Risk & Compliance Program Manager

IncubXperts; Maharashtra; On-site; INR 900,000 - 1,300,000; Full time

Job summary

IncubXperts is seeking a Risk & Compliance Program Manager to strengthen the risk framework, ensure regulatory compliance, and support scalable growth across fintech, banking, and payments operations. You will partner with cross-functional teams to operationalize risk processes, oversee compliance programs, and build governance infrastructure aligned with business and regulatory requirements.

The role covers risk management, client due diligence, policy management, product and operational risk

Qualifications

• 5 to 8 years of experience in risk, compliance, operations or governance roles within FinTech, Banking, Payments, or BaaS organizations.
• Strong understanding of regulatory compliance, risk management, vendor risk, audit readiness, and access control frameworks.
• Experience building and scaling risk or compliance programs across multiple business functions.
• Knowledge of BSA/AML, FinCEN, Nacha, PCI DSS, SOC 2, OCC, FFIEC, GLBA.
• Experience with Power BI, JIRA, ServiceNow, Salesforce.

Responsibilities

• Maintain and manage the enterprise risk register.
• Track risk acceptances, mitigation plans, and committee action items.
• Drive issue management, corrective action plans, and control testing activities.
• Ensure ongoing compliance with FinCEN, Nacha, PCI DSS, SOC 2, and other applicable regulations.
• Lead Business Impact Analysis (BIA) and Business Continuity Planning (BCP) initiatives.
• Conduct client onboarding risk assessments and due diligence reviews.
• Monitor ACH limits, onboarding conditions, and client-specific compliance obligations.
• Standardize responses to client RFIs and due diligence requests.
• Partner with Security teams to strengthen access control governance and conduct periodic access reviews.
• Monitor regulatory changes and translate into internal processes and controls.
• Embed risk assessments into product development and onboarding workflows.
• Track risk deviations, approvals, and acceptance records.
• Collaborate with Legal, Product, and Operations teams for risk-based decisions.
• Lead audit preparation and readiness activities for SOC 2, PCI DSS, client audits, and compliance reviews.
• Maintain centralized audit documentation and evidence repositories.
• Coordinate compliance testing, remediation activities, and risk committee reporting.
• Strengthen vendor risk management through control assessments and monitoring.
• Develop and maintain KRIs, dashboards, and executive reporting.

Skills

Risk & Compliance experience

Stakeholder management

Analytical skills

Regulatory knowledge

Vendor risk management

Audit readiness

Access control frameworks

Tools

Power BI

JIRA

ServiceNow

Salesforce

Job description

We are looking for a highly motivated Risk & Compliance Program Manager to strengthen our risk management framework, ensure regulatory compliance, and support scalable growth across fintech, banking, and payments operations. This role will partner with cross-functional teams to operationalize risk processes, oversee compliance programs, support audits, and build governance infrastructure that aligns with business and regulatory requirements.

Role Summary

We are looking for a highly motivated Risk & Compliance Program Manager to strengthen our risk management framework, ensure regulatory compliance, and support scalable growth across fintech, banking, and payments operations. This role will partner with cross-functional teams to operationalize risk processes, oversee compliance programs, support audits, and build governance infrastructure that aligns with business and regulatory requirements.

Key Responsibilities

Risk Management & Compliance

• Maintain and manage the enterprise risk register.
• Track risk acceptances, mitigation plans, and committee action items.
• Drive issue management, corrective action plans, and control testing activities.
• Ensure ongoing compliance with FinCEN, Nacha, PCI DSS, SOC 2, and other applicable regulations.
• Lead Business Impact Analysis (BIA) and Business Continuity Planning (BCP) initiatives.

Client Due Diligence & Access Controls

• Conduct client onboarding risk assessments and due diligence reviews.
• Manage client questionnaires, contractual risk reviews, and onboarding checkpoints.
• Monitor ACH limits, onboarding conditions, and client-specific compliance obligations.
• Standardize responses to client RFIs and due diligence requests.
• Partner with Security teams to strengthen access control governance and conduct periodic access reviews.

Regulatory Compliance & Policy Management

• Monitor and interpret regulatory changes related to BSA/AML, Nacha, OCC, FFIEC, GLBA, and other industry requirements.
• Translate regulatory requirements into actionable internal processes and controls.
• Ensure policies, procedures, and communications remain aligned with regulatory and client commitments.
• Support continuous improvement of compliance and governance programs.

Product & Operational Risk Governance

• Embed risk assessments into product development and client onboarding workflows.
• Establish and maintain approval thresholds, exception management, and escalation processes.
• Track risk deviations, approvals, and acceptance records.
• Collaborate with Legal, Product, and Operations teams to ensure consistent risk-based decision-making.

Audit & Vendor Risk Management

• Lead audit preparation and readiness activities for SOC 2, PCI DSS, client audits, and compliance reviews.
• Maintain centralized audit documentation and evidence repositories.
• Coordinate compliance testing, remediation activities, and risk committee reporting.
• Strengthen vendor risk management processes through control assessments and ongoing monitoring.

Governance, Reporting & Infrastructure

• Develop and maintain Key Risk Indicators (KRIs), dashboards, and executive reporting.
• Prepare risk and compliance reports for leadership and board-level stakeholders.
• Partner with SalesOps and Legal teams to integrate risk controls into Salesforce and contract workflows.
• Design scalable, repeatable governance processes that support organizational growth.

Required Qualifications

• 5 to 8 years of experience in Risk, Compliance, Operations, or Governance roles within FinTech, Banking, Payments, or BaaS organizations.
• Strong understanding of regulatory compliance, risk management, vendor risk, audit readiness, and access control frameworks.
• Experience building and scaling risk or compliance programs across multiple business functions.
• Knowledge of:
  • BSA/AML
  • FinCEN
  • Nacha
  • PCI DSS
  • SOC 2
  • OCC
  • FFIEC
  • GLBA
• Experience with tools such as:
  • Power BI
  • JIRA
  • ServiceNow
  • Salesforce
• Strong analytical, organizational, and stakeholder management skills.

Requirements

Preferred Skills & Attributes

• Strong systems-thinking and process improvement mindset.
• Ability to manage multiple priorities in a fast-paced environment.
• Excellent communication and cross-functional collaboration skills.
• Proactive, resourceful, and results-oriented approach.
• Strong problem-solving and decision-making abilities.
• High level of integrity, accountability, and professionalism.
• Ability to build scalable governance frameworks and operational infrastructure.
• Good to know of US Compliance