatory clauses required by DORA and EU GDPR (including audit/access rights, data protection terms, breach notification, subcontractor conditions, termination, and exit rights)\nLead the ongoing monitoring of third-party service providers, including performance reviews, compliance checks, EU GDPR adherence, and ICT risk assessments\nDrive the oversight of critical ICT service providers, coordinating with ICT Security, Risk Management, and Legal to ensure enhanced governance\nSupport the development and maintenance of exit strategies, contingency plans, business continuity, and data protection mitigation plans for outsourced ICT services\nSupport the ICT Incident Manager by coordinating third-party activities related to ICT incident monitoring and reporting\nSupport broader enterprise risk management processes by identifying, assessing, and mitigating operational, ICT, compliance, and data protection risks related to third parties\nPrepare compliance and risk reports for senior management, risk committees, and the Board\nCollaborate with auditors and regulators during examinations, audits, and information requests\nProvide subject-matter guidance to internal stakeholders on regulatory expectations relating to compliance, outsourcing, ICT risk, and EU GDPR requirements\nICT Risk Management\nOwn and maintain the ICT risk management framework within the enterprise risk management system.\nDefine ICT risk taxonomy, categories, and mapping to enterprise-wide risk.\nDevelop and maintain ICT risk assessment methodologies, templates, and guidelines (systems, applications, vendors, projects, changes).\nDefine ICT-related KRIs and thresholds aligned to risk appetite, in coordination with the Head of Risk and CISO.\nMaintain the central ICT risk register and ensure accurate risk documentation and classification.\nEnsure every ICT risk has a designated 1st line risk owner, clear action plan, timelines, and remediation status.\nMonitor the progress of remediation activities; follow up and escalate overdue items as per defined procedures.\nRegularly review the register for completeness, consistency, and timeliness.\nDevelop and maintain an annual ICT risk assessment plan (systems, infrastructure, applications, vendors, critical projects).\nPlan, coordinate, and facilitate risk assessment workshops and interviews with system owners, business stakeholders, CISO, and IT teams.\nAnalyse system architectures, process documentation, vendor materials, and security reports to identify risk scenarios.\nDocument ICT risks, inherent/residual ratings, and recommended treatments using approved methodology.\nEnsure consistent application of risk scales, criteria, and risk appetite across all reviews.\nBusiness Continuity Management (BCM)\nDevelop, maintain, and enhance Business Continuity and Disaster Recovery policies, standards, and procedures.\nConduct Business Impact Analyses (BIA) to identify critical functions, dependencies, and recovery requirements.\nWork with Business and IT Units to design and implement Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).\nCoordinate and support continuity testing programmes, including BCP/DR simulations, tabletop exercises, and post-exercise reporting.\nEnsure alignment of BCP/DR practices with ICT risk management frameworks and regulatory expectations (e.g., DORA operational resilience requirements).\nMonitor continuity risks, gaps, and readiness; track remediation of continuity-related findings.\nServe as a central coordinator during disruptions or crisis management events, working with Business, IT, CISO, and leadership teams.\nPromote awareness and training on business continuity roles, responsibilities, and procedures across the organisation.\nWhat Makes You Special\nYou hold a university degree in Law, Economics, Finance, Business, IT Risk, or a related field\nYou bring 4+ years of experience in compliance, risk management, internal control, or audit-experience in financial services, fintech, or crypto is a strong advantage\nYou have demonstrable expertise in Third-Party Risk Management, ICT/outsourcing governance, or risk/compliance work involving EU GDPR\nAbility to understand and interpret:\nHigh-level system and data flow diagrams\nSecurity reports (vulnerability scans, penetration test reports, SOC 2 / ISO 27001 reports)\nYou possess an excellent understanding of European and Austrian regulatory frameworks, especially knowledge of regulatory frameworks: DORA, NIS2, EBA/ESMA guidelines, ISO 27001, ISO 22301 (preferred).\nYou are able to translate regulatory expectations into practical, actionable processes\nYou are fluent in English; German proficiency is a strong plus","description_format":"text","description_chars":9266,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Cryptocurrencies","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-10-14T04:58:26Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.234,"p_room":0.28,"age_days":110,"expected_fill_days":26,"reasons":["conf:0","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/kucoin-ict-risk-manager","json_url":"https://alion.io/job/kucoin-ict-risk-manager.json","meta":{"generated_at":"2026-11-09T04:15:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3299,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12718},"rest":"https://alion.io/mcp/rest/get_company?id=12718"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkucoin-ict-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkucoin-ict-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkucoin-ict-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kucoin-ict-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkucoin-ict-risk-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2497007}},{"tool":"search_jobs","arguments":{"company":"kucoin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2497007},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}