Individual Contributor role — you'll lead through analysis and judgment, not people management.
We're not hiring someone to fill out risk registers. We're hiring someone to figure out why a risk model missed something last quarter — and build the system that catches it next time.
Why this matters
Deriv's mission is Trading for Anyone, Anywhere, Anytime. Millions of traders, in multiple currencies, across regulatory regimes, around the clock. At that scale, risk doesn't wait for a quarterly review cycle — it moves as fast as the market does.
Real money, real regulations, real consequences. We're already building risk operations that run continuously: dozens of fraud detection models flagging money-movement patterns and trading abuse in production, AML review pulling risk metrics automatically instead of by hand, and vendor risk assessments run through document analysis instead of a checklist. Not experiments — systems that are already catching things a person reviewing spreadsheets would miss. You'll own the next layer of that.
Why Deriv
We're in production, not planning.
- Fraud detection models running continuously across money movement, trading abuse, and document forgery
- Automated AML review: data aggregation, risk metric computation, high-risk client flagging
- Investigation portals that synthesise findings into unified risk profiles instead of scattered notes
We've proved the model works. You're not waiting for a pilot to get approved — you're extending something that already runs.
Scope of Work
This role focuses on risk assessment and modelling, with cross-functional work in stress testing and AI-assisted monitoring:
- Risk Assessment & Modelling — Owning the frameworks that assess exposure across trading operations and catch what current models miss
- Stress Testing & Scenario Design — Designing scenarios that test where our resilience actually breaks, not ones built to pass
- AI-Assisted Monitoring — Directing how predictive models and automated flagging systems get used, and correcting them when their output is wrong
You'll own outcomes here, with influence into how the wider risk function operates.
What You'll Do
Own outcomes, not just analysis
- Build and maintain the risk frameworks that assess exposure across trading operations — when they miss something, it's your problem until it's fixed
- Design stress tests that actually stress something, and defend the results when they're inconvenient
- Use AI tools to sift large datasets for patterns a manual review would take weeks to find
Work at the edge of the automated and the judgment call
- Know when a model's flag is noise and when it's the start of something real
- Feed findings back into the models so they get sharper over time, not just faster
- Push back when a "risk" flagged by a dashboard isn't actually one
Set the standard, not just meet it
- Present findings to executive stakeholders and make the case for action, not just visibility
- Build the playbooks and frameworks that the wider risk team will use after you
- Partner with compliance so what you flag as a risk holds up against what regulators actually require
Who You Are
- You've assessed real risk, not just modelled it in theory. 5-8 years in risk management within financial services or trading. You know the difference between a framework that looks rigorous and one that catches actual problems.
- You think in exposure, not in checklists. You can look at a trading operation and see where it's fragile before a stress test proves it.
- You're comfortable with AI as a second analyst, not a black box. You understand what predictive models are good at — pattern detection at scale — and where they need a human to catch what they can't see. FRM, PRM, or equivalent certification expected.
- You lead through the strength of your analysis. You don't need direct reports to have influence. When your risk assessment says something matters, people act on it because the reasoning holds — and the frameworks you build become what the function runs on.
The Honest Reality
This is demanding work. You'll own outcomes with incomplete data, because incomplete data is the only kind risk work ever gets. You'll navigate friction between trading, compliance, and leadership when they all want different answers. You'll establish standards that other analysts get measured against, and defend a risk finding to stakeholders who'd rather it wasn't true.
But you'll build frameworks that outlast the quarter they were written for. You'll work with AI tools that make your analysis sharper instead of slower. And you'll know that when you flag something, it's the reason it got fixed before it became a headline.
If you want risk work that's mostly documentation, this isn't it. If you want to find what the models miss, it might be.