Specialist, Risk Management

About Paribu

Founded in 2017, Paribu has been playing a key role in the development of Türkiye’s crypto asset ecosystem by delivering innovative blockchain-based products and services. It offers a fast, easy, and secure exchange experience with more than 210 crypto assets.

In 2024, Paribu introduced Paribu Custody, one of the few globally digital asset custody solutions tailored for institutional clients. At the same time, Paribu offers a secure self-custody experience for individuals and startups through its next-generation crypto wallet solution, Paribu Self. Beyond its mission to increase blockchain adoption, Paribu is committed to shaping the future by actively supporting culture, arts, sports, and education.

Why join Paribu?

Paribu works with curious, innovative, and impact-driven professionals who are passionate about pushing boundaries and driving technological advancement. It fosters a culture of continuous learning, collaboration, and sharing. Whether you specialise in technology, design, strategy, operations, or beyond, you will be part of a team shaping the future of finance.

Paribu provides a working environment where ideas turn into reality, and innovation thrives. Here, you'll work alongside talented professionals, tackle exciting challenges, and contribute to meaningful projects that align with Paribu’s vision of delivering fast, easy, and secure experiences.

The impact you'll make

At Paribu, every team member plays a crucial role in driving innovation and maintaining a secure and reliable financial ecosystem. As a Risk Management Specialist, you will be responsible for:

• Identifying, assessing, and monitoring operational and information systems risks associated with crypto asset custody services
• Evaluating risks related to cold and hot wallets, private key management, transaction approvals, segregation of duties, and reconciliation processes
• Maintaining risk inventories, key risk indicators (KRIs), and control assessments to ensure effective risk management
• Assessing third-party and outsourced service risks, including technology providers and critical infrastructure dependencies
• Reviewing access management, change management, business continuity, and disaster recovery processes from a risk perspective
• Monitoring operational incidents and loss events, identifying recurring issues, and tracking remediation actions
• Preparing regular risk reports and presenting key findings, exposures, and recommendations to the Board of Directors
• Collaborating with Internal Control, Information Security, Technology, and Operations teams to strengthen risk management practices
• Supporting regulatory examinations, audits, and compliance activities related to SPK requirements

Key competencies

We value skills and potential as much as experience. To thrive in this role requires:

• Bachelor's degree in Engineering, Computer Science, Management Information Systems, Business Administration, Economics, or a related field
• 4–6 years of experience in operational risk management, IT risk, information systems auditing, or related areas
• Strong understanding of operational risk methodologies, including RCSA, risk inventories, KRIs, and incident management
• Understanding of IT risk areas, including access management, change management, business continuity, and third-party risk management
• Knowledge of crypto custody operations, including cold/hot wallets, multisig, MPC, private key lifecycle, and reconciliation processes
• Familiarity with control and security frameworks such as COBIT, ISO 27001, ISO 22301, or NIST CSF
• Familiarity with SPK regulations and information systems requirements, particularly those applicable to crypto asset custody
• Ability to analyze operational and risk data using Excel, SQL, or similar tools
• Strong analytical thinking, independent judgment, and ability to challenge risks through evidence-based assessments
• Clear communication skills with the ability to present complex risks to senior management and the Board of Directors
• Strong ownership, attention to detail, and ability to work independently while collaborating with cross-functional teams
• Experience in crypto custody, banking, payment institutions, or brokerage firms is considered a plus
• Certifications such as CISA, CRISC, FRM, or ISO 27001 are considered a plus

The advantages of being at Paribu

Paribu invests in its team’s growth, well-being, and happiness. Here’s what you can expect:

• Meal allowance – Generous support with a flexible meal card.
• Private health insurance – Comprehensive coverage for employees, including spouse and children.
• Commuting support – Financial support for commuting based on your office route.
• S.O.S. leave (10 days) – Additional leave days up to 10 days per year for urgent and unexpected matters, apart from annual leave.
• Birthday leave – One extra day off during your birthday month.
• Language learning support – Resources to enhance English communication skills.
• Personal development support – Budget for exploring hobbies, attending professional courses, and personal growth.
• Well-being & health platform – Access to digital health and wellness services, including mental health support, and well-being resources.
• Relocation allowance – Financial support for relocating to within a 15-km radius of Paribu's office, if you are currently based outside Istanbul.
• Top-tier work equipment – High-performance devices and all the essential tools you need to do your best work.
• Cultural events – Enjoy concerts, theater, cinema, and sports tickets through company-sponsored raffles.

The hiring journey

From application to onboarding, here's a step-by-step look at your journey with Paribu.

1. Application: Submit your application online.
2. Initial screening: People Team reviews your resume.
3. Interview process: Meet with hiring managers and team members.
4. Assessment tests / Case study: Complete a case study or technical test to help us better understand your problem-solving and technical skills.
5. Offer & onboarding: If it’s a great fit, you will be welcomed on board.

Application process

Should you have already applied, here are two essential facts about the process:

• While we carefully review every application, only candidates whose profiles best align with the role will be contacted. We appreciate your understanding on this matter.
• All applications received by Paribu are treated equally, without prejudice to age, gender, religion, race, disability, or marital status, in full compliance with personal data protection principles.

In accordance with applicable data protection regulations, please note the following:

You have been informed that my personal data is processed by Paribu Dijital Varlık Saklama Teknolojileri A.Ş. (“Paribu” or “Company”) through the “Paribu Dijital Varlık Saklama Teknolojileri A.Ş. Clarification Text on the Protection of Personal Data for Employee Candidates” prepared as part of the job application process of employee candidates and in accordance with the Personal Data Protection Law No. 6698.