Compliance and Risk Manager

Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. Our platform aligns employees, finance, and accounting with stronger controls, cleaner workflows, and continuous reconciliation to financial systems.

We partner with banks and other financial institutions to deliver modern commercial card, expense management, accounts payable, travel, and related payment capabilities.

Zact is seeking a Compliance & Risk Manager to own the day-to-day operation of key elements of our compliance program across audit, privacy, and financial-crime oversight.

This is a hands-on role responsible for coordinating Zact's SOC and PCI audits, managing compliance with GDPR and other applicable privacy laws, supporting compliance monitoring and testing, and overseeing Zact's responsibilities related to BSA, AML, and OFAC.

Because Zact distributes its platform through financial institutions, the BSA/AML/OFAC component of the role is primarily focused on monitoring and documenting the compliance activities of our reseller bank partners, confirming that assigned responsibilities are being performed, and supporting related audits, examinations, and due diligence reviews.

This role is not intended to serve as a bank's BSA Officer or perform the bank's core transaction-monitoring function. Instead, the Compliance & Risk Manager will ensure that Zact maintains appropriate oversight, documentation, escalation, and evidence regarding the compliance responsibilities performed by its financial institution partners.

The Compliance & Risk Manager will report to the Chief Compliance Officer and work closely with Security, Legal, Operations, Engineering, Finance, and our bank partners.

• →Bachelor's degree required or equivalent experience strongly demonstrating the competency.
• →5+ years of experience in compliance, risk management, audit, information security compliance, or a related field.
• →Experience working in banking, fintech, payments, or another regulated financial-services environment.
• →Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits.
• →Hands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws.
• →Hands-on experience with BSA/AML, OFAC, or financial-crime compliance in a banking, fintech, payments, or financial-services environment.
• →Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.
• →Experience managing audit evidence, control testing, findings, exceptions, and remediation activities.
• →Experience conducting or supporting compliance risk assessments, monitoring, or testing.
• →Ability to work directly with auditors, assessors, financial institutions, and internal control owners.
• →Strong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously.
• →Strong written communication and documentation skills.
• →Ability to translate regulatory and compliance requirements into practical operational processes.
• →Comfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution.

Preferred Qualifications

• →Experience working with bank partners where compliance responsibilities are shared between a technology provider and the financial institution.
• →Familiarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks.
• →Experience with compliance management, GRC, or audit-management platforms.
• →Relevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials.