Compliance and Risk Manager

Job not on LinkedIn

🔥 15 hours ago

🏄 California – Remote

🏄 California – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zact

WebsiteLinkedInAll Job Openings

11 - 50 employees

💳 Fintech

💸 Finance

🤝 B2B

Fintech • Finance • B2B

Zact is a fintech company that provides an integrated payments and expense management platform designed for businesses and financial institutions. Their platform includes a suite of products for card management, expense management, and accounts payable automation. Zact's API-driven technology allows businesses to streamline financial processes by integrating directly with payment networks and accounting systems, ensuring compliance and managing expenses in real-time. The platform can be white-labeled for banks and offers solutions for various business use cases, such as fleet management and continuous compensation. Zact aims to simplify finance stacks, enforce budget policies, and optimize revenue sharing for partners.

📋 Description

• Coordinate Zact's annual SOC 1 and SOC 2 audit processes, including audit planning, evidence collection, auditor requests, control-owner coordination, and remediation activities • Coordinate PCI DSS assessments and related compliance activities • Maintain audit calendars, evidence repositories, control documentation, and supporting records • Ensure required controls are performed and appropriately documented throughout the year • Track audit findings, exceptions, and remediation items through completion • Serve as a primary operational contact for external auditors and assessors • Maintain continuous audit readiness • Manage operational compliance with GDPR and other applicable privacy laws and regulations • Maintain and coordinate privacy policies, procedures, data inventories, retention requirements, and supporting documentation • Incorporate privacy requirements into Zact's products and operations • Coordinate responses to privacy-related customer and bank due diligence requests • Support privacy assessments, audits, and remediation activities • Monitor changes in applicable privacy requirements and coordinate updates to controls, policies, and procedures • Manage Zact's oversight program for BSA, AML, and OFAC activities performed by reseller bank partners • Confirm that bank partners maintain appropriate BSA/AML and OFAC programs and perform assigned responsibilities • Collect and review certifications, policies, audit reports, testing results, and other evidence from bank partners • Maintain documentation demonstrating ongoing oversight of reseller bank compliance activities • Identify gaps, exceptions, or missing evidence and coordinate follow-up • Support audits, examinations, and due diligence reviews involving Zact's BSA/AML and OFAC oversight responsibilities • Coordinate escalation of material compliance issues with the Chief Compliance Officer • Conduct periodic compliance risk assessments • Develop and maintain a risk-based compliance monitoring and testing program • Perform or coordinate periodic testing of compliance controls • Identify, document, escalate, and track compliance issues through remediation and closure • Monitor changes in laws, regulations, and compliance frameworks and coordinate updates • Maintain records of open findings, remediation plans, owners, and target completion dates • Maintain compliance policies, procedures, control documentation, and supporting evidence • Coordinate regulatory, customer, and third-party compliance audits and assessments • Track compliance obligations, testing schedules, findings, remediation plans, and deadlines • Coordinate bank and prospective customer compliance due diligence requests • Prepare compliance reporting for the Chief Compliance Officer • Work across the organization to ensure compliance requirements are understood and implemented • Identify opportunities to improve and automate compliance processes as the company scales

🎯 Requirements

• Bachelor's degree required or equivalent experience strongly demonstrating the competency • 5+ years of experience in compliance, risk management, audit, information security compliance, or a related field • Experience working in banking, fintech, payments, or another regulated financial-services environment • Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits • Hands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws • Hands-on experience with BSA/AML, OFAC, or financial-crime compliance in a banking, fintech, payments, or financial-services environment • Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties • Experience managing audit evidence, control testing, findings, exceptions, and remediation activities • Experience conducting or supporting compliance risk assessments, monitoring, or testing • Ability to work directly with auditors, assessors, financial institutions, and internal control owners • Strong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously • Strong written communication and documentation skills • Ability to translate regulatory and compliance requirements into practical operational processes • Comfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution • Preferred: Experience working with bank partners where compliance responsibilities are shared between a technology provider and the financial institution • Preferred: Familiarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks • Preferred: Experience with compliance management, GRC, or audit-management platforms • Preferred: Relevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials

🏖️ Benefits

• Remote work arrangement • Opportunity to work with a fintech innovator and financial institution partners • Hands-on ownership of compliance program operations • Collaboration with Security, Legal, Operations, Engineering, Finance, and bank partners