Вакансии

Location: Mexico Workplace: remote About the Opportunity We are seeking experienced customs and trade compliance professionals to support a project focused on Mexican import/export regulations, tariff classification, and customs compliance.  This project involves reviewing realistic customs scenarios, documenting how experienced professionals approach complex regulatory decisions, developing expert reference solutions, and validating technical analyses. The resulting expert materials will support the development and evaluation of advanced AI systems for professional workflows.  This is flexible, project-based consulting work intended for professionals who are actively practicing or have recent hands-on experience in Mexican customs and trade compliance.  Project Details:- Engagement Type: Independent Contractor / Project-Based (Flexible, Part-Time)  Location:Remote (Mexico)  Compensation: $12/hr  Scope of work: 10 hrs-12 hrs Weekly What You’ll Do Review realistic import and export scenarios involving Mexican customs regulations. Develop expert reference solutions for customs classification and trade compliance tasks. Document the reasoning behind customs decisions and regulatory interpretations. Review and validate alternative solutions for technical accuracy, completeness, and regulatory compliance. Identify missing information, incorrect assumptions, or inappropriate decision sequences. Reference applicable regulations where appropriate (e.g., Ley Aduanera, LIGIE, TIGIE, NOMs, RRNA, T-MEC). Collaborate with our project team to ensure expert knowledge is accurately represented. Required Qualifications 3+ years of recent, hands-on experience in customs brokerage, tariff classification, trade compliance, import/export operations, or a related field. Current or recent (within the past two years) practical experience with Mexican customs regulations and procedures. One or more of the following professional backgrounds: Licensed Agente Aduanal Clasificador Arancelario Trade Compliance Specialist Customs Compliance Specialist Import/Export Compliance Professional Customs or Trade Consultant Professional fluency in Spanish. Ability to clearly explain and document the reasoning behind regulatory and classification decisions. Preferred Experience Experience in one or more of the following areas is highly desirable: Tariff classification (Clasificación Arancelaria) LIGIE / TIGIE T-MEC / USMCA NOMs and RRNA Customs valuation Rules of origin Pedimentos VUCEM Customs audits or trade compliance reviews Experience using official Mexican customs resources (e.g., ANAM, SAT, SNICE, VUCEM) is preferred. Experience with commercial customs software is welcome but not required. Working proficiency in English sufficient to understand project instructions and communicate with the project team. Knowledge of U.S. customs regulations, HTS classification, or cross-border Mexico-U.S. trade operations is a plus. Why This Project Matters? Your expertise will help document how experienced customs professionals solve complex regulatory problems in practice. By capturing expert workflows and decision-making, you will contribute to the development of high-quality reference materials that support advanced AI systems for professional customs and trade compliance.

Location: Amman, Jordan We are looking to hire a skilled GRC officer who will be responsible for assessing the effectiveness, efficiency, and security of our IT systems, while ensuring compliance against industry standards, best practices, and internal processes and procedures. As part of his duties, he will be responsible for overseeing compliance with and reporting to Management on how to mitigate possible risk. Responsibilities Develop, review, monitor, and implement the company's information security management system, including processes, policies, systems, and procedures, and continuously improve the ISMS to keep up with changing regulatory requirements and industry best practices. Develop, review, and monitor the Firm’s business continuity & disaster recovery plan and identify potential risks areas and ensure steps are taken to mitigate same. Investigate and report violations of processes, procedures and regulatory standards across the operations of the Firm including but not limited to engineering and operations departments with effective action plans in response to discoveries and compliance violations. Build an internal audit plan and schedule to cover all aspects as per the management needs. Prepare internal audit reports detailing findings, recommendations, and corrective actions. Plan and conduct regular audits and assessments to identify areas of non-compliance and develop corrective action plans. Monitor and report on compliance issues, including data breaches, security incidents, and regulatory changes, and take appropriate actions to address them. Ensure that compliance-related issues are communicated effectively to the leadership team and the board of directors. Provide guidance and training employees on security & compliance-related topics, based on the best practices and industry standards. Foster a culture of compliance within the organization, where all employees understand the importance of compliance and their role in maintaining it. Liaise with external auditors and regulators as necessary to demonstrate compliance with relevant laws and regulations. Collaborate with cross-functional teams to ensure that compliance & ISMS requirements are integrated into all aspects of software development, project management and operations, etc. Migrate, manage, and excel the GRC tasks to a well-known GRC tool. Perform and manage an enterprise risk assessment across the organization, based on a defined risk management policy, and procedure. Work closely with all departments on risk management tasks, including identification & mitigation of risks. Work closely with all departments on their new tools and software’s to make sure it follows ProgressSoft vision, policies, and to reflect on any required changes to the current processes and internal controls. Ability to read and understand third party agreements from Clients & assess the level of risk acceptance towards security terms and conditions. Ability to perform third party risk assessments (Vendor & Client). Understand the internal workflows and procedures, assess any areas for improvement. Requirements : Bachelor’s degree in computer science or any related field. Minimum of 1-2 years’ experience in areas related to Governance, Compliance Officer, IT Auditor or Information Technology Risk Management. Strong knowledge of IT auditing principles, practices, and frameworks (e.g., GRCP, COBIT, ISO 27001, or related discipline). Familiarity with security frameworks and compliance requirements (e.g., ISO27001, GDPR, PADSS). Familiarity of cybersecurity & compliance regulations across Middle East countries (e.g. Jordan/ UAE/ Oman/ Kuwait/ Qatar etc.). Proficiency in risk and audit tools and methodologies. Provide insights for informed decision-making. Excellent analytical, critical thinking and problem-solving skills. Excellent reporting and presentation skills. Exposure to IT Governance and its activities. Ability to work independently and as part of a team. Ability to multi-task, pay attention to details and meet deadlines. Performance goal/KPI Ensure staff members comply with all laid down processes and procedures. Presentation to the top management and as may be required. Ensure Staff members comply with the of technology at all levels. Submission of timely and regular reporting to Management on the status of progress and achievements.

