Senior Associate, Operational Risk

About the Company

Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and institutions in over 70 countries. Our mission is to unlock the next era of financial, creative, and personal freedom by providing trusted access to the decentralized future. We envision a world where crypto reshapes the global financial system, internet, and money to create greater choice, independence, and opportunity for all — bridging traditional finance with the emerging cryptoeconomy in a way that is more open, fair, and secure. As a publicly traded company, Gemini is poised to accelerate this vision with greater scale, reach, and impact.

The Department: Risk

At Gemini, our Risk function plays a critical role in proactively identifying, assessing, responding to, and communicating Gemini’s exposure, both internally and externally. Gemini is building a robust second line of defense in a first-of-its kind industry; our goal: safeguard Gemini and our users so that we can continue to empower the individual through crypto.

The Role: Senior Associate, Operational Risk

The Operational Risk Senior Associate is responsible for supporting and maintaining the Operational Risk Management (ORM) Framework. This role supports the enterprise-wide identification, assessment, mitigation, monitoring, and reporting of operational risks. The Operational Risk Senior Associate works in close partnership with business departments, compliance, audit, and other stakeholders to uphold a strong risk culture and ensure effective risk management practices across the organization.

This role is required to be in person twice a week at our New York City, NY office. 

Responsibilities:

• Framework Execution: Implement and support the firm-wide Operational Risk Management Framework, ensuring alignment with regulatory expectations and internal standards.
• Risk Assessment Oversight: Lead and facilitate Risk and Control Self-Assessments (RCSAs) across business units; and analyze risk profiles and ensure timely identification of emerging risks, and ad hoc support of any other risk assessments, as needed.
• Control Evaluation: Review and challenge the design and effectiveness of controls; work with business lines to identify key controls and areas requiring enhancement.
• Incident and Loss Event Management: Oversee the collection, analysis, and reporting of operational loss data and incidents; support root cause analysis and help design action plans to prevent recurrence, inclusive of conducting of post mortem analysis, when necessary. Additional analysis and QA of Incident data.
• Metrics and Reporting: Monitor Key Risk Indicators (KRIs) and other risk metrics; prepare periodic risk dashboards and reports for senior management and governance committees. Proposals for new KRIs or threshold modification, in partnership with ERM.
• Third-Party Risk: Support risk oversight and monitoring activities related to third-party vendors, particularly for critical outsourced activities.
• Policy and Governance: Assist in maintaining operational risk management policies, procedures, and guidelines. Ensure they are embedded in business practice.
• Continuous Improvement: Contribute to the evolution of the ORM framework, including exploring advanced measurement techniques (e.g., scenario analysis, operational risk capital modeling).
• Token Listing Risk Assessments: Conduct and support comprehensive risk assessments for new token listings. Oversee the end-to-end planning and management of token launches, including governance, stakeholder communication, and pipeline tracking and reporting.

Minimum Qualifications:

• Bachelor's degree in finance, economics, business, or a related field.
• 5+ years of experience in operational risk, enterprise risk management, or internal audit, preferably in the crypto industry or fintech/financial services.
• Strong understanding of ORM principles, frameworks (e.g., Basel II/III, COSO, ISO31000), and risk taxonomies.
• Familiarity with governance, risk, and compliance (GRC) tools and data management systems.
• Analytical mindset with strong problem-solving skills and attention to detail.
• Effective communication and interpersonal skills to work across business lines and senior management.

Preferred Qualifications:

• Experience with risk metrics, incident management systems (e.g., Rootly), and RCSA facilitation.
• Knowledge of regulatory frameworks and expectations from regulatory bodies
• Ability to balance strategic thinking with hands-on e