[Hiring] Compliance Controls & Monitoring @OnePay

Role Description

Compliance Controls & Monitoring (C&M) is OnePay’s second line of defense responsible for establishing and overseeing the firm’s compliance control environment. Distinct from independent Compliance Testing, the team partners across the organization to ensure compliance risks are appropriately identified, assessed, and managed through effective controls, monitoring, and governance throughout the product lifecycle. You will:

• Relationships: Build trusted relationships across Product, Operations, Engineering, Legal, Risk, Compliance and other business partners to influence compliance outcomes. Success in this role requires strong collaboration, credibility, and influence to translate technical compliance analysis into meaningful business outcomes.
• Controls framework: Support the maintenance and ongoing enhancement of the compliance control framework, including centralized control inventories, risk-to-control mapping, ownership, control documentation, and monitoring relationships within the firm’s GRC platform.
• Risk assessment: Support the enterprise Compliance Risk Assessment process by maintaining the compliance risk register, facilitating periodic risk assessments, supporting calibration of inherent and residual risk ratings, and ensuring identified risks are appropriately mapped to controls and monitoring activities.
• Monitoring: Develop, execute, and enhance risk-based monitoring activities, including exception reporting, threshold monitoring, trend analysis, and data quality reviews across applicable regulatory requirements. Recommend and implement automation, data analytics, and AI-enabled solutions that improve monitoring efficiency and coverage.
• Process Improvement: Recommend opportunities to improve existing controls, monitoring activities, documentation, and operational processes to increase efficiency, consistency, and scalability.
• Cross-functional coordination: Partner with Regulatory Change Management, Operational Change Management, and Third-Party Risk Management to translate regulatory changes, operational/system changes, and third-party relationships into control and monitoring impacts, and perform compliance risk and control impact assessments for material changes.
• Product compliance: Partner with cross-functional teams during product development and implementation to ensure compliance risks, controls, and monitoring activities are identified and documented prior to launch. Provide ongoing post-launch oversight to identify emerging compliance risks, control gaps, and opportunities for enhancement.
• Program ownership: Support assigned regulatory or operational domains by serving as a compliance resource and trusted partner, which may include Disputes (Reg E/Reg Z), Fraud, FCRA reporting and disputes, AI governance, operations change management, and third-party/partner monitoring.
• Escalation & reporting: Prepare clear, concise reporting for leadership, governance committees, and other stakeholders highlighting monitoring results, emerging risks, control trends, key observations, and recommended actions.
• Advisory & challenge: Provide credible second-line challenge on control design, issue remediation, and root cause analysis while maintaining appropriate separation from first-line control ownership and execution.

Qualifications

• Mid Career (5-10 Years) with progressively responsible experience in Compliance, Risk Management, Controls, Compliance Monitoring, or a related second-line function within banking, fintech, or another regulated financial services environment.
• Strong analytical and organizational skills with high attention to detail and accuracy and the ability to manage multiple priorities.
• Experience using GRC platforms and risk assessment methodologies, including risk registers, inherent and residual risk assessments and control documentation.
• Experience partnering across regulatory change management, operational/project change management, and third-party or vendor risk to assess the control impact of change.
• Experience leveraging data analytics, automation, or AI-enabled tools to improve compliance monitoring, reporting, or operational efficiency, or a demonstrated ability to quickly adopt emerging technologies.
• A risk-based mindset — demonstrates strong critical thinking and sound judgment with the ability to identify root causes, assess risk, and balance regulatory expectations with practical business solutions.
• Excellent written and verbal communication skills (English proficiency required), with a track record of producing clear, audit-ready documentation and high-impact reporting for management and risk committees. Ability to communicate effectively with technical teams, business leaders, and executive stakeholders.
• A proven track record of delivering high-quality work under competing priorities and deadlines.
• CRCM, CIA or equivalent certification preferred.

Benefits

• Competitive base salary, stock options, and health benefits from Day 1
• 401(k) plan with company match
• Remote-friendly (US), flexible time off (FTO), and opportunities for growth
• A high-growth, mission-driven, inclusive culture where your work has real impact

Company Description

To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at [email protected].