[Hiring] Compliance and Risk Manager @Zact Inc.

Role Description

Zact is seeking a Compliance & Risk Manager to own the day-to-day operation of key elements of our compliance program across audit, privacy, and financial-crime oversight. This is a hands-on role responsible for:

• Coordinating Zact's SOC and PCI audits.
• Managing compliance with GDPR and other applicable privacy laws.
• Supporting compliance monitoring and testing.
• Overseeing Zact's responsibilities related to BSA, AML, and OFAC.

The Compliance & Risk Manager will report to the Chief Compliance Officer and work closely with Security, Legal, Operations, Engineering, Finance, and our bank partners.

Key Responsibilities

• SOC and PCI Compliance:
  • Coordinate Zact's annual SOC 1 and SOC 2 audit processes.
  • Coordinate PCI DSS assessments and related compliance activities.
  • Maintain audit calendars, evidence repositories, control documentation, and supporting records.
  • Work with internal control owners to ensure required controls are performed and appropriately documented.
  • Track audit findings, exceptions, and remediation items through completion.
  • Serve as a primary operational contact for external auditors and assessors.
  • Help maintain continuous audit readiness.
• Privacy Compliance:
  • Manage Zact's operational compliance with GDPR and other applicable privacy laws.
  • Maintain and coordinate privacy policies, procedures, data inventories, retention requirements, and supporting documentation.
  • Work with Legal, Security, Engineering, and business teams to incorporate privacy requirements.
  • Coordinate responses to privacy-related customer and bank due diligence requests.
  • Support privacy assessments, audits, and remediation activities.
  • Monitor changes in applicable privacy requirements and coordinate necessary updates.
• BSA, AML, and OFAC Oversight:
  • Manage Zact's oversight program for BSA, AML, and OFAC activities performed by reseller bank partners.
  • Confirm that applicable bank partners maintain appropriate BSA/AML and OFAC programs.
  • Collect and review required certifications, policies, audit reports, testing results, or other evidence from bank partners.
  • Maintain documentation demonstrating Zact's ongoing oversight of reseller bank compliance activities.
  • Identify gaps, exceptions, or missing evidence and coordinate follow-up.
  • Support audits, examinations, and due diligence reviews.
  • Coordinate with the Chief Compliance Officer on escalation of material compliance issues.
• Compliance Monitoring and Risk Management:
  • Conduct periodic compliance risk assessments.
  • Develop and maintain a risk-based compliance monitoring and testing program.
  • Perform or coordinate periodic testing to confirm compliance controls are operating as intended.
  • Identify, document, escalate, and track compliance issues.
  • Monitor changes in applicable laws, regulations, and compliance frameworks.
  • Maintain a clear record of open findings, remediation plans, owners, and target completion dates.
• Compliance Program Management:
  • Maintain compliance policies, procedures, control documentation, and supporting evidence.
  • Coordinate regulatory, customer, and third-party compliance audits and assessments.
  • Track compliance obligations, testing schedules, findings, remediation plans, and deadlines.
  • Serve as a primary coordinator for bank and prospective customer compliance due diligence requests.
  • Prepare compliance reporting for the Chief Compliance Officer.
  • Work across the organization to ensure compliance requirements are understood and implemented.
  • Help identify opportunities to improve and automate compliance processes.

Qualifications

• Bachelor's degree required or equivalent experience strongly demonstrating the competency.
• 5+ years of experience in compliance, risk management, audit, information security compliance, or a related field.
• Experience working in banking, fintech, payments, or another regulated financial-services environment.
• Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits.
• Hands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws.
• Hands-on experience with BSA/AML, OFAC, or financial-crime compliance.
• Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.
• Experience managing audit evidence, control testing, findings, exceptions, and remediation activities.
• Experience conducting or supporting compliance risk assessments, monitoring, or testing.
• Ability to work directly with auditors, assessors, financial institutions, and internal control owners.
• Strong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously.
• Strong written communication and documentation skills.
• Ability to translate regulatory and compliance requirements into practical operational processes.
• Comfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution.

Preferred Qualifications

• Experience working with bank partners where compliance responsibilities are shared.
• Familiarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks.
• Experience with compliance management, GRC, or audit-management platforms.
• Relevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials.