Fintech Compliance & Risk Lead (SOC/PCI, GDPR, AML)

Zact Inc.; Oregon; Hybrid; USD 120,000 - 170,000; Full time

Job summary

ZactZact is seeking a Compliance & Risk Manager to own the day-to-day operation of our compliance program across audit, privacy, and financial-crime oversight. This hands-on role coordinates SOC and PCI audits, oversees GDPR/privacy controls, and aligns BSA/AML/OFAC responsibilities with partners and internal teams.

Reporting to the Chief Compliance Officer, you will work with Security, Legal, Operations, Engineering, and Finance to maintain documentation, evidence, and escalation paths as Zact

Qualifications

• Bachelor's degree required or equivalent experience strongly demonstrating the competency.
• 5+ years of experience in compliance, risk management, audit, information security compliance, or a related field.
• Experience working in banking, fintech, payments, or another regulated financial-services environment.
• Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits.
• Hands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws.
• Hands-on experience with BSA/AML, OFAC, or financial-crime compliance in a banking, fintech, payments, or financial-services environment.
• Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.
• Experience managing audit evidence, control testing, findings, exceptions, and remediation activities.
• Experience conducting or supporting compliance risk assessments, monitoring, or testing.
• Ability to work directly with auditors, assessors, financial institutions, and internal control owners.
• Strong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously.
• Strong written communication and documentation skills.
• Ability to translate regulatory and compliance requirements into practical operational processes.
• Comfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution.

Responsibilities

• Coordinate SOC 1 and SOC 2 audit processes, including planning, evidence collection, auditor requests, control-owner coordination, and remediation.
• Coordinate PCI DSS assessments and related compliance activities.
• Maintain audit calendars, evidence repositories, control documentation, and supporting records.
• Work with internal control owners to ensure required controls are performed and documented.
• Track audit findings, exceptions, and remediation items through to completion.
• Serve as a primary operational contact for external auditors and assessors.
• Support ongoing audit readiness beyond just pre-assessment moments.
• Manage privacy compliance with GDPR and other applicable privacy laws and regulations.
• Coordinate privacy policy updates, data inventories, retention requirements, and supporting documentation.
• Collaborate with Legal, Security, Engineering, and business teams to embed privacy into products and operations.
• Coordinate responses to privacy-related customer and bank due diligence requests.
• Support privacy assessments, audits, and remediation activities.
• Monitor changes in privacy requirements and update controls and procedures.

Skills

Regulatory compliance

Risk management

Audits

Privacy governance

Documentation

Education

Bachelor's degree or equivalent in a relevant field

Tools

SOC 1/2

PCI DSS

GDPR

BSA/AML

Job description

ZactZact is seeking a Compliance & Risk Manager to own the day-to-day operation of our compliance program across audit, privacy, and financial-crime oversight. This hands-on role coordinates SOC and PCI audits, oversees GDPR/privacy controls, and aligns BSA/AML/OFAC responsibilities with partners and internal teams.

Reporting to the Chief Compliance Officer, you will work with Security, Legal, Operations, Engineering, and Finance to maintain documentation, evidence, and escalation paths as Zact