Вакансии

Задачи: — Точно и внимательно проводить проверку биографических данных (background checks), обеспечивая соответствие платформы Instacart местным, государственным и федеральным нормативам. — Расследовать и своевременно разрешать внутренние и внешние эскалации, связанные с проверками биографических данных, поддерживая безопасность и стабильность платформы для всех пользователей. — Выявлять, исследовать и полностью решать проблемы с проверками биографических данных, а также выявлять и реализовывать возможности для улучшения процессов. — Выполнять повторяющиеся операционные задачи с точностью и вниманием к деталям, выявляя возможности для повышения эффективности и масштабируемости команды. Требования: — 1-2+ года профессионального опыта, желательно в быстро меняющейся среде, связанной с проверками биографических данных, обработкой данных или поддержкой. — Сильные устные и письменные коммуникативные навыки. — Позитивное отношение и способность работать в условиях постоянно меняющихся и динамичных операционных условий. — Способность быстро принимать критические решения по чувствительным вопросам в быстром темпе. — Работа с высоким уровнем конфиденциальности. — Готовность работать по выходным и праздничным дням. Условия: — Удалённая работа с гибким графиком в рамках политики Flex First. — Конкурентоспособная заработная плата, зависящая от места постоянной работы кандидата. — Для кандидатов из США указаны ориентировочные почасовые ставки в долларах США в зависимости от штата. Дополнительно: — Instacart предоставляет конкурентоспособные компенсации и льготы в каждом регионе, где работают сотрудники. — Вакансия ориентирована на обеспечение безопасности и стабильности платформы Instacart для покупателей и клиентов.

Location: Yerevan, Armenia Description We are seeking a detail-oriented and proactive InfoSec Compliance Operations Specialist to support the implementation and ongoing operation of the organization’s Information Security governance, compliance, policy, and certification activities. This is a hands-on, execution-focused role. The specialist will assist with maintaining policies and procedures, collecting and organizing compliance evidence, supporting audits and certifications, updating Information Security documentation, monitoring assigned actions, and coordinating routine communications with internal and external stakeholders. The role does not include formal management responsibility, strategic ownership of the Information Security program, approval authority, or independent decision-making regarding risk acceptance, policy approval, or compliance exceptions. Responsibilities Support the implementation and ongoing operation of Information Security governance, compliance, and ISMS activities Maintain compliance documentation, control matrices, risk registers, evidence repositories, corrective-action trackers, and related records Collect, review, organize, and maintain evidence for ISO/IEC 27001, PCI DSS, internal audits, external assessments, and certification activities Support the preparation, review, publication, version control, and periodic update of Information Security policies, standards, procedures, and guidelines Track compliance gaps, audit findings, risk-treatment actions, remediation activities, responsible owners, and completion deadlines Support internal and external audits, readiness assessments, control reviews, and certification activities Prepare compliance reports, audit updates, policy summaries, risk documentation, meeting materials, and management-review content Assist with maintaining the Information Security risk register, control inventory, Statement of Applicability, and supporting documentation Support customer security questionnaires, third-party assessments, and routine coordination with IT, Legal, Procurement, Compliance, and business teams Follow up with responsible stakeholders on outstanding evidence, document reviews, corrective actions, and compliance deadlines Requirements Relevant education or professional experience in Information Security, cybersecurity, compliance, risk management, audit, policy administration, or a related field Strong understanding of Information Security governance, risk, compliance, internal controls, and standards such as ISO/IEC 27001 or PCI DSS Experience preparing, reviewing, updating, or maintaining policies, procedures, compliance records, or audit documentation Strong documentation, business-writing, communication, organizational, and stakeholder-coordination skills Ability to manage multiple deadlines, follow established procedures, work with technical and non-technical teams, and handle confidential information appropriately

