Head of Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop the strategy for Astra's enterprise compliance program and enhance policies, procedures, risk assessments, controls, testing, training, and reporting.

• Act as Astra's appointed BSA/AML Compliance Officer.

• Supervise KYC/KYB, customer due diligence, sanctions screening, transaction monitoring, alert and case management, and financial-crimes risk.

• Communicate significant compliance risks, program performance, audits, and remediation efforts to executive leadership and the Board.

• Lead, nurture, and expand the Compliance and GRC team.

• Serve as the primary compliance contact for sponsor-bank partners.

• Oversee compliance related to ACH/NACHA, card-network, RTP, FedNow, and other payment rails.

• Assess new products, payment flows, customers, partnerships, and markets while establishing controls prior to launch.

• Analyze regulatory developments and licensing or registration requirements in collaboration with external counsel.

• Establish and enhance fraud controls throughout payment flows.

• Manage SOC 2 and PCI DSS programs, including scoping, control ownership, audit preparation, auditor coordination, findings management, and annual evaluations.

• Ensure readiness for audits related to BSA, NACHA, sponsor banks, customers, SOC 2, PCI DSS, and others.

• Maintain an enterprise risk and controls framework.

• Direct Astra's privacy compliance program, covering GDPR and U.S. privacy obligations, data-subject requests, retention policies, privacy notices, and reviews.

• Manage third-party compliance risk, customer assurance, and compliance due diligence responses.

• Provide guidance to Product, Engineering, Sales, and Integrations on compliance requirements.

• Oversee third-party compliance vendors.

• Report to the COO while advising executive leadership and the Board.

⛳️ Requirements

• Minimum of 8 years of compliance experience in fintech, payments, banking, or financial services.

• At least 3 years in a leadership position.

• Previous experience leading a BSA/AML compliance program.

• Knowledge of overseeing BSA/AML, fraud, privacy, SOC 2, PCI DSS, or payment-network compliance programs.

• In-depth practical knowledge of BSA/AML, OFAC, KYC/KYB, customer due diligence, transaction monitoring, suspicious activity escalation, and financial-crimes risk management.

• Familiarity with ACH, RTP, and debit networks.

• Hands-on experience in building or scaling compliance programs within a startup or high-growth environment.

• Experience in managing sponsor bank relationships and understanding bank program compliance requirements.

• Proven experience in leading and developing a compliance team.

• Willingness and ability to travel up to approximately 15% annually.

• A Bachelor's degree is required.

• Familiarity with compliance and financial-crimes tools such as Alloy, Sardine, Unit21, Socure, or ComplyAdvantage.

• Capability to analyze transaction patterns and interpret monitoring outputs.

• Working knowledge of API-driven payment architecture.

• Understanding of Visa Direct, card-to-card transfers, ACH/NACHA, RTP, and FedNow.

• Authorized to work in the United States.

• Must not require visa sponsorship to continue working in the United States.

🏝️ Benefits

• Equity in a growing fintech company.

• Remote-first culture with flexible working arrangements.

• Opportunities for professional growth in compliance and risk management.

• 100% company-paid health insurance for employees.

• 401(k) plan with company matching.