Risk Officer

About us

Are you passionate about FinTech and ready to make a tangible impact where your decisions shape the future? Altery could be your next chapter. 

We’re seeking a dedicated and experienced Risk Officer to build and lead the risk management framework for our El Salvador crypto-payments operation. You will design, implement, and continuously improve enterprise & operational risk practices: set the Risk Appetite, run RCSA and KRI dashboards, oversee incident/loss event management, outsourcing/third-party risk, operational resilience (BCP/DR), technology/cyber and data-protection interfaces, payments/settlement/liquidity and market/FX/crypto-price risk, product/change risk assessments, stress/scenario testing, and independent challenge to senior management with clear reporting to the Board. Success requires strong knowledge of the Salvadoran regulatory environment (e.g., SSF/CNAD/BCR expectations for digital-asset/payment activities) and international risk standards (e.g., ISO 31000/COSO, FATF risk-based approach), plus a close partnership with Compliance/MLRO on financial-crime risk. If this sounds like you, join us and help shape the future of financial services.

What you'll be doing

• Establish and maintain a proportionate, risk-based framework aligned to Salvadoran regulators (e.g., SSF/CNAD/BCR) and international standards (ISO 31000/COSO). Define the risk taxonomy, Risk Appetite Statement, limits, and governance (Board/Risk Committee reporting).
  
  
• Serve as the primary contact on risk topics with SSF/CNAD/BCR (e.g., risk self-assessments, stress/scenario results, outsourcing/operational resilience attestations). Support exams and information requests in coordination with Compliance/Legal; ensure timely, accurate submissions for risk-related reporting.
  
  
• Independently challenge the MLRO/Compliance on AML/CFT, sanctions (TFS), KYC/KYB, monitoring quality, SAR/STR escalation pathways, screening coverage (UN and other lists per risk exposure), and control effectiveness; set KRIs and review remediation. (Operational ownership remains with Compliance/MLRO.)
  
  
• Run RCSA and control testing, capture incidents/loss events, maintain risk registers, monitor KRIs with thresholds and triggers, and track issues/remediation to closure; ensure robust records/MI.
  
  
• Map important business services and third-party dependencies; set impact tolerances; oversee BCP/DR (RTO/RPO) and outsourcing/TPRM (due diligence, SLAs, audit rights, exit/contingency plans), including concentration/location risk.
  
  
• Lead product/change risk assessments (payments/crypto on- and off-ramp, custody/flow, market/price/FX, liquidity/settlement, technology/cyber/data protection), including severe-but-plausible scenario tests.
  
  
• Maintain clear escalation routes to the CEO/Board for material risk events or limit breaches; table action plans with owners, deadlines, and verification of effectiveness.
  
  
• Deliver targeted training on risk appetite, incident reporting, outsourcing, and operational resilience; promote a speak-up, risk-aware culture.
  
  
• Draft, review, and update the Risk Management Framework, Operational Risk Policy, Outsourcing/TPRM Policy, Incident & Issues Management, and Business Continuity/DR standards to reflect local rules and global best practices.
  
  
• Produce timely, decision-ready risk dashboards/heatmaps and quarterly Board packs; maintain audit-ready evidence of assessments, reviews, and decisions.
  
  

What you’ll bring to us

• Based in El Salvador or willing to relocate; able to travel regionally as needed.
  
  
• 3+ years in risk management/operational risk within payments/fintech/crypto or a supervised entity; close collaboration with Compliance/MLRO functions.
  
  
• Direct experience engaging with SSF (Superintendencia del Sistema Financiero), CNAD (Comisión Nacional de Activos Digitales) and, where relevant, BCR (Banco Central de Reserva) and the UIF (Financial Intelligence Unit). Able to coordinate timely regulatory escalations/notifications on risk matters.
  
  
• Hands-on with RCSA, KRI dashboards, incident/loss event capture, issues/remediation tracking, stress/scenario testing, outsourcing/TPRM, and operational resilience (BCP/DR, impact tolerances).
  
  
• Strong grasp of AML/CFT, sanctions (TFS), KYC/KYB, screening and STR/SAR escalation; capable of independent challenge to first line while partnering with MLRO.
  
  
• Working knowledge of El Salvador AML/CFT law, CNAD/SSF rules for digital-asset/crypto services, and international standards (FATF, ISO 31000/COSO).
  
  
• Understanding of payments and crypto flows (on/off-ramp, custody, liquidity/settlement, market/FX/price risk), plus exposure to info-sec/data protection risks.
  
  
• Proven track record owning risk outcomes, setting risk appetite/limits, and making evidence-based recommendations to senior management/Board.
  
  
• Familiarity with risk/compliance processes in multi-jurisdiction groups and cross-border operations.
  
  
• Degree in business/finance/law/risk (or equivalent). Preferred: ACAMS/ICA, ISO 31000, FRM/PRM or similar; crypto-specific credentials a plus.
  
  
• Spanish and English (professional fluency), strong written reporting.
  
  

Why join us
We may not be perfect, but our strength lies in our resilience. Facing challenges with our expertise, positive attitude, and a supportive environment where everyone relies on one another gives us confidence in what we do. We empower our people to make decisions, explore, and experiment — micromanagement isn’t our style. We reward those who take on additional responsibilities and go the extra mile.

We are proud of how diverse and unique we are. We thrive on diverse views, love learning from one another, and believe that our differences fuel our curiosity