Location: Greenwich, Connecticut, United States About the Role iCapital is looking for a Regulatory Reporting Associate to join the Regulatory and Compliance team. This individual will work closely with the Vice President of Regulatory Reporting and the Co-Chief Compliance Officers on a variety of compliance matters, most specifically those pertaining to regulatory reporting. Responsibilities · Liaise with relevant business teams to collect and aggregate data and prepare for submission various U.S. and international regulatory filings including, Form ADV, Form PF, BE-185, Form SLT, Form 45-106F1, and Regulation D and blue-sky filings. · Develop, update, and implement procedures, as needed, to ensure robust processes for regulatory filings. · Monitor and analyze industry-wide compliance initiatives and federal, state, and non-U.S. regulatory developments to determine how such developments may impact iCapital’s activities and reporting requirements, as well as discuss such changes with senior management. · Inform senior management of any material regulatory or operational changes. · Collaborate with internal and external stakeholders to improve data quality, processes, operational readiness, scalability, and efficiency. · Assist with ad-hoc compliance-related matters. Qualifications · 2-5 years of registered investment adviser experience, preferably in preparing regulatory filings · Experience with alternative investments and understanding of compliance restrictions around private placements, including SEC filings for private funds · Comfortable leading discussions and initiatives with senior internal and external stakeholders · Able to manage multiple deadlines and projects · Organized and detailed oriented with big picture capability · Strong interpersonal and leadership skills · Willingness to learn new topics and work in an evolving business environment · Proficiency in Microsoft Excel and Microsoft Word and an aptitude to quickly pick up additional technologies Benefits The base salary range for this role is $ 70,000 to $ 95,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE The Transaction Monitoring (TM) Compliance Manager is a specialized financial crime risk and regulatory oversight role within the Second Line of Defence (2LoD) Financial Crime Compliance department. The successful candidate is responsible for providing independent oversight, objective evaluation, and compliance challenges regarding the efficacy of the firm's Transaction Monitoring framework. Acting as a Second Line Subject Matter Expert (SME), the individual defines the regulatory envelope, assesses TM risk coverage, and reviews the governance, methodologies, and documentation underpinning detection mechanisms. This role does not own control execution or technical solution design; instead, it provides independent assurance to ensure that the firm’s monitoring practices remain aligned with defined risk appetite, internal policies, and global regulatory expectations (AML/CTF/CPF). Key Responsibilities: 1. Compliance Oversight in Risk Assessment & Horizon Scanning - Independent Review: Lead the ongoing 2LoD evaluation and challenge of the Compliance Risk Assessments (including EWRA and Product Risk Assessments) to ensure they accurately reflect current transaction data, typologies, and product utilization trends. - Regulatory Surveying & Horizon Scanning: Proactively monitor, survey, and analyze shifts in the global regulatory landscape, financial crime trends, and regulatory enforcement actions to ensure the firm's TM Compliance risk assessment framework remains comprehensive and defensible. - Gap Assurance: Evaluate the mapping of financial crime typologies against active transaction monitoring coverage to independently identify and escalate potential tracking gaps to senior management. 2. Independent Compliance Challenge & Assurance Framework - Segmentation & Calibration Challenge: Provide independent, 2LoD challenge to data-driven customer segmentation methodologies executed by the First Line (1LoD), verifying alignment with merchant risk profiles. - Compliance Oversight in Tuning & Optimization: Review and evaluate the methodologies, statistical testing parameters, and documentation for periodic "Below-the-Line" (BTL) and "Above-the-Line" (ATL) testing performed by the First Line to ensure robust governance. - Residual Risk Opining: Formulate independent compliance opinions regarding residual risk acceptance, providing formal advisory input to governance forums and the Global MLROs. 