Operations Risk Manager

Our Company NymCard is a full-stack payments infrastructure company. Founded in 2018, we give banks and financial institutions one platform, nCore, to issue cards, move money, lend, settle, and manage financial crime as a single system, not separate vendors stitched together. nCore is AI-native and built on a real-time data core, so every product runs on one shared view of the customer. We're a team of 150+ with a high bar. AI isn't a department here, it's how every team works, and we back decisions with data, not opinion. The way we work has a name, BOLD: we build trust through transparency, we own outcomes rather than tasks, we lead with speed because in payments a delay is a real cost, and we deliver excellence as a habit. If you want real ownership and room to move fast, this is the team for you. The Role We are hiring an Operational Risk Manager to support and strengthen our operational risk programme across card issuing, payment processing, and supporting operations. The role focuses on the day-to-day execution of operational risk activities, ensuring risks are identified, assessed, monitored, and remediated in a structured, evidence-based manner. You will work closely with Product, Technology, Operations, Fraud, Finance, Compliance, and Legal to assess operational risks arising from business-as-usual activities, new products, and change initiatives. You will help maintain risk frameworks, run RCSAs, track incidents and losses, and produce clear management information to support senior management and committee oversight. Success in this role means accurate and current risk records, timely incident analysis, practical remediation actions, and consistent readiness for internal reviews, audits, and regulatory interactions. What You’ll Be Doing • Maintain and support the Operational Risk Management Framework in line with CBUAE expectations and internal policies. • Ensure roles, responsibilities, review cycles, and evidence requirements are clearly documented and followed. • Coordinate and execute risk and control self-assessments across core operational areas including card issuing, transaction processing, settlements, fraud operations, reconciliations, customer support, and vendor-supported services. • Document inherent and residual risks, control design and effectiveness, and agreed remediation actions with clear owners and timelines. • Support the definition, tracking, and ongoing monitoring of key risk indicators, incidents, near-misses, and control breaches. • Assist in preparing concise risk dashboards and trend analysis for management and governance forums. • Support the investigation and documentation of operational incidents and losses. • Assist in root cause analysis, identification of contributing factors, and tracking of corrective and preventive actions until closure, ensuring evidence is retained. • Support operational risk assessments for new products, process changes, system enhancements, and outsourcing arrangements. • Work with Product and Technology teams to ensure risks and controls are considered during design, testing, and rollout. • Assist in responding to regulatory requests, audits, and internal assurance reviews by preparing supporting documentation, risk evidence, and working papers in a structured and traceable manner. • Support the delivery of operational risk awareness sessions for relevant teams and new joiners. • Help maintain training materials and attendance records. • Contribute to operational risk inputs for outsourcing and third-party reviews, including control assessments, SLA monitoring, and remediation tracking in coordination with Compliance and Procurement. • Support business continuity and operational resilience activities, including scenario reviews, testing outcomes, and follow-up actions, ensuring lessons learned are reflected in risk assessments and KRIs. What You Bring • 5F to 10 years of experience in operational risk, internal control, or risk management within a fintech, payments, or regulated financial services environment. • Working knowledge of UAE regulatory expectations, particularly CBUAE guidelines, with the ability to operate in a regulated environment. • Understanding of core payments and card-issuing processes, including transaction processing, settlements, chargebacks, fraud operations, and reconciliations. • Hands-on experience supporting RCSAs, incident tracking, KRIs, and operational risk reporting. • Strong analytical and documentation skills, with attention to detail and a practical, risk-based mindset. • Ability to work collaboratively with business and technical teams and communicate risk issues clearly and proportionately. • Familiarity with recognized risk management concepts such as Basel principles and ISO 31000 is an advantage. Bonus Points • A balanced hybrid approach that supports in-office collaboration for workshops, reviews, and stakeholder engagement, alongside flexibility for focused individual work. • Exposure to end-to-end operational risk activities within a growing FinTech, with opportunities for learning, professional development, and progression based on performance and impact. • Hands-on experience working with clients, partners, and stakeholders across the UAE and wider MENA region in a live payments environment. • The opportunity to contribute directly to the safety, resilience, and scalability of a regulated card-issuing platform, with visible outcomes from your work. Show more Show less

5 to 10 years of experience in operational risk, internal control, or risk management within a fintech, payments, or regulated financial services environment. Working knowledge of UAE regulatory expectations, particularly CBUAE guidelines, with the ability to operate in a regulated environment. Understanding of core payments and card-issuing processes, including transaction processing, settlements, chargebacks, fraud operations, and reconciliations. Hands-on experience supporting RCSAs, incident tracking, KRIs, and operational risk reporting. Strong analytical and documentation skills, with attention to detail and a practical, risk-based mindset. Ability to work collaboratively with business and technical teams and communicate risk issues clearly and proportionately. Familiarity with recognized risk management concepts such as Basel principles and ISO 31000 is an advantage.

Maintain and support the Operational Risk Management Framework in line with CBUAE expectations and internal policies. Ensure roles, responsibilities, review cycles, and evidence requirements are clearly documented and followed. Coordinate and execute risk and control self-assessments across core operational areas including card issuing, transaction processing, settlements, fraud operations, reconciliations, customer support, and vendor-supported services. Document inherent and residual risks, control design and effectiveness, and agreed remediation actions with clear owners and timelines. Support the definition, tracking, and ongoing monitoring of key risk indicators, incidents, near-misses, and control breaches. Assist in preparing concise risk dashboards and trend analysis for management and governance forums. Support the investigation and documentation of operational incidents and losses. Assist in root cause analysis, identification of contributing factors, and tracking of corrective and preventive actions until closure, ensuring evidence is retained. Support operational risk assessments for new products, process changes, system enhancements, and outsourcing arrangements. Work with Product and Technology teams to ensure risks and controls are considered during design, testing, and rollout. Assist in responding to regulatory requests, audits, and internal assurance reviews by preparing supporting documentation, risk evidence, and working papers in a structured and traceable manner. Support the delivery of operational risk awareness sessions for relevant teams and new joiners. Help maintain training materials and attendance records. Contribute to operational risk inputs for outsourcing and third-party reviews, including control assessments, SLA monitoring, and remediation tracking in coordination with Compliance and Procurement. Support business continuity and operational resilience activities, including scenario reviews, testing outcomes, and follow-up actions, ensuring lessons learned are reflected in risk assessments and KRIs.