Задачи: — Быть назначенным ответственным офицером по противодействию отмыванию денег (SMF17) для британского подразделения, с учетом организационных и регуляторных утверждений. — Обеспечивать второй уровень контроля программы соответствия финансовым преступлениям в Великобритании, включая AML, санкции, управление подозрительной активностью и связанные контрольные рамки. — Контролировать эскалацию подозрительной активности, внутренние направления и отчетность для британского подразделения, включая рассмотрение и эскалацию вопросов, требующих решения MLRO. — Поддерживать разработку, поддержание и постоянное улучшение AML и финансовых преступных рамок Великобритании в соответствии с требованиями FCA и регуляторными ожиданиями. — Руководить разработкой программы мониторинга соответствия финансовым преступлениям (CMP), обеспечивая ее соответствие аппетиту к риску компании, регуляторному ландшафту и рынку Великобритании. — Руководить и выполнять оценку рисков соответствия бизнесу (BWRA) и инвентаризацию контроля, выявляя риски финансовых преступлений, пробелы в контроле, регуляторные изменения и приоритеты управления. — Сотрудничать с отделом соответствия Великобритании и глобальными лидерами по финансовым преступлениям для поддержания эффективной контрольной среды. — Контролировать управление вопросами финансовых преступлений, включая выявление, отслеживание исправлений, эскалацию и закрытие. — Подготавливать ежегодный отчет MLRO для высшего руководства и совета директоров с деталями эффективности систем AML, отчетов о подозрительной активности, мошенничества, обучения, рисков и регуляторного положения. — Поддерживать внутренние и внешние аудиты, регуляторные проверки и обзоры банковских партнеров, включая подготовку материалов и координацию ответов. — Поддерживать и улучшать политики, процедуры, стандарты и документацию по финансовым преступлениям в Великобритании. — Готовить регулярные отчеты для директора по соответствию Великобритании и других старших заинтересованных лиц. — Сотрудничать с юридическим отделом по вопросам регуляторной интерпретации и с первыми линиями по внедрению, сохраняя независимость второго уровня и эффективный вызов. — Поддерживать готовность к взаимодействию с регуляторами Великобритании и другими внешними заинтересованными сторонами. — Работать с глобальной командой по управлению финансовыми преступлениями для разработки и реализации глобальной рамки. Условия: — Удаленная работа из Великобритании. — Годовая базовая зарплата от £120,000 до £168,000. — Медицинское страхование с покрытием всех премий для сотрудника и его иждивенцев. — Стипендии на технологии, питание, образ жизни и расходы на создание семьи. — Отпуск и праздничные дни. — Программа покупки акций сотрудниками (ESPP).

Location: El Salvador (Remote) Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Role OKX is one of the world's leading digital asset exchanges, with a regulated and actively expanding presence across Latin America. We are looking for a senior compliance professional to join our LatAm team as Compliance Officer for El Salvador and permanent support for LatAm jurisdictions. This role combines day-to-day case management with direct regulatory reporting obligations before local authorities, and requires the ability to independently lead process improvements while acting as the key liaison between the global compliance operations team and the regional team. Strategic Responsibilities Design, implementation and continuous improvement of the AML/CFT compliance program for El Salvador in alignment with the global standards. Lead and implement process improvement initiatives across operational workflows and control frameworks throughout LATAM jurisdictions. Serve as the primary point of contact between the global compliance operations team and the local/regional team, ensuring alignment on policies, procedures, escalation protocols, and regulatory standards. Develop scalable solutions for operational efficiency, accounting for both current regulatory requirements and anticipated changes. Drive cross-functional collaboration to address regulatory challenges, working with Legal, Finance, Risk, and Product teams as needed. Contribute to knowledge-sharing across compliance functions and support training efforts for the regional team. Daily Responsibilities Throughout LATAM jurisdictions: Review and resolve escalated Transaction Monitoring cases referred by the operational team: apply senior risk-based judgment to complex or ambiguous alerts, make final suspicious activity determinations, and ensure all case documentation meets the evidentiary standard required for regulatory defensibility. Review and resolve escalated EDD cases for high-risk customers in accordance with local regulation requirements. Make final match/no-match decisions on escalated sanctions screening cases referred by the operational team. Review and determine escalated PEP cases, applying intensified due diligence measures where required and setting the standard for what warrants escalation in the first place. Own the preparation and submission of Reportes de Operaciones Sospechosas (ROS/SARs) to the UIF. Own the preparation and timely submission of all mandatory periodic regulatory reports before local authorities. Qualifications & Experience 4–6 years of verifiable experience in global AML compliance standards applicable to VASPs/PSPs; in-depth knowledge of AML/CFT operations (CDD, EDD, transaction monitoring, sanctions, PEPs). At least 2 years of verifiable experience in compliance with a Crypto company. [Mandatory] Stakeholder management skills: ability to interact with senior leadership, and cross-functional teams. Advanced knowledge of AML/CFT compliance operations, including CDD, EDD, transaction monitoring, sanctions, and PEP screening. Demonstrated ability to independently manage high-risk cases and make sound, risk-based compliance judgments. Proficiency with blockchain analytics tools (Chainalysis, Elliptic, TRM Labs or equivalent). Knowledge of regional and global VASP regulatory frameworks, with focus El Salvador. Experience in additional LATAM jurisdictions is a plus. Fluency in Spanish is required; English proficiency is strongly preferred. