Fintech Compliance & Risk Leader | SOC, Privacy & AML

Zact; Sunnyvale (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Zact is seeking a Compliance & Risk Manager to own day-to-day operations of its compliance program across audit, privacy, and financial-crime oversight. This hands-on role coordinates SOC 1 and SOC 2 audits, PCI DSS assessments, GDPR privacy obligations, and BSA/AML/OFAC oversight with reseller bank partners.

You will report to the Chief Compliance Officer and collaborate with Security, Legal, Operations, Engineering, and Finance to build scalable controls and proactive risk management across

Qualifications

• Bachelor's degree required or equivalent experience.
• 5+ years of experience in compliance, risk management, audit, information security compliance, or a related field.
• Experience in banking, fintech, payments, or another regulated financial-services environment.
• Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits.
• Hands-on experience with GDPR and/or U.S. privacy laws.
• Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.

Responsibilities

• Coordinate SOC 1 and SOC 2 audit planning, evidence collection, auditor requests, control-owner coordination, and remediation activities.
• Coordinate PCI DSS assessments and related compliance activities.
• Maintain audit calendars, evidence repositories, control documentation, and supporting records.
• Work with internal control owners to ensure required controls are performed and appropriately documented throughout the year.
• Track audit findings, exceptions, and remediation items through completion.
• Serve as a primary operational contact for external auditors and assessors.
• Help maintain continuous audit readiness.

Skills

Compliance management

Audit coordination

Regulatory knowledge

Risk assessment

Stakeholder communication

Education

Bachelor's degree

Tools

GRC software

Job description

Zact is seeking a Compliance & Risk Manager to own day-to-day operations of its compliance program across audit, privacy, and financial-crime oversight. This hands-on role coordinates SOC 1 and SOC 2 audits, PCI DSS assessments, GDPR privacy obligations, and BSA/AML/OFAC oversight with reseller bank partners.

You will report to the Chief Compliance Officer and collaborate with Security, Legal, Operations, Engineering, and Finance to build scalable controls and proactive risk management across