3. Governance, Risk, & Reporting - Model Risk Governance: Participate in the compliance review of TM systems and model validation exercises, independently assessing the transparency, logic, and regulatory defensibility of detection models against applicable guidance (e.g., FCA guidance on model risk management). - Strategic Alignment: Provide regulatory compliance support to the Head of TM to assist in aligning roadmap initiatives with the compliance maturity framework. - Stakeholder Engagement: Engage with cross-functional stakeholders across lines of defense to communicate compliance requirements and support the adherence to established TM standards. - Governance & Escalation Paths: Support the enhancement of the TM compliance governance framework to facilitate the structured, independent escalation of risk metrics to senior management. - Metrics & KRI Oversight: Assist in the production of 2LoD Management Information (MI) and Key Risk Indicators (KRIs) to track the effectiveness of the compliance oversight posture for the Head of TM and Global MLRO. 3. Data Integrity & Alert Lifecycle Assurance - Data Lineage Assurance: Review documentation regarding data lineage, integrity, and completeness for feeds ingested into the monitoring architecture to ensure compliance with regulatory standards. - Lifecycle Evaluation: Evaluate the end-to-end alert workflow governance, risk scoring frameworks, and prioritization mechanics to ensure high-risk alerts adhere to compliant escalation paths. - Feedback Loops: Analyze high-level alert outcomes and disposition trends to provide compliance feedback loops to technical teams, supporting iterative improvements in the quality of Suspicious Activity Reports (SARs). QUALIFICATIONS & EXPERIENCE - Experience: Typically 5+ years of experience within Financial Crime Compliance, with a specific focus on the independent oversight, assurance, or evaluation of Transaction Monitoring frameworks within a regulated PSP, FinTech, or financial institution. - 2LoD Competency: Proven experience operating within a Second Line of Defence capacity, demonstrating the ability to independently challenge technical teams, data models, and threshold tuning documentation objectively. - Regulatory Knowledge: Deep understanding of the UK Money Laundering Regulations (MLRs), JMLSG Guidance, and international FATF standards. - Systems & Data Literacy: Familiarity with data analysis methodologies, data visualization tools (e.g., Looker, Tableau), or basic query languages (e.g., SQL) sufficient to independently evaluate data testing outputs, methodologies, and audit trails. - Education & Professional Certifications: A Bachelor’s degree in Law, Finance, Criminology, or a related discipline, or equivalent professional experience. Professional certifications from recognized bodies (e.g., ICA International Diploma in AML, ACAMS) are highly regarded. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Задачи: — Точно и внимательно проводить проверку биографических данных (background checks), обеспечивая соответствие платформы Instacart местным, государственным и федеральным нормативам. — Расследовать и своевременно разрешать внутренние и внешние эскалации, связанные с проверками биографических данных, поддерживая безопасность и стабильность платформы для всех пользователей. — Выявлять, исследовать и полностью решать проблемы с проверками биографических данных, а также выявлять и реализовывать возможности для улучшения процессов. — Выполнять повторяющиеся операционные задачи с точностью и вниманием к деталям, выявляя возможности для повышения эффективности и масштабируемости команды. Требования: — 1-2+ года профессионального опыта, желательно в быстро меняющейся среде, связанной с проверками биографических данных, обработкой данных или поддержкой. — Сильные устные и письменные коммуникативные навыки. — Позитивное отношение и способность работать в условиях постоянно меняющихся и динамичных операционных условий. — Способность быстро принимать критические решения по чувствительным вопросам в быстром темпе. — Работа с высоким уровнем конфиденциальности. — Готовность работать по выходным и праздничным дням. Условия: — Удалённая работа с гибким графиком в рамках политики Flex First. — Конкурентоспособная заработная плата, зависящая от места постоянной работы кандидата. — Для кандидатов из США указаны ориентировочные почасовые ставки в долларах США в зависимости от штата. Дополнительно: — Instacart предоставляет конкурентоспособные компенсации и льготы в каждом регионе, где работают сотрудники. — Вакансия ориентирована на обеспечение безопасности и стабильности платформы Instacart для покупателей и клиентов.