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events #LI-EWR1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Europe / Asia Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation. About You You are a detail-oriented self-starter with a strong interest in regulatory compliance, digital assets, and AI. You are comfortable researching unfamiliar regulatory topics, organizing complex information, and producing clear first drafts. You are eager to learn how licensing applications and compliance reviews work in practice and can support both structured audit requests and fast-changing client-facing needs. About the Role You will support the Engineering team in regulatory research, licensing analysis, AI output review, and client-deliverable preparation. You will work with client-facing teams, compliance reviewers, and Engineering to organize regulatory knowledge, prepare initial drafts, and convert recurring compliance work into reusable mappings, templates, and workflows. All material regulatory conclusions and client deliverables will be reviewed by an experienced compliance professional. Responsibilities Research and summarize regulatory frameworks and licensing requirements. Support licensing and regulatory-readiness projects, including applicability research, gap analysis, evidence requests, policy review, and application-document preparation. Organize regulatory requirements into structured modules, evidence categories, checklists, and mappings. Review AI outputs for factual consistency, source traceability, missing information, and formatting issues. Prepare initial drafts of compliance analyses, evidence guidance, client reports, pitch-deck content, and review materials. Support the maintenance of regulation-to-service mappings, evidence checklists, and submission-material reuse mappings. Organize customer-provided materials and identify potential evidence gaps for reviewer confirmation. Record reviewer feedback and update templates, evaluation cases, and compliance knowledge assets. Support coordination and request tracking across client-facing teams, compliance reviewers, and Engineering. Escalate unclear regulatory interpretations and unsupported conclusions to experienced reviewers. Requirements Current enrollment in or recent graduation from a program in law, finance, accounting, risk management, public policy, business, computer science, or a related field. Strong research, analytical, and structured-writing skills. Strong attention to detail, particularly when reviewing regulatory sources, citations, and customer materials. Ability to organize complex information into clear checklists, summaries, presentations, and reports. Ability to manage multiple assignments and meet deadlines. Strong written and spoken English; professional Chinese proficiency is preferred but not required. Interest in digital-asset regulation, financial compliance, licensing, or AI-assisted compliance workflows. Familiarity with digital-asset regulation, VASP licensing, or similar regulatory frameworks is preferred. Previous internship, coursework, or project experience in compliance, law, audit, fintech, digital assets, or regulatory research is preferred. Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review is preferred. This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.

Location: Europe / Asia Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation. About You You are a hands-on compliance professional who understands how regulatory frameworks and licensing applications work from initial scoping through final submission readiness. You can turn complex regulations into clear guidance and client deliverables, manage both structured audit requests and fast-changing BD needs, and know when an issue requires escalation to senior Compliance or Legal. About the Role You will be the first-line compliance owner for AI outputs and related client deliverables. You will support stakeholder groups including client-facing teams and commercial services. You will turn the raw AI output into accurate and usable deliverables, and work as/with Engineering to convert recurring compliance work into reusable workflows and knowledge assets. Responsibilities Analyze and decompose regulatory frameworks and licensing requirements. Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking. Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability. Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports. Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables. Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows. Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal. Requirements 3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm. Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project. Strong understanding of regulatory analysis, evidence review, and licensing documentation. Ability to produce clear guidance, mappings, presentations, and client reports. Strong client communication and cross-functional project-management skills. Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality. Strong written and spoken English; professional Chinese proficiency is preferred but not required. Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred. Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review. This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.

