Compliance Controls & Monitoring

Responsibilities

• Build trusted relationships across Product, Operations, Engineering, Legal, Risk, Compliance, and other business functions to influence compliance outcomes.
• Support and enhance the compliance control framework, including control inventories, risk-to-control mapping, ownership, documentation, and monitoring relationships in the GRC platform.
• Support enterprise compliance risk assessments by maintaining the risk register, facilitating periodic assessments, calibrating inherent and residual risk ratings, and mapping risks to controls and monitoring activities.
• Develop, execute, and improve risk-based monitoring activities, including exception reporting, threshold monitoring, trend analysis, and data quality reviews.
• Recommend and implement automation, data analytics, and AI-enabled solutions to improve monitoring efficiency and coverage.
• Improve controls, monitoring activities, documentation, and operational processes for greater efficiency, consistency, and scalability.
• Coordinate with Regulatory Change Management, Operational Change Management, and Third-Party Risk Management to assess control and monitoring impacts of changes.
• Partner on product development and implementation to identify and document compliance risks, controls, and monitoring before launch, with ongoing post-launch oversight.
• Support assigned regulatory or operational domains, potentially including disputes (Reg E/Reg Z), fraud, FCRA reporting and disputes, AI governance, operations change management, and third-party or partner monitoring.
• Prepare reporting for leadership, governance committees, and stakeholders covering monitoring results, emerging risks, control trends, observations, and recommended actions.
• Provide second-line challenge on control design, issue remediation, and root cause analysis while maintaining separation from first-line control ownership.

Requirements

• 5–10 years of progressively responsible experience in Compliance, Risk Management, Controls, Compliance Monitoring, or a related second-line function within banking, fintech, or regulated financial services.
• Strong analytical and organizational skills, attention to detail, accuracy, and ability to manage multiple priorities.
• Experience with GRC platforms and risk assessment methodologies, including risk registers, inherent and residual risk assessments, and control documentation.
• Experience assessing control impacts across regulatory change management, operational or project change management, and third-party or vendor risk.
• Experience using data analytics, automation, or AI-enabled tools to improve compliance monitoring, reporting, or operational efficiency, or ability to quickly adopt emerging technologies.
• Risk-based mindset with strong critical thinking, sound judgment, root-cause analysis, and ability to balance regulatory expectations with practical business solutions.
• Excellent written and verbal communication skills; English proficiency required.
• Track record of producing clear, audit-ready documentation and high-impact reporting for management and risk committees.
• Ability to communicate effectively with technical teams, business leaders, and executive stakeholders.
• Proven ability to deliver high-quality work under competing priorities and deadlines.

Nice-to-haves

• CRCM, CIA, or equivalent certification.

Compensation & Benefits

• Competitive base salary, stock options, and health benefits from day one.
• 401(k) plan with company match.
• Remote-friendly within the US.
• Flexible time off (FTO).
• Growth opportunities and an inclusive, mission-driven culture.