Compliance and Risk Manager

Zact

. Coordinate Zact's annual SOC 1 and SOC 2 audit processes, including audit planning, evidence collection, auditor requests, control-owner coordination, and remediation activities .

Posted 10/24/2026full-timeRemote • California • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in compliance management, including SOC 1, SOC 2, PCI DSS, GDPR, and BSA/AML regulations. Proven ability to coordinate audits, manage compliance documentation, and ensure operational readiness across financial services environments.

Highest-signal resume keywords

SOC 1 CoordinationSOC 2 CoordinationPCI DSS ComplianceGDPR ComplianceBSA/AML Oversight

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Risk AssessmentAudit Evidence ManagementControl TestingRegulatory ComplianceDocumentation Management

Soft Skills

Strong Organizational SkillsWritten Communication SkillsAbility to Work with Auditors

Tools & Technologies

GRC PlatformsAudit Management Platforms

Certifications & Qualifications

CAMSCIPPCRCMCISA

Industry Keywords

Financial ServicesFintechPaymentsRegulated EnvironmentCompliance Frameworks

About the role

Key responsibilities & impact

Coordinate Zact's annual SOC 1 and SOC 2 audit processes, including audit planning, evidence collection, auditor requests, control-owner coordination, and remediation activities
Coordinate PCI DSS assessments and related compliance activities
Maintain audit calendars, evidence repositories, control documentation, and supporting records
Ensure required controls are performed and appropriately documented throughout the year
Track audit findings, exceptions, and remediation items through completion
Serve as a primary operational contact for external auditors and assessors
Maintain continuous audit readiness
Manage operational compliance with GDPR and other applicable privacy laws and regulations
Maintain and coordinate privacy policies, procedures, data inventories, retention requirements, and supporting documentation
Incorporate privacy requirements into Zact's products and operations
Coordinate responses to privacy-related customer and bank due diligence requests
Support privacy assessments, audits, and remediation activities
Monitor changes in applicable privacy requirements and coordinate updates to controls, policies, and procedures
Manage Zact's oversight program for BSA, AML, and OFAC activities performed by reseller bank partners
Confirm that bank partners maintain appropriate BSA/AML and OFAC programs and perform assigned responsibilities
Collect and review certifications, policies, audit reports, testing results, and other evidence from bank partners
Maintain documentation demonstrating ongoing oversight of reseller bank compliance activities
Identify gaps, exceptions, or missing evidence and coordinate follow-up
Support audits, examinations, and due diligence reviews involving Zact's BSA/AML and OFAC oversight responsibilities
Coordinate escalation of material compliance issues with the Chief Compliance Officer
Conduct periodic compliance risk assessments
Develop and maintain a risk-based compliance monitoring and testing program
Perform or coordinate periodic testing of compliance controls
Identify, document, escalate, and track compliance issues through remediation and closure
Monitor changes in laws, regulations, and compliance frameworks and coordinate updates
Maintain records of open findings, remediation plans, owners, and target completion dates
Maintain compliance policies, procedures, control documentation, and supporting evidence
Coordinate regulatory, customer, and third-party compliance audits and assessments
Track compliance obligations, testing schedules, findings, remediation plans, and deadlines
Coordinate bank and prospective customer compliance due diligence requests
Prepare compliance reporting for the Chief Compliance Officer
Work across the organization to ensure compliance requirements are understood and implemented
Identify opportunities to improve and automate compliance processes as the company scales

Requirements

What you’ll need

Bachelor's degree required or equivalent experience strongly demonstrating the competency
5+ years of experience in compliance, risk management, audit, information security compliance, or a related field
Experience working in banking, fintech, payments, or another regulated financial-services environment
Experience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits
Hands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws
Hands-on experience with BSA/AML, OFAC, or financial-crime compliance in a banking, fintech, payments, or financial-services environment
Experience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties
Experience managing audit evidence, control testing, findings, exceptions, and remediation activities
Experience conducting or supporting compliance risk assessments, monitoring, or testing
Ability to work directly with auditors, assessors, financial institutions, and internal control owners
Strong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously
Strong written communication and documentation skills
Ability to translate regulatory and compliance requirements into practical operational processes
Comfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution
Preferred: Experience working with bank partners where compliance responsibilities are shared between a technology provider and the financial institution
Preferred: Familiarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks
Preferred: Experience with compliance management, GRC, or audit-management platforms
Preferred: Relevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials

Benefits

Comp & perks

Remote work arrangement
Opportunity to work with a fintech innovator and financial institution partners
Hands-on ownership of compliance program operations
Collaboration with Security, Legal, Operations, Engineering, Finance, and bank partners