Location: Boston, Massachusetts, United States We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. Ready to bring your corporate, securities and business skills to one of the world's most iconic play and entertainment companies? Hasbro is looking for a sharp, driven Paralegal with 4+ years of experience to join our Legal Department! In this role you'll be a key part of the corporate legal team, and you'll work where corporate governance and securities compliance meet for a global, publicly traded company. You'll support SEC reporting and filings, Section 16 compliance, board and committee matters, annual meeting preparation, and entity management across Hasbro's worldwide footprint. You'll also partner with colleagues who handle commercial, employment, and litigation matters. If you like a fast pace, a high bar for accuracy, and seeing your work show up at the most senior levels of the company, this is your game! Effective from the date that Hasbro opens its new Boston location, this position will be onsite Tuesday – Thursday at Hasbro’s new HQ location in Boston, MA. In the interim, this position will be onsite Tuesday –Thursday at Hasbro’s HQ in Pawtucket, RI or at Hasbro’s temporary location in Boston, MA. What You Will Do as a Corporate Governance and Securities Compliance Paralegal: Support corporate securities matters, including assisting with SEC filings (Forms 10-K, 10-Q, 8-K, proxy statements), Section 16 reporting, insider trading compliance, and maintenance of the corporate disclosure calendar. Assist with corporate governance functions, including preparing board and committee materials, maintaining minute books, tracking director and officer information, and supporting annual meeting preparations. Draft, review, and manage a broad range of commercial agreements, including vendor contracts, NDAs, services agreements, and other transactional documents; assist with maintaining contract management systems and track key deadlines and renewals. Research federal and state, securities regulations, and commercial law developments to support attorney advice and strategy. Respond to legal inquiries from Finance, and business partners regarding securities compliance, and contract obligations. Assist in managing outside counsel relationships, including tracking invoices, budgets, and matter status. Partner with attorneys and internal business teams to proactively identify legal risks and support policy development and training initiatives. Lead anti‐bribery due diligence for global third parties, conducting risk assessments, reviewing red‐flag findings, and providing formal compliance clearance to mitigate corruption, sanctions, and reputational risks Manage and update electronic code of conduct and compliance training, ensuring alignment with evolving legal, regulatory, and business requirements Review conflict-of-interest disclosures, assess variant responses, and resolve potential conflicts in collaboration with stakeholders. What You Will Bring: 4+ years of relevant paralegal experience spanning corporate securities, or commercial transactions — in a law firm or in-house legal department. Associate's Degree or Paralegal Certificate preferred; Bachelor's Degree a significant plus. Strong interpersonal skills, sound judgment, and commitment to teamwork. Ability to work effectively with attorneys, Finance, and business managers at all levels. Demonstrated ability to prioritize a substantial and diverse workload and meet deadlines in a fast-paced environment. Prior in-house experience a plus. Expertise in anti‐bribery and corruption due diligence, including risk assessments, red‐flag analysis, and compliance clearance for third‐party engagements. Advanced proficiency in Microsoft 365 (Word, Excel, PowerPoint, Outlook, SharePoint, Teams) and external platforms such as Workiva, Diligent, LRN and Docusign. Exceptional organizational, analytical, and written communication skills with the ability to handle sensitive and confidential information with discretion. The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package. Pay Range $73,600 — $110,400 USD Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: New York, NY Workplace: OnSite About the Company Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world. You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. About the Role We are looking for a hands-on Compliance Analyst to join our Compliance team with a primary focus on KYC and KYB onboarding operations. This is a do-er role - you will be in the queue every day reviewing applications, making risk decisions, and working directly with partners and customers to move onboarding forward without sacrificing compliance quality. You will be expected to own your work end to end, exercise sound judgment on complex cases, and contribute to building and improving the processes that support our onboarding program. This role sits at the intersection of compliance and operations. You are not here to advise - you are here to execute, and to do it well.   What You Will Do - Review and disposition transaction monitoring alerts and KYC/KYB onboarding applications end to end - including customer profile review, document verification, beneficial ownership analysis, sanctions and PEP screening, adverse media assessment, and transactional activity analysis - Conduct enhanced due diligence on High Risk applicants - including source of funds and source of wealth assessment, business model review, and full beneficial ownership chain documentation - Make well-reasoned SAR recommendations - clearly articulating why activity is or is not suspicious and documenting your analysis in a manner that is complete and defensible to a regulator - Draft SAR narratives that meet FinCEN quality standards - Send RFIs to customers or partners where additional information is needed to resolve an alert or application and follow through to receipt and documentation of the response - Support periodic KYC refresh reviews on existing customers as part of the Company's ongoing due diligence program - Contribute to onboarding and investigation policy development - if you see a gap, flag it and propose a solution - Stay current on FinCEN advisories, FATF typologies, and emerging financial crime trends relevant to Rain's product set - including stablecoin, virtual asset, and agentic payment typologies What You Bring - Minimum 3 years of experience in a compliance, KYC, AML Investigations or onboarding role at a FinTech, payments company, or crypto company - Demonstrated experience reviewing KYB applications for business entities including beneficial ownership analysis, entity structure review, and corporate document verification - Experience with OFAC, PEP, and adverse media screening tools - comfortable making independent screening determinations and documenting your reasoning - Demonstrated experience conducting end-to-end AML investigations and preparing SAR-quality case documentation - Working knowledge of BSA/AML program requirements and FinCEN SAR filing rules - Experience with transaction monitoring platforms - Familiarity with blockchain analytics tools and on-chain transaction analysis - Strong written communication skills - Comfort working in a fast-paced, high-volume environment where you manage multiple applications simultaneously without losing attention to detail - A do-er mentality - you are self-directed, take ownership of your queue, and do not wait to be told what to do next - CAMS certification or progress toward certification is a plus What Success Looks Like - Applications are reviewed thoroughly, dispositioned accurately, and documented completely - every time - Your SLA compliance rate is consistently above 95% - Escalations are well-supported - when you escalate, the reviewer has everything they need to make a decision without coming back to you for more information - You are identifying process gaps and bringing solutions, not just flagging problems Things that enable a fulfilling, healthy and happy experience at Rain: Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace. Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan. Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success. Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit. Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

Location: New York, NY Workplace: OnSite ABOUT THE COMPANY Rain makes the next generation of payments possible across the globe. We’re a lean and mighty team of passionate builders and veteran founders. Our infrastructure makes stablecoins usable in the real-world by powering card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. You will have the opportunity to deliver massive impact at a hypergrowth company that is funded by some of the top investors in fintech, crypto, and SaaS, including ICONIQ, Sapphire Ventures, Norwest, Galaxy Ventures, Lightspeed, Khosla, and several more. If you’re curious, bold, and excited to help shape a borderless financial future, we’d love to talk. Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. About the Role We are looking for a sharp, motivated Compliance Analyst to join our Compliance team with a primary focus on transaction monitoring, alert review, and case investigation. This is a do-er role - you will be working the alert queue daily, conducting investigations, making SAR recommendations, and contributing directly to the quality and effectiveness of our TM program. You are expected to think critically, document thoroughly, and move with urgency without cutting corners. This is not a policy or advisory role. You are in the work every day - reviewing alerts, building cases, and helping ensure that suspicious activity is identified, investigated, and reported accurately and on time. What You Will Do - Review and disposition transaction monitoring alerts and KYC/KYB onboarding applications end to end - including customer profile review, document verification, beneficial ownership analysis, sanctions and PEP screening, adverse media assessment, and transactional activity analysis - Conduct enhanced due diligence on High Risk applicants - including source of funds and source of wealth assessment, business model review, and full beneficial ownership chain documentation - Make well-reasoned SAR recommendations - clearly articulating why activity is or is not suspicious and documenting your analysis in a manner that is complete and defensible to a regulator - Draft SAR narratives that meet FinCEN quality standards - Send RFIs to customers or partners where additional information is needed to resolve an alert or application and follow through to receipt and documentation of the response - Support periodic KYC refresh reviews on existing customers as part of the Company's ongoing due diligence program - Contribute to onboarding and investigation policy development - if you see a gap, flag it and propose a solution - Stay current on FinCEN advisories, FATF typologies, and emerging financial crime trends relevant to Rain's product set - including stablecoin, virtual asset, and agentic payment typologies What We're Looking For - 3 to 5+ years of experience in a compliance, KYC, AML Investigations or onboarding role at a FinTech, payments company, or crypto company - Demonstrated experience reviewing KYB applications for business entities including beneficial ownership analysis, entity structure review, and corporate document verification - Experience with OFAC, PEP, and adverse media screening tools - comfortable making independent screening determinations and documenting your reasoning - Demonstrated experience conducting end-to-end AML investigations and preparing SAR-quality case documentation - Working knowledge of BSA/AML program requirements and FinCEN SAR filing rules - Experience with transaction monitoring platforms - Familiarity with blockchain analytics tools and on-chain transaction analysis - Strong written communication skills - Comfort working in a fast-paced, high-volume environment where you manage multiple applications simultaneously without losing attention to detail - A do-er mentality - you are self-directed, take ownership of your queue, and do not wait to be told what to do next - CAMS certification or progress toward certification is a plus What Success Looks Like - Your alert queue is current - SLA compliance above 95% consistently - Your case documentation is complete and independently reviewable - Your SAR narratives meet internal and FinCen quality standards on the first draft - minimal rework required from senior reviewers - You are identifying patterns and typologies across your alert population and bringing those observations to the team proactively Things that enable a fulfilling, healthy and happy experience at Rain: Unlimited time off 🌴Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace, if you feel comfortable at home please work from home. If you’d like to work with others in an office feel free to come in. We want everyone to be able to work in the environment in which they are their most confident and productive selves. New Rainmakers will have a stipend to create a comfortable atmosphere at home. Easy to access benefits 🧠For US Rainmakers, we offer comprehensive health, dental and vision plans for you and your dependents, as well as a 100% company subsidized life insurance plan. Retirement goals💡Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 We offer every Rainmakers an equity option plan so we can all can benefit from our success. Rain Cards 🌧️ We want Rainmakers to be knowledgeable about our core products and services. To support this mission, we issue a card for our team to utilize the card for testing. Health and Wellness 📚 High performance begins from within. Rainmakers are welcome to use their card for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! Team summits ✨ Summits play an important role at Rain! Time spent together helps us get to know each other, strengthen our relationships, and build a common destiny. Expect team and company offsites both domestically and internationally.

Location: Paris, France Freedom24 is an international fintech and investment platform, part of Freedom Holding Corp. (NASDAQ: FRHC), providing brokerage and financial services to clients across Europe. We are actively expanding our presence in France, and as part of our broader strategy to grow our product offering, we are exploring the launch of new regulated financial services in the French market, including a digital banking offering. To support this, we are strengthening our compliance team and looking for an experienced MLCO to build and lead the AML/CFT function for this new area of our business. This is a unique opportunity to join at an early stage and directly shape the compliance infrastructure from the ground up. Design and implement AML/CFT policies and procedures in line with ACPR, TRACFIN and EU regulatory requirements (AMLD5/6); Build and oversee the KYC/KYB framework, including customer due diligence (CDD/EDD); Monitor transactions, identify suspicious activity, and prepare TRACFIN filings; Conduct risk assessments across products, customers, geographies and channels; Act as the primary point of contact with regulators (ACPR, TRACFIN, AMF); Train staff on AML/CFT, sanctions compliance and fraud prevention; Report to senior management on compliance risks and controls. Requirements 7+ years of experience in AML/CFT compliance within a bank, payment institution (PSP/EMI), or fintech company; Strong knowledge of French and EU regulatory frameworks (Code monétaire et financier, LCB-FT, AMLD); Proven hands-on experience directly engaging with regulators (ACPR, TRACFIN) — correspondence, inspections, reporting; Experience independently building a compliance function or processes from scratch, not just operating within an already established system; Comfortable working in a startup environment: high ambiguity, few pre-built processes, and the ability to make decisions independently; Understanding of digital financial and/or payment services and related risks; Fluent in French and English; ACAMS certification is a plus. Benefits A rare opportunity to build a compliance function for a new business line from the ground up — with direct influence on strategy and product; A competitive salary that reflects the seniority and responsibility of the role; A role within an international, publicly listed company (NASDAQ: FRHC) with ambitious growth plans in Europe; Real autonomy and high level of trust — a rare chance to build something new, not just maintain an existing function.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation and support the ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management, SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience. The ideal candidate combines strong analytical thinking, critical risk mind-set, familiarity with AI governance and has the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders. RESPONSIBILITIES: - Lead governance, risk assessment, and compliance activities specific to AI/ML systems, LLM integrations, AI agents, and retrieval-augmented workflows - Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into GRC frameworks and translate technical risk into governance requirements - Develop, maintain, and refine AI risk and compliance controls aligned with relevant frameworks, including ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk Management Framework, EU AI Act, GDPR, and other applicable standard - Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI tools, including third-party risk scoring, control mapping, and remediation tracking - Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring documented controls, evidence collection, and follow-up on remediation items - Support audit activities, capturing evidence and coordinating cross-functional stakeholders for internal and external compliance reviews involving AI systems - Develop and maintain AI-specific GRC policies, standards, and procedures that map to AI risk domains, explainability requirements, and compliance obligations - Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend analysis, control effectiveness measurements, and key metrics - Monitor emerging AI governance requirements, guidance, and best practices, translating them into GRC program updates and compliance recommendations - Support security incident documentation and post-incident analysis for AI system events, coordinating with Legal and Security teams to ensure appropriate governance response QUALIFICATIONS: - 6+ years of experience in Governance, Risk & Compliance, including risk assessment, policy development, audit coordination, and third-party risk management - Demonstrated experience performing governance or risk assessments for AI/ML systems, including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems - Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model misuse, data leakage, explainability gaps) into documented control requirements and governance standards - Hands-on experience conducting third-party risk assessments for AI vendors, LLM platforms, AI APIs, or machine learning service providers - Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001, NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards - Strong understanding of data governance concepts relevant to AI systems, including training data lineage, data retention, model output handling, and human oversight requirements - Experience supporting regulatory readiness or compliance efforts related to AI systems - Proven ability to collaborate with engineering and security teams to validate control implementation and remediation - Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance, or a related field This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.   Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $100,000 - $140,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Paris; New York Workplace: OnSite ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. ROLE SUMMARY As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business. WHAT YOU WILL DO - Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program. - Support the definition, implementation, and maintenance of the Information Security Management System. - Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits. - Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements. - Help teams understand their responsibilities and expected contributions to compliance initiatives. - Develop and deliver cybersecurity compliance training and awareness materials. - Participate in cybersecurity risk assessments and support the monitoring of remediation actions. - Maintain compliance documentation, policies, procedures, control records, and audit materials. - Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization. - Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development. - Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost. ABOUT YOU - 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field. - Experience supporting cybersecurity compliance programs, certification processes, or external audits. - Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5. - Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA. - Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage. - Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders. - Excellent written and verbal communication skills. - Strong analytical and problem-solving abilities. - Ability to work collaboratively across technical, legal, commercial, and operational teams. - Professional proficiency in English; French proficiency is a plus. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Role Description The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms. Key Responsibilities and Duties — Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts. — Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing. — Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial. — Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. — Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress. — Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. — Assume responsibility for the identification of technological risks and the formulation of control design proposals. — Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering. — Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company. — Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines. — Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment. — Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives. — Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working. — Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed. — Stay current with emerging cyber threats and security best practices in DevOps environments. Knowledge and Skills — Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4 — Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments — Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4 — Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4 — Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3 — Understanding of cybersecurity risks and data protection principles - L3 — Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus — Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools) — Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture — Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses — Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time — Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com Level of Education: Bachelor/Master Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years) Benefits & Perks — Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam. — Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide. — Be part of a truly international fast‑paced environment and performance‑driven culture. — Full relocation support for you and your family to move to Amsterdam. — We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years. — Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential. — Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits. — Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture. — Diverse and creative colleagues from every corner of the world. — Health, life, and disability insurance*. — Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave. — Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country). — Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit. — Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership. — On‑site meals, coffee, and snacks, including healthy and vegan options, daily*. — Benefits may vary slightly depending on location and contract type.

Location: San Francisco Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. WHAT YOU'LL DO - Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements - Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations - Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks - Build internal GRC platform and tooling - Conduct risk assessments and mitigate data security and compliance risks - Write, update and enact policies capturing security, privacy, and AI safety requirements - Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices WHAT YOU'LL BRING - 6+ years of experience leading engagements in audit and compliance - Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling - Worked in high tech companies in cloud-native environments - Able to translate complex compliance requirements into clear and actionable work-streams - Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering - Self-motivated, detailed and organized, with a diligent approach to project completion - Excellent written, verbal, and interpersonal communication skills

Location: New Cairo City, Egypt About us: Where elite tech talent meets world-class opportunities! At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today’s most complex challenges. About the Client: Join one of Egypt’s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery. Key Responsibilities: Drive "Compliance and Security by Design": Proactively architect and embed compliance guardrails directly into the lifecycle of all Data and AI initiatives, anticipating evolving Central Bank of Egypt (CBE) cyber security regulations and the Egyptian Data Protection Law to eliminate compliance risks before models and data pipelines are deployed. Execute Predictive Threat Modeling for AI: Lead advanced, preventative threat modeling and vulnerability assessments tailored specifically for machine learning models, LLMs, and big data repositories, neutralizing emerging AI-specific threats (such as data poisoning, adversarial attacks, and model inversion) during the early design phases. Establish Continuous Automated Monitoring: Implement and manage automated, real-time vulnerability scanning and continuous compliance monitoring systems across the bank's data infrastructure, ensuring any drift from security standards is detected and remediated before it can be exploited. Foster a Proactive Security Culture with AI Teams: Partner closely with data scientists, AI engineers, and data governance teams to champion secure coding and data handling practices, conducting proactive risk-readiness workshops to prevent human-error vulnerabilities in algorithmic workflows. Develop Next-Gen Incident-Prevention Playbooks: Devise and stress-test predictive incident-response playbooks tailored for AI assets, leveraging global threat intelligence to simulate potential data breaches and algorithmic failures, ensuring the bank’s defenses are常に (always) one step ahead of sophisticated cyber threats. Requirements Professional Experience: 4 + years of progressive experience in cybersecurity compliance, risk management, or vulnerability assessment, with a mandatory and proven track record of working within a regulated banking or financial services institution. Educational Background & Certifications: Bachelor’s degree from a recognized institution in Computer Science, Cybersecurity, Computer Engineering, or a strictly relevant technical field. Possessing elite industry certifications such as CISSP, CISM, CRISC, or CISA is highly preferred. Regulatory & AI Domain Expertise: Comprehensive understanding of the Central Bank of Egypt (CBE) cybersecurity frameworks and regulations, as well as the Egyptian Data Protection Law , paired with foundational knowledge of data science workflows, big data architecture, and emerging AI security frameworks (e.g., OWASP Top 10 for LLMs). Technical Compliance & Threat Modeling Skills: Demonstrated expertise in deploying automated vulnerability scanning tools and leading predictive threat modeling exercises specifically tailored to mitigate risks like data poisoning, adversarial attacks, and unauthorized data exposure within complex data pipelines. Benefits Attractive, market-leading salary package Clear career advancement path with professional development opportunities

Location: Al Jubail, Saudi Arabia; Al Khobar, Saudi Arabia; Karachi, Pakistan; Jamnagar, India; Cairo, Egypt We are seeking experienced Field Compliance Coordinators to support our Oil & Gas operations in the areas of Gas Plants (Environmental) and Construction Safety. The successful candidates will be responsible for ensuring compliance with HSE policies, environmental regulations, company standards, and industry best practices while promoting a proactive safety and environmental culture across field operations. Key Responsibilities Ensure compliance with company HSE policies, environmental regulations, and applicable industry standards. Conduct field inspections, audits, and compliance assessments across gas plant and construction activities. Monitor and support Permit-to-Work (PTW), Lockout/Tagout (LOTO), hazard identification, risk assessments, and safe work practices. Coordinate environmental monitoring, waste management, spill response, incident investigations, and corrective action tracking. Implement and maintain Environmental Management Systems (EMS) and Safety Management Systems (SMS) to ensure continuous compliance. Deliver HSE inductions, toolbox talks, safety and environmental awareness programs, and contractor training. Prepare compliance reports, analyze inspection findings, and recommend improvements to enhance operational performance. Requirements Bachelor's degree in Engineering, HSE, Environmental Science, Industrial Engineering, or a related discipline from an accredited institution. 