Location: Yerevan, Armenia Description We are seeking a detail-oriented and proactive InfoSec Compliance Operations Specialist to support the implementation and ongoing operation of the organization’s Information Security governance, compliance, policy, and certification activities. This is a hands-on, execution-focused role. The specialist will assist with maintaining policies and procedures, collecting and organizing compliance evidence, supporting audits and certifications, updating Information Security documentation, monitoring assigned actions, and coordinating routine communications with internal and external stakeholders. The role does not include formal management responsibility, strategic ownership of the Information Security program, approval authority, or independent decision-making regarding risk acceptance, policy approval, or compliance exceptions. Responsibilities Support the implementation and ongoing operation of Information Security governance, compliance, and ISMS activities Maintain compliance documentation, control matrices, risk registers, evidence repositories, corrective-action trackers, and related records Collect, review, organize, and maintain evidence for ISO/IEC 27001, PCI DSS, internal audits, external assessments, and certification activities Support the preparation, review, publication, version control, and periodic update of Information Security policies, standards, procedures, and guidelines Track compliance gaps, audit findings, risk-treatment actions, remediation activities, responsible owners, and completion deadlines Support internal and external audits, readiness assessments, control reviews, and certification activities Prepare compliance reports, audit updates, policy summaries, risk documentation, meeting materials, and management-review content Assist with maintaining the Information Security risk register, control inventory, Statement of Applicability, and supporting documentation Support customer security questionnaires, third-party assessments, and routine coordination with IT, Legal, Procurement, Compliance, and business teams Follow up with responsible stakeholders on outstanding evidence, document reviews, corrective actions, and compliance deadlines Requirements Relevant education or professional experience in Information Security, cybersecurity, compliance, risk management, audit, policy administration, or a related field Strong understanding of Information Security governance, risk, compliance, internal controls, and standards such as ISO/IEC 27001 or PCI DSS Experience preparing, reviewing, updating, or maintaining policies, procedures, compliance records, or audit documentation Strong documentation, business-writing, communication, organizational, and stakeholder-coordination skills Ability to manage multiple deadlines, follow established procedures, work with technical and non-technical teams, and handle confidential information appropriately

Location: Europe / Asia Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation. About You You are a detail-oriented self-starter with a strong interest in regulatory compliance, digital assets, and AI. You are comfortable researching unfamiliar regulatory topics, organizing complex information, and producing clear first drafts. You are eager to learn how licensing applications and compliance reviews work in practice and can support both structured audit requests and fast-changing client-facing needs. About the Role You will support the Engineering team in regulatory research, licensing analysis, AI output review, and client-deliverable preparation. You will work with client-facing teams, compliance reviewers, and Engineering to organize regulatory knowledge, prepare initial drafts, and convert recurring compliance work into reusable mappings, templates, and workflows. All material regulatory conclusions and client deliverables will be reviewed by an experienced compliance professional. Responsibilities Research and summarize regulatory frameworks and licensing requirements. Support licensing and regulatory-readiness projects, including applicability research, gap analysis, evidence requests, policy review, and application-document preparation. Organize regulatory requirements into structured modules, evidence categories, checklists, and mappings. Review AI outputs for factual consistency, source traceability, missing information, and formatting issues. Prepare initial drafts of compliance analyses, evidence guidance, client reports, pitch-deck content, and review materials. Support the maintenance of regulation-to-service mappings, evidence checklists, and submission-material reuse mappings. Organize customer-provided materials and identify potential evidence gaps for reviewer confirmation. Record reviewer feedback and update templates, evaluation cases, and compliance knowledge assets. Support coordination and request tracking across client-facing teams, compliance reviewers, and Engineering. Escalate unclear regulatory interpretations and unsupported conclusions to experienced reviewers. Requirements Current enrollment in or recent graduation from a program in law, finance, accounting, risk management, public policy, business, computer science, or a related field. Strong research, analytical, and structured-writing skills. Strong attention to detail, particularly when reviewing regulatory sources, citations, and customer materials. Ability to organize complex information into clear checklists, summaries, presentations, and reports. Ability to manage multiple assignments and meet deadlines. Strong written and spoken English; professional Chinese proficiency is preferred but not required. Interest in digital-asset regulation, financial compliance, licensing, or AI-assisted compliance workflows. Familiarity with digital-asset regulation, VASP licensing, or similar regulatory frameworks is preferred. Previous internship, coursework, or project experience in compliance, law, audit, fintech, digital assets, or regulatory research is preferred. Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review is preferred. This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.

Location: Europe / Asia Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation. About You You are a hands-on compliance professional who understands how regulatory frameworks and licensing applications work from initial scoping through final submission readiness. You can turn complex regulations into clear guidance and client deliverables, manage both structured audit requests and fast-changing BD needs, and know when an issue requires escalation to senior Compliance or Legal. About the Role You will be the first-line compliance owner for AI outputs and related client deliverables. You will support stakeholder groups including client-facing teams and commercial services. You will turn the raw AI output into accurate and usable deliverables, and work as/with Engineering to convert recurring compliance work into reusable workflows and knowledge assets. Responsibilities Analyze and decompose regulatory frameworks and licensing requirements. Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking. Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability. Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports. Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables. Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows. Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal. Requirements 3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm. Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project. Strong understanding of regulatory analysis, evidence review, and licensing documentation. Ability to produce clear guidance, mappings, presentations, and client reports. Strong client communication and cross-functional project-management skills. Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality. Strong written and spoken English; professional Chinese proficiency is preferred but not required. Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred. Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review. This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.

