Compliance & Risk Lead — Fintech (SOC 1/2, PCI, GDPR)

Zact; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. We operate in a fast-moving environment where you own initiatives and collaborate across Security, Legal, Operations, and Engineering.

We are seeking an experienced compliance professional in the United States who will lead audits and regulatory programs, partner with auditors and regulators, and help scale our compliance processes as we grow.

Qualifications

• Bachelor's degree with 5+ years in compliance, risk, audit, or information security compliance in fintech or banking.
• Experience with SOC 1/2, PCI DSS, GDPR, and BSA/AML/OFAC frameworks, and ability to work directly with auditors and regulators.

Responsibilities

• Coordinate annual SOC 1 and SOC 2 audits, PCI DSS assessments, and maintain audit evidence and control documentation.
• Manage operational GDPR compliance and privacy policies, and support privacy assessments and audits.
• Oversee BSA/AML/OFAC responsibilities of reseller bank partners, collecting certifications and evidence, and supporting audits.

Skills

Compliance

Risk management

Audit

Information security

Education

Bachelor's degree

Job description

Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. We operate in a fast-moving environment where you own initiatives and collaborate across Security, Legal, Operations, and Engineering.

We are seeking an experienced compliance professional in the United States who will lead audits and regulatory programs, partner with auditors and regulators, and help scale our compliance processes as we grow.