Building the Future of Finance:

At CoinDCX, our mission is clear - to make crypto and blockchain accessible to every Indian and enable them to participate in the future of finance.

As India's first crypto unicorn valued at $2.45B, we are reshaping the financial ecosystem by building safe, transparent, and scalable products that power adoption at scale.

You'll establish CoinDCX's independent second-line function for operational resilience and infrastructure risk, across the exchange and the Web3 ecosystem we plug into, including Okto's protocol and wallet infrastructure. You'll build the gates that test whether our infrastructure claims are actually true: can we handle peak load, can we recover from a failure, is our chain/wallet infrastructure resilient. Standing independent risk review of every major infrastructure decision — new chain integrations, new order types, scaling events — before it ships.

Operate the Release Governance Gate for every P0/P1 production release touching matching engine, ledger, or wallet services.

Quarterly resilience reporting into the CRO/Board risk pack.

Build a complete map of single points of failure across the matching engine, trading API gateways, database clusters, and wallet/key infrastructure — including Okto's chain/wallet layer and node redundancy.

Meet with Engineering, SRE, and InfoSec/CISO leadership to agree on the resilience-testing vs. cybersecurity boundary — including where operational resilience testing of key-signing availability ends and InfoSec's custody/key- security ownership begins — and secure data access for independent testing.

Draft an initial technology risk taxonomy and register aligned to the CoinDCX ERM Framework's Operational and Technology/security risk rows, referencing relevant external regimes (DORA, MAS TRMG, NYDFS Part 500) where they apply to in-scope entities.

Stand up a formal Release Governance Gate: mandatory for all P0/P1 production releases touching the matching engine, ledger, or wallet services, requiring a documented rollback plan and automated test verification before deployment.

Independently verify multi-chain node redundancy, RPC infrastructure resilience, and geographic/quorum availability for key-signing operations (failover only — not key-security configuration).





Publish the first technology resilience dashboard feeding CRO/Board risk reporting.

Hire, onboard, and stand up an operating rhythm with the Assistant Manager, Technology & Resilience Risk.

Integrate automated capacity/load testing into the CI/CD pipeline so a deployment is gated automatically if engine performance regresses — not just tested after the fact.

Capacity limits across every major system are tied to real, current test data — not assumptions — and refreshed at every material scaling event.

The Release Governance Gate has a demonstrable track record of catching high-risk issues before they became incidents, with zero tier-1 releases shipped ungated since go-live.

Technology risk register and traffic-light escalation thresholds (aligned to DORA/MAS TRMG/NYDFS Part 500 where relevant) are fully operational and in active use.

You'll Excel in This Role If You:

Have 8+ years leading infrastructure risk, SRE, or technology risk management at a high-throughput trading venue, fintech, or tier-1 cloud environment.

Are hands-on with performance/load testing tools (k6, JMeter or equivalent), observability platforms (Datadog, Grafana or equivalent), and cloud infrastructure (AWS/GCP) — you can run a test yourself, not just commission one.

Hold a Bachelor's or Master's in Computer Science, Engineering, or a related field, or equivalent hands-on experience; certifications such as AWS/GCP solutions architect or a recognized DR/BCM credential are a plus, not a requirement.

Working knowledge of the technology-risk expectations in DORA, MAS TRMG, or NYDFS Part 500 — enough to know what a regulator will ask for, even if you're not the one filing it.

Can hold a release-gate 'no' against Engineering leadership under commercial pressure, backed by data rather than opinion — direct, assertive communication is a requirement of this seat,



not a nice-to-have.

Can translate deep technical risk into board-ready, non-technical language, and think in terms of building a repeatable function and cadence — not delivering a single audit report.

The second Technology Risk hire is onboarded and executing testing under your direction.

Zero trading-critical releases have shipped without a documented rollback plan since the gate went live.

Capacity ceilings across every major system are backed by real test data, not assumption.

Scope, Ownership & Boundaries (cross-referenced to the Risk Architecture)

You own: independent testing and limit-setting for infrastructure resilience and capacity (CEX Risk Architecture, Pillar 3 — Operational, Technology & Custody Risk, resilience component); Okto chain, wallet, and node resilience monitoring.

You partner on, but do not own: cybersecurity and exploit prevention, which the CoinDCX ERM Framework assigns to the CISO/InfoSec ('Technology/security' risk row) — your resilience testing and their security testing sit side by side and should be sequenced together, not merged.

Not this role: day-to-day system operation (stays with Engineering/SRE as 1st line); wallet key-custody security and penetration testing execution (stays with InfoSec — you consume and challenge their output, you don't produce it).

You gain the unique opportunity to establish the definitive 'single source of truth' at scale, moving beyond mere reporting to drive high-stakes innovation in the Web3 space. Founder Conversation (Optional) – For certain roles and senior levels, you may meet our founders to explore strategic alignment and long-term fit

With this belief, we operate as a work-from-office organisation. This role is based out of our Bangalore office, where energy, alignment and innovation move in real time.

We believe great people deserve outstanding experiences.

Flexible perks to match your lifestyle

Learning Sessions: Bi-weekly learning and growth opportunities

If you're looking for a role that gives you direct access to high-stakes decisions, deep impact and a chance to build the future of finance, this is it.

Join CoinDCX and help us make crypto accessible to every Indian, together.

📌 Technology Risk Manager - Fintech (Bengaluru)
🏢 Coindcx
📍 Bengaluru