Regulatory Compliance Specialist (Lawyer)

We are a leading financial platform, building the future of payments, shopping, and banking—a world where consumers and merchants can transact effortlessly, grow together and where we create abundance and generate pride in them. Today, we serve over 2 million customers and partner with more than 20,000 merchants, making Addi Colombia’s fastest-growing marketplace.

We provide banking solutions (deposits, payments, unsecured credit) and commerce services (e-commerce, marketing) using state-of-the-art technology, bridging the financial gap for millions and redefining how people experience financial freedom. As the country’s leading Buy Now, Pay Later provider, we have secured regulatory approval to operate as a bank, unlocking even greater opportunities for our customers. In the past year, we have also achieved profitability, reinforcing the strength of our business model and our ability to scale sustainably.

Our mission has earned the trust of world-class investors, including Andreessen Horowitz, Architect Capital, GIC, Goldman Sachs, Greycroft, Monashees, Notable Capital, Quona Capital, Union Square Ventures, Victory Park Capital, and more, who back our vision for the future. With their support, we are not just growing—we are transforming Latin America’s financial ecosystem and shaping the next generation to shop, pay, and bank in Colombia.

But what truly sets us apart is how we build. We are a conscious company, driven by deep experience in scaling technology, services and products, and we live by our values every day.

This is where you come in. Below, you’ll find what this role is all about—the impact you’ll drive, the challenges you’ll tackle, and what it takes to thrive at Addi. If you’re ready to be part of something big, keep reading.

Own the design, execution, and institutional development of Addi CF's compliance monitoring framework — leading control testing, SFC regulatory engagement, normative analysis, and the ethics program — ensuring the compliance function and its roles are built, maintained, and operated with full structural resilience, independent of any single person.

• →

  Own and execute the recurring Phase 0 monitoring and control testing plan across active risk management systems (SARLAFT, SAC), delivering periodic reports with zero delays against the approved schedule. Failure to sustain this cadence creates a critical single point of failure in the compliance function and directly exposes Addi CF to regulatory risk.

• →

  Independently own and manage low-to-medium complexity SFC requirements registered in SIRI, ensuring 100% of responses are delivered within regulatory deadlines — including during periods of management absence or transition.

• →

  Lead regulatory tracking and normative matrix updates, ensuring 100% of relevant new regulations are incorporated before their effective date — positioning Addi CF ahead of the regulatory curve rather than reactive to it.

• →

  Build and maintain a verifiable, audit-ready compliance evidence repository (PETCD, controls, SFC correspondence), ensuring it is inspection-ready at any point in time — with no dependency on manual preparation ahead of each review.

• →

  Lead the implementation of the conduct risk pillar once the corresponding SFC circular comes into force, ensuring Addi CF is fully compliant from the regulation's day-one effective date.

• Hands-on work with SARLAFT, SARO, SARC, SARL, SARM, or equivalent within a SFC-supervised entity — not in adjacent roles that touch risk tangentially.

• 2–4 years of specific experience in operational, legal, or compliance risk at a bank, compañía de financiamiento, or regulated fintech.

• Working knowledge of the Circular Básica Jurídica and risk matrix logic (identification, assessment, control, monitoring).

• Lawyer or equivalent with legal training who identifies legal/regulatory risk before it materializes and designs mitigation strategies — not just interprets norms.

• Approaches every decision from a risk management lens, not a business advisory one.

• Flags product or process implications (e.g., SARLAFT exposure) during design, not after launch, and proposes the control framework to address them.

• Designs, runs, and delivers risk controls, tests, and regulatory reports without ongoing operational supervision.

• Holds and defends technical positions with the regulator without requiring management rewrite.

• Manages SFC requirements in SIRI from intake to submission independently — including during periods of management absence or transition.

• Translates risk findings into verifiable procedures and traceable evidence with zero ambiguity.

• Handles sensitive information (ethics hotline, conflicts of interest) with sound judgment and full confidentiality.

• Maintains compliance evidence repositories (PETCD, controls, SFC correspondence) in audit-ready state at all times — no last-minute preparation sprints.

• Formal certifications in risk or compliance (e.g., CAMS, CRCP, or equivalent).

• Prior experience at a regulated fintech, neobank, or high-growth startup where regulatory rigor and execution speed coexist.

• Comfortable operating in AI-assisted tools (Asana, Notion, or equivalent) to manage regulatory processes efficiently.

• Uses automation for tasks like SIRI triage or normative tracking, reducing reliance on manual processes..

We believe in a fast, transparent, and engaging hiring experience that allows both you and us to determine if there's a great fit. Here’s what our process looks like:

• Step 1: People Interview (30 min)
  A conversation with a recruiter to get to know you, your experience, and what you're looking for. We’ll also share more about Addi, our culture, and the role.

• Step 2: Initial Interview (45 min)
  A more in-depth conversation with the hiring manager, where we explore your skills, experience, and problem-solving approach. We want to understand how you think.

• Step 3: Deep Dive Interviews (30 min)
  You'll meet future colleagues and cross-functional team members to get a feel for how we work together. We’re looking for strong contributors and cultural fits, so bring your questions, too!

• Step 4: Case Study (3-5 Days)
  You may receive a real-world challenge or case study to complete. This is a chance to showcase your expertise and how you approach key problems relevant to the role.

• Step 5: Co-Founder Interview
  If there’s a strong match, you’ll have a final conversation with our Founder to align on expectations, cultural fit and ensure mutual excitement. From there, we’ll move quickly to an offer and discuss next steps.

We value efficiency and respect for your time, so we aim to complete the process as quickly as possible. Our goal is to make this experience insightful and exciting for you, just as much as it is for us. Regardless of the outcome, we are committed to always providing feedback, ensuring that you walk away with valuable insights from your experience with us.