Fintech Compliance & Risk Lead – Audit & Privacy

Zact Inc.; Sunnyvale (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Zact Inc. in Sunnyvale, CA seeks a Compliance & Risk Manager to own day-to-day oversight of SOC, PCI, GDPR privacy, and BSA/AML/OFAC programs. You will coordinate audits, maintain controls, and document evidence across bank partners and internal teams.

You will report to the Chief Compliance Officer and collaborate with Legal, Security, Operations, Engineering, and Finance to ensure ongoing compliance as the company scales in a fintech environment.

Qualifications

• Bachelor's degree required or equivalent experience.
• 5+ years in compliance, risk management, audit, or related field.
• Experience in banking, fintech, payments, or regulated financial-services.
• Experience coordinating SOC 1, SOC 2, PCI DSS audits.
• Hands-on experience with GDPR or U.S. privacy laws.
• Experience overseeing responsibilities by financial institutions or third parties.
• Ability to work with auditors, assessors, banks, and control owners.
• Strong organizational skills and deadline management.
• Excellent written communication and documentation.

Responsibilities

• Coordinate SOC 1 and SOC 2 audits, including planning, evidence collection, auditor requests, control-owner coordination, and remediation.
• Coordinate PCI DSS assessments and related compliance activities.
• Maintain audit calendars, evidence repositories, and control documentation.
• Work with control owners to ensure controls are performed and documented.
• Track audit findings, exceptions, and remediation items to completion.
• Serve as primary operational contact for external auditors and assessors.
• Maintain continuous audit readiness beyond formal assessments.
• Manage privacy compliance with GDPR and other applicable laws.
• Maintain privacy policies, data inventories, retention requirements, and supporting docs.
• Coordinate responses to privacy-related due diligence requests.
• Support privacy assessments, audits, and remediation activities.
• Monitor changes in privacy requirements and update controls accordingly.
• Manage oversight program for BSA, AML, and OFAC activities performed by reseller bank partners.
• Confirm bank partners maintain BSA/AML and OFAC programs and responsibilities.
• Collect and review certifications, policies, audit reports, testing results, or evidence from banks.
• Maintain documentation of Zact's ongoing oversight of partner activities.
• Identify gaps or missing evidence and coordinate follow-up with partners and stakeholders.
• Support audits, examinations, and due diligence reviews involving BSA/AML and OFAC oversight.
• Coordinate escalation of material compliance issues with the Chief Compliance Officer.
• Conduct periodic compliance risk assessments across regulatory areas.
• Develop and maintain a risk-based compliance monitoring and testing program.
• Perform or coordinate periodic testing to confirm controls operate as intended.
• Identify, document, and track compliance issues through remediation.
• Monitor changes in laws and coordinate policy updates.
• Maintain open findings, remediation plans, owners, and target completion dates.
• Maintain compliance policies, procedures, control documentation, and supporting evidence.
• Coordinate regulatory, customer, and third-party audits and assessments.
• Track obligations, testing schedules, findings, remediation plans, and deadlines.
• Serve as primary coordinator for bank and prospective customer due diligence requests.
• Prepare compliance reporting for the Chief Compliance Officer, including findings and risks.
• Work across the organization to ensure compliance requirements are understood and implemented.
• Identify opportunities to improve and automate compliance processes as the company scales.

Skills

Compliance & risk management

Audits coordination

GDPR & privacy laws

BSA/AML/OFAC oversight

Strong written comms

Education

Bachelor's degree

Tools

GRC platforms

Job description

Zact Inc. in Sunnyvale, CA seeks a Compliance & Risk Manager to own day-to-day oversight of SOC, PCI, GDPR privacy, and BSA/AML/OFAC programs. You will coordinate audits, maintain controls, and document evidence across bank partners and internal teams.

You will report to the Chief Compliance Officer and collaborate with Legal, Security, Operations, Engineering, and Finance to ensure ongoing compliance as the company scales in a fintech environment.