Location: New York, NY Workplace: OnSite ABOUT THE COMPANY Rain makes the next generation of payments possible across the globe. We’re a lean and mighty team of passionate builders and veteran founders. Our infrastructure makes stablecoins usable in the real-world by powering card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. You will have the opportunity to deliver massive impact at a hypergrowth company that is funded by some of the top investors in fintech, crypto, and SaaS, including ICONIQ, Sapphire Ventures, Norwest, Galaxy Ventures, Lightspeed, Khosla, and several more. If you’re curious, bold, and excited to help shape a borderless financial future, we’d love to talk. Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. About the Role We are looking for a sharp, motivated Compliance Analyst to join our Compliance team with a primary focus on transaction monitoring, alert review, and case investigation. This is a do-er role - you will be working the alert queue daily, conducting investigations, making SAR recommendations, and contributing directly to the quality and effectiveness of our TM program. You are expected to think critically, document thoroughly, and move with urgency without cutting corners. This is not a policy or advisory role. You are in the work every day - reviewing alerts, building cases, and helping ensure that suspicious activity is identified, investigated, and reported accurately and on time. What You Will Do - Review and disposition transaction monitoring alerts and KYC/KYB onboarding applications end to end - including customer profile review, document verification, beneficial ownership analysis, sanctions and PEP screening, adverse media assessment, and transactional activity analysis - Conduct enhanced due diligence on High Risk applicants - including source of funds and source of wealth assessment, business model review, and full beneficial ownership chain documentation - Make well-reasoned SAR recommendations - clearly articulating why activity is or is not suspicious and documenting your analysis in a manner that is complete and defensible to a regulator - Draft SAR narratives that meet FinCEN quality standards - Send RFIs to customers or partners where additional information is needed to resolve an alert or application and follow through to receipt and documentation of the response - Support periodic KYC refresh reviews on existing customers as part of the Company's ongoing due diligence program - Contribute to onboarding and investigation policy development - if you see a gap, flag it and propose a solution - Stay current on FinCEN advisories, FATF typologies, and emerging financial crime trends relevant to Rain's product set - including stablecoin, virtual asset, and agentic payment typologies What We're Looking For - 3 to 5+ years of experience in a compliance, KYC, AML Investigations or onboarding role at a FinTech, payments company, or crypto company - Demonstrated experience reviewing KYB applications for business entities including beneficial ownership analysis, entity structure review, and corporate document verification - Experience with OFAC, PEP, and adverse media screening tools - comfortable making independent screening determinations and documenting your reasoning - Demonstrated experience conducting end-to-end AML investigations and preparing SAR-quality case documentation - Working knowledge of BSA/AML program requirements and FinCEN SAR filing rules - Experience with transaction monitoring platforms - Familiarity with blockchain analytics tools and on-chain transaction analysis - Strong written communication skills - Comfort working in a fast-paced, high-volume environment where you manage multiple applications simultaneously without losing attention to detail - A do-er mentality - you are self-directed, take ownership of your queue, and do not wait to be told what to do next - CAMS certification or progress toward certification is a plus What Success Looks Like - Your alert queue is current - SLA compliance above 95% consistently - Your case documentation is complete and independently reviewable - Your SAR narratives meet internal and FinCen quality standards on the first draft - minimal rework required from senior reviewers - You are identifying patterns and typologies across your alert population and bringing those observations to the team proactively Things that enable a fulfilling, healthy and happy experience at Rain: Unlimited time off 🌴Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace, if you feel comfortable at home please work from home. If you’d like to work with others in an office feel free to come in. We want everyone to be able to work in the environment in which they are their most confident and productive selves. New Rainmakers will have a stipend to create a comfortable atmosphere at home. Easy to access benefits 🧠For US Rainmakers, we offer comprehensive health, dental and vision plans for you and your dependents, as well as a 100% company subsidized life insurance plan. Retirement goals💡Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 We offer every Rainmakers an equity option plan so we can all can benefit from our success. Rain Cards 🌧️ We want Rainmakers to be knowledgeable about our core products and services. To support this mission, we issue a card for our team to utilize the card for testing. Health and Wellness 📚 High performance begins from within. Rainmakers are welcome to use their card for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! Team summits ✨ Summits play an important role at Rain! Time spent together helps us get to know each other, strengthen our relationships, and build a common destiny. Expect team and company offsites both domestically and internationally.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation and support the ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management, SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience. The ideal candidate combines strong analytical thinking, critical risk mind-set, familiarity with AI governance and has the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders. RESPONSIBILITIES: - Lead governance, risk assessment, and compliance activities specific to AI/ML systems, LLM integrations, AI agents, and retrieval-augmented workflows - Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into GRC frameworks and translate technical risk into governance requirements - Develop, maintain, and refine AI risk and compliance controls aligned with relevant frameworks, including ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk Management Framework, EU AI Act, GDPR, and other applicable standard - Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI tools, including third-party risk scoring, control mapping, and remediation tracking - Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring documented controls, evidence collection, and follow-up on remediation items - Support audit activities, capturing evidence and coordinating cross-functional stakeholders for internal and external compliance reviews involving AI systems - Develop and maintain AI-specific GRC policies, standards, and procedures that map to AI risk domains, explainability requirements, and compliance obligations - Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend analysis, control effectiveness measurements, and key metrics - Monitor emerging AI governance requirements, guidance, and best practices, translating them into GRC program updates and compliance recommendations - Support security incident documentation and post-incident analysis for AI system events, coordinating with Legal and Security teams to ensure appropriate governance response QUALIFICATIONS: - 6+ years of experience in Governance, Risk & Compliance, including risk assessment, policy development, audit coordination, and third-party risk management - Demonstrated experience performing governance or risk assessments for AI/ML systems, including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems - Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model misuse, data leakage, explainability gaps) into documented control requirements and governance standards - Hands-on experience conducting third-party risk assessments for AI vendors, LLM platforms, AI APIs, or machine learning service providers - Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001, NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards - Strong understanding of data governance concepts relevant to AI systems, including training data lineage, data retention, model output handling, and human oversight requirements - Experience supporting regulatory readiness or compliance efforts related to AI systems - Proven ability to collaborate with engineering and security teams to validate control implementation and remediation - Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance, or a related field This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.   Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $100,000 - $140,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Paris; New York Workplace: OnSite ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. ROLE SUMMARY As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business. WHAT YOU WILL DO - Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program. - Support the definition, implementation, and maintenance of the Information Security Management System. - Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits. - Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements. - Help teams understand their responsibilities and expected contributions to compliance initiatives. - Develop and deliver cybersecurity compliance training and awareness materials. - Participate in cybersecurity risk assessments and support the monitoring of remediation actions. - Maintain compliance documentation, policies, procedures, control records, and audit materials. - Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization. - Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development. - Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost. ABOUT YOU - 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field. - Experience supporting cybersecurity compliance programs, certification processes, or external audits. - Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5. - Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA. - Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage. - Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders. - Excellent written and verbal communication skills. - Strong analytical and problem-solving abilities. - Ability to work collaboratively across technical, legal, commercial, and operational teams. - Professional proficiency in English; French proficiency is a plus. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Role Description The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms. Key Responsibilities and Duties — Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts. — Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing. — Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial. — Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. — Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress. — Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. — Assume responsibility for the identification of technological risks and the formulation of control design proposals. — Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering. — Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company. — Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines. — Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment. — Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives. — Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working. — Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed. — Stay current with emerging cyber threats and security best practices in DevOps environments. Knowledge and Skills — Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4 — Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments — Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4 — Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4 — Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3 — Understanding of cybersecurity risks and data protection principles - L3 — Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus — Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools) — Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture — Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses — Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time — Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com Level of Education: Bachelor/Master Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years) Benefits & Perks — Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam. — Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide. — Be part of a truly international fast‑paced environment and performance‑driven culture. — Full relocation support for you and your family to move to Amsterdam. — We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years. — Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential. — Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits. — Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture. — Diverse and creative colleagues from every corner of the world. — Health, life, and disability insurance*. — Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave. — Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country). — Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit. — Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership. — On‑site meals, coffee, and snacks, including healthy and vegan options, daily*. — Benefits may vary slightly depending on location and contract type.

Location: San Francisco Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. WHAT YOU'LL DO - Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements - Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations - Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks - Build internal GRC platform and tooling - Conduct risk assessments and mitigate data security and compliance risks - Write, update and enact policies capturing security, privacy, and AI safety requirements - Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices WHAT YOU'LL BRING - 6+ years of experience leading engagements in audit and compliance - Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling - Worked in high tech companies in cloud-native environments - Able to translate complex compliance requirements into clear and actionable work-streams - Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering - Self-motivated, detailed and organized, with a diligent approach to project completion - Excellent written, verbal, and interpersonal communication skills

Location: San Francisco Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. WHAT YOU'LL DO - Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements - Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations - Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks - Build internal GRC platform and tooling - Conduct risk assessments and mitigate data security and compliance risks - Write, update and enact policies capturing security, privacy, and AI safety requirements - Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices WHAT YOU'LL BRING - 6+ years of experience leading engagements in audit and compliance - Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling - Worked in high tech companies in cloud-native environments - Able to translate complex compliance requirements into clear and actionable work-streams - Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering - Self-motivated, detailed and organized, with a diligent approach to project completion - Excellent written, verbal, and interpersonal communication skills

Location: Al Jubail, Saudi Arabia; Al Khobar, Saudi Arabia; Karachi, Pakistan; Jamnagar, India; Cairo, Egypt We are seeking experienced Field Compliance Coordinators to support our Oil & Gas operations in the areas of Gas Plants (Environmental) and Construction Safety. The successful candidates will be responsible for ensuring compliance with HSE policies, environmental regulations, company standards, and industry best practices while promoting a proactive safety and environmental culture across field operations. Key Responsibilities Ensure compliance with company HSE policies, environmental regulations, and applicable industry standards. Conduct field inspections, audits, and compliance assessments across gas plant and construction activities. Monitor and support Permit-to-Work (PTW), Lockout/Tagout (LOTO), hazard identification, risk assessments, and safe work practices. Coordinate environmental monitoring, waste management, spill response, incident investigations, and corrective action tracking. Implement and maintain Environmental Management Systems (EMS) and Safety Management Systems (SMS) to ensure continuous compliance. Deliver HSE inductions, toolbox talks, safety and environmental awareness programs, and contractor training. Prepare compliance reports, analyze inspection findings, and recommend improvements to enhance operational performance. Requirements Bachelor's degree in Engineering, HSE, Environmental Science, Industrial Engineering, or a related discipline from an accredited institution. 10 - years of relevant experience, including a minimum of 7 years in the Oil & Gas industry, preferably in gas plants, construction, or mega projects. Professional certifications such as NEBOSH IGC, IOSH, ISO 14001 Lead Auditor, or equivalent are highly preferred. Strong knowledge of Environmental Management Systems (EMS), Safety Management Systems (SMS), Process Safety Management (PSM), and applicable HSE regulations. Hands-on experience in field compliance inspections, audits, hazard identification, risk assessments, incident investigations, and corrective action management. Experience with Permit-to-Work (PTW), Lockout/Tagout (LOTO), environmental monitoring, waste management, emergency response, and contractor compliance. Proven ability to develop and deliver HSE training, toolbox talks, and safety/environmental awareness programs.

Location: Jakarta, Indonesia We are seeking an experienced Compliance Officer to support the compliance function of a regulated brokerage operating under the Indonesian financial services regulatory framework. The successful candidate will assist the Head of Compliance in ensuring ongoing compliance with applicable laws, regulations, regulatory guidance, licensing conditions, and internal policies. The role requires strong knowledge of Indonesian financial services regulations and the ability to communicate effectively with both local stakeholders and international management. The ideal candidate will have prior experience within regulated financial institutions, including futures brokers, forex brokers, securities firms, derivatives intermediaries, commodities trading firms, fintechs, or other regulated financial services businesses. Key Responsibilities Support the implementation and maintenance of the firm's compliance framework, policies, procedures, and internal controls. Monitor regulatory developments issued by Indonesian regulators and assess their impact on the business. Assist with regulatory compliance relating to brokerage, futures, derivatives, forex, CFD, commodities, and securities-related activities. Support the business in maintaining compliance with applicable licensing requirements and regulatory obligations. Conduct compliance monitoring and testing activities to assess adherence to regulatory requirements and internal policies. Maintain compliance registers, regulatory trackers, and compliance reporting frameworks. Assist in preparing regulatory reports, submissions, notifications, and correspondence with regulators. Support regulatory inspections, audits, and supervisory reviews. Review business processes and identify compliance risks and control enhancements. Provide day-to-day compliance guidance to operational, commercial, and support functions. Assist in drafting, reviewing, and updating policies, procedures, manuals, and compliance documentation. Deliver compliance awareness and training programs to staff. Escalate material compliance issues, breaches, and regulatory concerns to the Head of Compliance. Support governance initiatives and compliance projects as required. Requirements Bachelor's degree in Law, Business Administration, Economics, or a related field. Approximately 7–10 years of compliance, regulatory affairs, risk, audit, or legal and compliance experience within regulated financial services. Strong understanding of Indonesian financial services regulatory requirements. Experience working within one or more of the following sectors in Indonesia: Futures brokerage Forex brokerage CFD brokerage Securities firms Capital markets Commodity trading firms Other regulated financial institutions Experience interacting with Indonesian regulators is highly desirable. Ability to interpret regulations and convert regulatory requirements into practical operational controls. Strong report writing, documentation, and analytical skills. Excellent attention to detail and organizational skills. Language Requirements Professional fluency in English (written and spoken) is mandatory. Professional fluency in Bahasa Indonesia (written and spoken) is mandatory. Preferred Experience Experience with BAPPEBTI-regulated entities. Experience with OJK-regulated entities. Experience supporting regulatory transitions, licensing projects, or regulatory remediation programs. Experience within multi-jurisdictional or internationally managed organizations. Key Competencies Regulatory compliance and governance Regulatory monitoring and analysis Compliance monitoring and testing Policy and procedure development Stakeholder management Regulatory reporting Risk assessment and control design Strong written and verbal communication skills Ability to operate independently in a fast-paced regulatory environment

