Enterprise risk manager

Unramp is a compliance-first crypto on-ramp operating at www.unramp.com, where users buy crypto-assets by card or bank transfer and receive them directly into their own non-custodial wallet. We’re registered as a VASP in Bulgaria and are currently obtaining our MiCA CASP authorisation from the Bulgarian FSC — a formative moment to join and build the risk function from day one.

Unramp is part of Daftcode, a European technology group that builds, scales and invests in FinTech, Blockchain, Deep Tech, InsurTech and Cyber Security startups, with years of expertise in fintech and crypto.

As Risk Manager, you’ll own the risk function from the ground up, reporting directly to the Management Body with real C-level exposure and a genuine mandate to shape how the company manages risk.

Full-time, flexible remote work. We’re based in Bulgaria.

What you'll do

• Build and own our risk management framework end to end, covering operational, regulatory, ICT & cyber, AML/CFT, liquidity, market, credit and reputational risk.
• Own the risk register and risk matrix, set risk appetite and KRIs, monitor and escalate breaches.
• Report quarterly to the Management Body and run annual risk reviews.
• Develop risk mitigation plans and track their effectiveness.

What we're looking for

• Hands-on experience owning risk at a regulated financial business: a bank, insurer, payment institution, EMI, fintech or crypto company (this one is a must).
• Experience owning an enterprise-level risk framework: risk register, risk appetite, KRIs, board-level reporting.
• Exposure to more than one risk category (e.g. operational, regulatory, ICT & cyber, AML/CFT) — we don't expect deep expertise in all of them.
• Ability to document that experience — we'll ask shortlisted candidates for supporting documents (contracts, job descriptions). It's a licensing requirement, nothing more.
• Independence: you can hold a reasoned position under commercial pressure.
• Higher education (major in Law, Finance, Banking, ERM is preferred but not required).
• Conversational English level (we are an international team).

Nice to have

• ERM qualification (IRM, PRMIA, GARP), experience with licensing or supervisory authorities.
• Working knowledge of MiCAR, DORA, Travel Rule, GDPR or Bulgarian AML/CFT legislation.
• A higher education diploma from a Bulgarian university is preferred.