Risk & Compliance Program Manager

IncubXperts TechnoConsulting Private Limited; Pune District; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

IncubXperts TechnoConsulting Pvt Ltd in Pune, India is seeking a highly motivated Risk & Compliance Program Manager to strengthen our risk management framework, ensure regulatory compliance across FinTech, banking and payments operations, and support scalable growth. You will partner with cross-functional teams to operationalize risk processes and governance.

You will lead initiatives on regulatory changes, audit readiness (SOC 2, PCI DSS), and vendor risk, while embedding risk assessments into

Qualifications

• 5 to 8 years of experience in Risk, Compliance, Operations, or Governance roles within FinTech, Banking, Payments, or BaaS organizations.
• Strong understanding of regulatory compliance, risk management, vendor risk, audit readiness, and access control frameworks.
• Experience building and scaling risk or compliance programs across multiple business functions.
• Knowledge of: BSA/AML, FinCEN, Nacha, PCI DSS, SOC 2, OCC, FFIEC, GLBA.

Responsibilities

• Maintain and manage the enterprise risk register.
• Track risk acceptances, mitigation plans, and committee action items.
• Lead audit readiness and SOC 2, PCI DSS, and client audits.
• Develop KRIs and executive dashboards.
• Coordinate with Legal, Product, and Operations for risk decisions.
• Strengthen vendor risk management and ongoing monitoring.

Skills

Regulatory compliance

Risk management

Vendor risk

Audit readiness

Access control

Stakeholder management

Cross-functional collaboration

Analytical skills

Governance

Tools

Power BI

JIRA

ServiceNow

Salesforce

Job description

IncubXperts TechnoConsulting Pvt Ltd | Full time

IncubXperts is a Software Technology Services company. We focus on building Web solutions for Enterprises and Independent Software Vendors or Product companies.

To know more visit: www.incubxperts.com

Job Description

Role Summary

We are looking for a highly motivated Risk & Compliance Program Manager to strengthen our risk management framework, ensure regulatory compliance, and support scalable growth across fintech, banking, and payments operations. This role will partner with cross-functional teams to operationalize risk processes, oversee compliance programs, support audits, and build governance infrastructure that aligns with business and regulatory requirements.

Key Responsibilities

• Maintain and manage the enterprise risk register.
  
• Track risk acceptances, mitigation plans, and committee action items.
  
• Drive issue management, corrective action plans, and control testing activities.
  
• Ensure ongoing compliance with FinCEN, Nacha, PCI DSS, SOC 2, and other applicable regulations.
  
• Lead Business Impact Analysis (BIA) and Business Continuity Planning (BCP) initiatives.
  

Client Due Diligence & Access Controls

• Conduct client onboarding risk assessments and due diligence reviews.
  
• Manage client questionnaires, contractual risk reviews, and onboarding checkpoints.
  
• Monitor ACH limits, onboarding conditions, and client-specific compliance obligations.
  
• Standardize responses to client RFIs and due diligence requests.
  
• Partner with Security teams to strengthen access control governance and conduct periodic access reviews.
  

Regulatory Compliance & Policy Management

• Monitor and interpret regulatory changes related to BSA/AML, Nacha, OCC, FFIEC, GLBA, and other industry requirements.
  
• Translate regulatory requirements into actionable internal processes and controls.
  
• Ensure policies, procedures, and communications remain aligned with regulatory and client commitments.
  
• Support continuous improvement of compliance and governance programs.
  
• Embed risk assessments into product development and client onboarding workflows.
  
• Establish and maintain approval thresholds, exception management, and escalation processes.
  
• Track risk deviations, approvals, and acceptance records.
  
• Collaborate with Legal, Product, and Operations teams to ensure consistent risk-based decision-making.
  
• Lead audit preparation and readiness activities for SOC 2, PCI DSS, client audits, and compliance reviews.
  
• Maintain centralized audit documentation and evidence repositories.
  
• Coordinate compliance testing, remediation activities, and risk committee reporting.
  
• Strengthen vendor risk management processes through control assessments and ongoing monitoring.
  

Governance, Reporting & Infrastructure

• Develop and maintain Key Risk Indicators (KRIs), dashboards, and executive reporting.
  
• Prepare risk and compliance reports for leadership and board-level stakeholders.
  
• Partner with SalesOps and Legal teams to integrate risk controls into Salesforce and contract workflows.
  
• Design scalable, repeatable governance processes that support organizational growth.
  

Required Qualifications

• 5 to 8 years of experience in Risk, Compliance, Operations, or Governance roles within FinTech, Banking, Payments, or BaaS organizations.
  
• Strong understanding of regulatory compliance, risk management, vendor risk, audit readiness, and access control frameworks.
  
• Experience building and scaling risk or compliance programs across multiple business functions.
  
• Knowledge of:
  • BSA/AML
    
  • FinCEN
    
  • Nacha
    
  • PCI DSS
    
  • SOC 2
    
  • OCC
    
  • FFIEC
    
  • GLBA
    
• Experience with tools such as:
  • Power BI
    
  • JIRA
    
  • ServiceNow
    
  • Salesforce
    
• Strong analytical, organizational, and stakeholder management skills.
  

Requirements

Preferred Skills & Attributes

• Strong systems-thinking and process improvement mindset.
  
• Ability to manage multiple priorities in a fast-paced environment.
  
• Excellent communication and cross-functional collaboration skills.
  
• Proactive, resourceful, and results-oriented approach.
  
• Strong problem-solving and decision-making abilities.
  
• High level of integrity, accountability, and professionalism.
  
• Ability to build scalable governance frameworks and operational infrastructure.