Compliance and Risk Manager

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee Zact's annual SOC 1 and SOC 2 audit processes, which include planning audits, gathering evidence, managing auditor requests, coordinating with control owners, and carrying out remediation activities.

• Facilitate PCI DSS assessments and associated compliance activities.

• Maintain audit schedules, evidence repositories, control documentation, and supporting records.

• Ensure that required controls are executed and properly documented throughout the year.

• Monitor audit findings, exceptions, and remediation items until resolution.

• Act as the primary operational liaison for external auditors and assessors.

• Uphold continuous audit readiness.

• Manage operational compliance with GDPR and other relevant privacy laws and regulations.

• Oversee and coordinate privacy policies, procedures, data inventories, retention requirements, and supporting documentation.

• Integrate privacy requirements into Zact's products and operations.

• Manage responses to privacy-related due diligence requests from customers and banks.

• Assist with privacy assessments, audits, and remediation activities.

• Keep track of changes in applicable privacy requirements and coordinate updates to controls, policies, and procedures.

• Supervise Zact's oversight program for BSA, AML, and OFAC activities conducted by reseller bank partners.

• Confirm that bank partners uphold suitable BSA/AML and OFAC programs and fulfill their assigned responsibilities.

• Gather and review certifications, policies, audit reports, testing results, and other evidence from bank partners.

• Maintain documentation that demonstrates ongoing oversight of reseller bank compliance activities.

• Identify gaps, exceptions, or missing evidence and coordinate follow-up actions.

• Support audits, examinations, and due diligence reviews related to Zact's BSA/AML and OFAC oversight responsibilities.

• Facilitate the escalation of significant compliance issues with the Chief Compliance Officer.

• Conduct periodic compliance risk assessments.

• Develop and sustain a risk-based compliance monitoring and testing program.

• Perform or coordinate regular testing of compliance controls.

• Identify, document, escalate, and track compliance issues until they are remediated and closed.

• Monitor changes in laws, regulations, and compliance frameworks, coordinating necessary updates.

• Maintain records of open findings, remediation plans, owners, and target completion dates.

• Preserve compliance policies, procedures, control documentation, and supporting evidence.

• Coordinate regulatory, customer, and third-party compliance audits and assessments.

• Track compliance obligations, testing schedules, findings, remediation plans, and deadlines.

• Coordinate compliance due diligence requests from banks and prospective customers.

• Prepare compliance reports for the Chief Compliance Officer.

• Collaborate across the organization to ensure that compliance requirements are understood and implemented.

• Identify opportunities to enhance and automate compliance processes as the company scales.

⛳️ Requirements

• Bachelor's degree or equivalent experience showcasing the necessary competency.

• Over 5 years of experience in compliance, risk management, audit, information security compliance, or a related field.

• Experience in banking, fintech, payments, or another regulated financial services environment.

• Experience in coordinating SOC 1, SOC 2, PCI DSS, or similar compliance assessments and audits.

• Practical experience managing or supporting compliance with GDPR and/or U.S. privacy laws.

• Practical experience with BSA/AML, OFAC, or financial crime compliance in a banking, fintech, payments, or financial services context.

• Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.

• Experience managing audit evidence, control testing, findings, exceptions, and remediation activities.

• Experience conducting or supporting compliance risk assessments, monitoring, or testing.

• Ability to interact directly with auditors, assessors, financial institutions, and internal control owners.

• Exceptional organizational skills with the capability to manage multiple compliance initiatives and deadlines simultaneously.

• Strong written communication and documentation abilities.

• Ability to translate regulatory and compliance requirements into practical operational processes.

• Comfortable working in a dynamic environment where a hands-on approach and ownership of execution are expected.

• Preferred: Experience working with bank partners where compliance responsibilities are shared between a technology provider and the financial institution.

• Preferred: Familiarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks.

• Preferred: Experience with compliance management, GRC, or audit management platforms.

• Preferred: Relevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials.

🏝️ Benefits

• Remote work arrangement.

• Opportunity to collaborate with a fintech innovator and financial institution partners.

• Hands-on ownership of compliance program operations.

• Collaboration with Security, Legal, Operations, Engineering, Finance, and bank partners.