About Time Seventeen
We give risk a price. We create state prices for tail events.
The world contains a large class of risks that determine where capital flows yet have no price today. Global supply chains are being reconfigured, while the geopolitical discount rates that inform consequential decisions remain difficult to quantify. Time Seventeen is building tradable synthetic indices and term structures for these risks.
Time Seventeen is infrastructure for geopolitical risk and catastrophe risk. We give risk a price. We create state prices for tail events. Our ambition is to turn fragmented judgments about individual events into continuous risk prices, then bring those prices into institutional valuation, trading, and risk-transfer workflows.
Our work connects event definitions, probabilistic forecasting, market data, index methodology, and execution infrastructure. We explore how prediction markets, actuarial models, insurance and reinsurance structures, and blockchain-based DeFi can contribute to a common language for uncertain outcomes. The challenge is to make risk legible across different horizons, exposures, and market participants, while keeping assumptions and limitations explicit.
Building this infrastructure requires more than a compelling forecast. Data must be traceable, events must have defensible resolution rules, methodologies must survive scrutiny, and products must account for liquidity, basis risk, operational resilience, and applicable legal constraints. We want institutions to be able to understand a risk price, challenge its construction, and assess how it relates to the exposure they actually hold.
We are building a focused team across research, engineering, markets, and risk. We value people who can move between deep specialist work and the practical decisions needed to build a company: identifying the important question, testing an approach, communicating the evidence, and carrying the result into a usable system.
About the role
Build a practical governance, risk, and compliance program that protects the company while enabling responsible growth.
You will establish the governance and controls needed to build trusted risk infrastructure. The scope includes data integrity, model governance, third-party dependencies, security, and operational resilience. You will turn broad risk concerns into proportionate controls that have clear owners and evidence of effectiveness.
You will work with leadership, legal counsel, and system owners to identify material risks, agree control responsibilities, and track remediation. The role combines policy design with practical review of how controls operate, including access management, research data, vendor oversight, and incident escalation. You should be comfortable challenging a proposed launch when important risks remain unresolved.
What you'll do
- Own the enterprise risk register, control framework, policies, and governance cadence.
- Lead security and compliance readiness, evidence collection, and external assessments.
- Coordinate third-party risk, business continuity, incident response, and staff training.
- Translate regulatory and client requirements into clear, proportionate operating controls.
- Develop governance for methodology changes, model limitations, data dependencies, and operational incidents, with clear approval responsibilities and evidence trails.
- Test the effectiveness of key controls, track remediation to closure, and provide leadership with concise reporting on incidents, exceptions, and residual risk.
What we're looking for
- Experience leading GRC, operational risk, information security compliance, or technology risk.
- Knowledge of frameworks such as SOC 2, ISO 27001, NIST, or relevant financial regulations.
- Strong policy writing, control design, audit management, and stakeholder communication skills.
- A pragmatic approach that balances risk reduction with business velocity.
- Experience assessing control effectiveness, managing remediation, and coordinating evidence across technical and business teams.
- Sound judgment about confidential information, conflicts of interest, data usage, and when to seek specialist legal or regulatory advice.
What success looks like
- Maintain a prioritized risk register with accountable owners, tested controls, and documented treatment of material exceptions.
- Establish usable incident, continuity, and vendor-review procedures and validate them through agreed exercises.
- Give leadership a clear view of control gaps and remediation progress, with evidence ready for relevant client or external reviews.
Location & working arrangement
This role is based in Hong Kong. Please include your location, availability, and any working-arrangement requirements in your application.
How to apply
Share your CV and describe a control assessment, remediation program, incident review, or compliance initiative. Explain your personal contribution, important decisions, and results. A relevant work sample is welcome where you have permission to share it; please exclude confidential employer or client information. Include your availability and why Time Seventeen's work interests you.
How we work
Time Seventeen is a focused, high-ownership team. We value clear thinking, direct communication, careful execution, and people who carry important work through to a result. We expect colleagues to surface inconvenient evidence, ask precise questions, and make the limits of their work explicit. Strong specialist judgment matters, as does the willingness to understand how your work affects research, markets, engineering, and risk. We prefer useful documentation and clear decisions to unnecessary process.