Location: Dubai Workplace: hybrid About the role: IT  Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Compliance work. Responsibilities: Take ownership of preparation and coordination of IT audits, supervisory reviews, and regulatory information requests, ensuring timely, accurate, and complete delivery of required evidence. Conduct IT compliance and control gap assessments against local regulatory requirements, internal policies, and recognized industry best practices. Identify compliance gaps, control weaknesses, and technology risks; define, execute, and track remediation and corrective action plans in collaboration with IT, Security, Risk, and Compliance teams. Support the development, implementation, and ongoing maintenance of IT, cybersecurity, and information security policies, standards, and procedures aligned with regulatory expectations. Act as a subject-matter expert on IT compliance and technology risk requirements, translating regulatory and supervisory expectations into practical, implementable controls. Maintain accurate, complete, and audit-ready documentation for all IT compliance activities, including policies, procedures, risk assessments, and evidence repositories. Support ongoing interactions with regulators and external auditors on technology, cybersecurity, and operational resilience topics. Requirements: 4–6+ years of experience in IT compliance, IT audit, technology risk management, or related fields within regulated environments. Strong understanding of regulatory expectations applicable to financial institutions in the UAE, particularly in the areas of: IT governance and oversight, Information security and cybersecurity controls, Technology risk management, Data protection and data residency, Access management, change management, and incident management, Business continuity and disaster recovery (BCP / DR). Proven hands-on experience conducting IT and cybersecurity gap assessments and defining remediation plans aligned with regulatory and supervisory expectations. Solid knowledge of internationally recognized IT and security frameworks (e.g. ISO 27001, NIST, COBIT) and ability to apply them in a regulatory context. Experience supporting regulatory inspections, supervisory reviews, or external IT audits, including evidence preparation and issue remediation. Ability to work independently on complex compliance topics, manage multiple priorities, and drive remediation activities to completion. Strong communication and stakeholder management skills, with the ability to clearly explain technical and regulatory requirements to non-technical audiences. Fluent English is required; Strong analytical and risk-based mindset with high attention to detail. What you will get in return: Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Vienna, Austria About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. About Bybit Bybit is a leading global cryptocurrency exchange, founded in 2018 by Ben Zhou. Headquartered in Dubai, Bybit has rapidly grown to serve over 80 million users worldwide, making it the world's second-largest crypto exchange by trading volume. Our mission is to empower individuals and institutions to realize the full potential of crypto and Web3 technologies. Bybit offers a comprehensive suite of trading options, including spot and derivatives trading, as well as innovative products like the Bybit Card and the Bybit Wallet. We are committed to providing a secure, transparent, and user-friendly platform, underpinned by industry-leading security measures and 24/7 customer support. In 2025, Bybit established its European headquarters in Vienna, Austria, reinforcing its commitment to the European market and regulatory compliance. As first international exchange, we managed to secure the MiCAR license in Austria in May 2025 and have started operations under the fully regulated EU website bybit.eu in July 2025. This strategic move positions Bybit at the heart of Europe, enabling closer collaboration with regulatory bodies and providing enhanced services to its European user base. This is just the beginning of our journey to become a fully integrated financial platform, offering a diverse multitude of services across the EEA. About the role and the job scope Based in our Vienna, Austria headquarters, the MiFID Compliance Officer is a critical regulatory role within our expanding European operations. You will act as the primary legal and compliance expert for investment services, ensuring our platform adheres strictly to European and Austrian capital markets regulations. Your efforts will directly shape and safeguard our regulatory framework as we expand our service offerings across the EEA. You will be responsible for translating complex regulatory requirements into actionable internal policies, advising leadership, and maintaining the highest standards of market integrity. Key Responsibilities: Establish, manage, and continuously improve a robust compliance framework in accordance with MiFID II and the Austrian Securities Supervision Act 2018 (WAG 2018). Draft, implement, and maintain internal policies, procedures, and controls relevant to the Compliance area. Act as the subject matter expert on investment services and activities under MiFID II / WAG 2018, providing regulatory guidance to internal teams. Prepare and deliver clear, actionable reports on compliance topics to senior management and the Board. Oversee and advise on complaints handling processes, ensuring alignment with relevant regulatory requirements and internal standards. Monitor regulatory developments in European capital markets and proactively adapt internal frameworks to ensure ongoing compliance. Why to Join At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: Modern Workspace: Work in Austria's tallest office building, offering state-of-the-art facilities and panoramic views of Vienna. Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. What to bring Legal Background: University degree in Law and qualification as a legal professional. Industry Experience: at least 5 years of experience in a compliance department at an investment firm, in the capital markets division of a bank, a reputable law firm or regulator. Policy Expertise: Profound experience in the preparation and implementation of policies and procedures relevant to the Compliance area. Regulatory Knowledge: Deep understanding of investment services and activities under MiFID II / WAG 2018 and the broader regulatory framework. Framework Management: Ideally, a proven track record of having successfully established or managed a compliance framework under MiFID II / WAG 2018. Leadership Communication: Experienced in senior management reporting and presenting complex compliance topics clearly to executive stakeholders. Process Oversight: At least a basic knowledge of complaints handling processes and their associated regulatory requirements. Languages: Excellent communication skills with fluency in both German and English required. Join us and be part of shaping the future of finance and technology. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.