About this role

▸about Ondo Finance — company background

About the company

Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.

Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.

About the Role

Ondo is looking to take its Enterprise Risk Management (ERM) framework, a structured Third-Party Risk Management (TPRM) program, and a centralized policy library to the next level of maturity. As our product suite expands and the number of third-party relationships grows — spanning technology vendors, custodians, and distribution partners — we need a foundational team member who knows how to scale these workstreams in a meaningful regulatory, operational, and institutional way.

We are looking for a Risk & Governance Manager to build upon the foundational risk and policy infrastructure. This role sits at the intersection of risk, policy, and audit readiness — three deeply interdependent areas are targeting dedicated ownership.

Responsibilities

Design and implement an Enterprise Risk Management framework, including a risk register, risk appetite statement, and reporting cadence for senior leadership and the board.

Build and operate a Third Party Risk Management program covering all critical vendors — including vendor tiering, due diligence workflows, and ongoing monitoring against defined risk thresholds.

Own and maintain the company's complete policy framework — including creation, review, approval, version control, and communication of all compliance and risk policies.

sourced from the original posting ↗ · always verify details there before applying