Risk Assurance and Control Testing Manager
About Paxos
Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it.
We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world’s leading financial institutions, like Mastercard, Visa, Robinhood, and PayPal.
About the team
The Compliance team at Paxos plays a vital role in ensuring the company adheres to global regulatory standards across financial products and services. This team tackles complex challenges such as AML, sanctions, and transaction monitoring, all while ensuring a robust compliance framework in a rapidly evolving crypto and fintech landscape. By safeguarding Paxos against regulatory risks, the team is essential in helping the company achieve its mission of creating a more transparent and efficient financial ecosystem.
About the role
The Senior Risk Assurance & Control Testing Lead will establish and manage Paxos’ enterprise-wide risk assurance and control testing program. This role is responsible for designing, executing, and continuously improving testing frameworks that assess the effectiveness of compliance and risk controls across all business functions and external partnerships.
What you'll do
Develop and manage the testing framework to assess and enhance compliance effectiveness across internal processes and external partnerships.
Execute control testing and risk assurance activities to assess design and operating effectiveness across enterprise-wide functions (Compliance, Operations, Finance, HR, IT).
Develop and follow test scripts, sampling methodologies, and review procedures for accuracy and completeness.
Evaluate control evidence and identify gaps, deficiencies, or process inconsistencies.
Document testing results and Risk Assurance findings clearly, providing actionable recommendations to control owners.
Partner with SMEs, testers, and control owners to clarify processes, ensure compliance, and resolve testing issues.
Maintain testing schedules, track deliverables, and ensure audit-ready documentation is complete and accurate.
Support issue remediation, corrective action tracking, and follow-up testing where necessary.
Assist in continuous improvement initiatives to enhance Risk Assurance processes, testing methodologies, and control monitoring.
About you
Required core qualifications/skills:
5+ years of experience in compliance testing, audit, risk management, or quality assurance, preferably in fintech, financial services, or crypto/blockchain industries.
Strong understanding of control design, operating effectiveness testing, and evidence evaluation.
Experience executing test scripts, documenting results, and identifying testing gaps or issues.
Solid knowledge of risk and control frameworks (RCSA, COSO principles, process flows).
Strong analytical skills with the ability to spot trends, inconsistencies, or control breakdowns.
Clear, concise written communication for testing documentation and QA findings.
Ability to partner with SMEs, testers, and control owners to clarify processes and resolve issues.
Strong organization skills to manage testing schedules, track deliverables, and maintain documentation.
Nice to Have qualifications:
Experience with QA reviews or peer reviews of control testing work.
Familiarity with GRC tools (Archer, ServiceNow, MetricStream).
Basic data analysis skills (Excel formulas, data validation, pivot tables).
Exposure to sampling methodologies (e.g., 95/5/5) or testing standards.
Understanding of OCC/FRB regulatory expectations around internal controls.
Experience supporting issue remediation or corrective action tracking.
Exposure to process improvement (Lean, Six Sigma, workflow optimization).
Industry certifications such as CRCM. CAMS, etc…
Important Notice for Paxos Applicants
We’ve become aware of fraudulent accounts posting as Paxos recruiters on LinkedIn and other platforms. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.
To verify a legitimate Paxos recruiter:
We only use @paxos.com email addresses
We never ask for payment or financial details to apply, interview, or work here
For technical roles, we do not perform a coding interview without prior screening by our engineering team