10 - years of relevant experience, including a minimum of 7 years in the Oil & Gas industry, preferably in gas plants, construction, or mega projects. Professional certifications such as NEBOSH IGC, IOSH, ISO 14001 Lead Auditor, or equivalent are highly preferred. Strong knowledge of Environmental Management Systems (EMS), Safety Management Systems (SMS), Process Safety Management (PSM), and applicable HSE regulations. Hands-on experience in field compliance inspections, audits, hazard identification, risk assessments, incident investigations, and corrective action management. Experience with Permit-to-Work (PTW), Lockout/Tagout (LOTO), environmental monitoring, waste management, emergency response, and contractor compliance. Proven ability to develop and deliver HSE training, toolbox talks, and safety/environmental awareness programs.

Location: Jakarta, Indonesia We are seeking an experienced Compliance Officer to support the compliance function of a regulated brokerage operating under the Indonesian financial services regulatory framework. The successful candidate will assist the Head of Compliance in ensuring ongoing compliance with applicable laws, regulations, regulatory guidance, licensing conditions, and internal policies. The role requires strong knowledge of Indonesian financial services regulations and the ability to communicate effectively with both local stakeholders and international management. The ideal candidate will have prior experience within regulated financial institutions, including futures brokers, forex brokers, securities firms, derivatives intermediaries, commodities trading firms, fintechs, or other regulated financial services businesses. Key Responsibilities Support the implementation and maintenance of the firm's compliance framework, policies, procedures, and internal controls. Monitor regulatory developments issued by Indonesian regulators and assess their impact on the business. Assist with regulatory compliance relating to brokerage, futures, derivatives, forex, CFD, commodities, and securities-related activities. Support the business in maintaining compliance with applicable licensing requirements and regulatory obligations. Conduct compliance monitoring and testing activities to assess adherence to regulatory requirements and internal policies. Maintain compliance registers, regulatory trackers, and compliance reporting frameworks. Assist in preparing regulatory reports, submissions, notifications, and correspondence with regulators. Support regulatory inspections, audits, and supervisory reviews. Review business processes and identify compliance risks and control enhancements. Provide day-to-day compliance guidance to operational, commercial, and support functions. Assist in drafting, reviewing, and updating policies, procedures, manuals, and compliance documentation. Deliver compliance awareness and training programs to staff. Escalate material compliance issues, breaches, and regulatory concerns to the Head of Compliance. Support governance initiatives and compliance projects as required. Requirements Bachelor's degree in Law, Business Administration, Economics, or a related field. Approximately 7–10 years of compliance, regulatory affairs, risk, audit, or legal and compliance experience within regulated financial services. Strong understanding of Indonesian financial services regulatory requirements. Experience working within one or more of the following sectors in Indonesia: Futures brokerage Forex brokerage CFD brokerage Securities firms Capital markets Commodity trading firms Other regulated financial institutions Experience interacting with Indonesian regulators is highly desirable. Ability to interpret regulations and convert regulatory requirements into practical operational controls. Strong report writing, documentation, and analytical skills. Excellent attention to detail and organizational skills. Language Requirements Professional fluency in English (written and spoken) is mandatory. Professional fluency in Bahasa Indonesia (written and spoken) is mandatory. Preferred Experience Experience with BAPPEBTI-regulated entities. Experience with OJK-regulated entities. Experience supporting regulatory transitions, licensing projects, or regulatory remediation programs. Experience within multi-jurisdictional or internationally managed organizations. Key Competencies Regulatory compliance and governance Regulatory monitoring and analysis Compliance monitoring and testing Policy and procedure development Stakeholder management Regulatory reporting Risk assessment and control design Strong written and verbal communication skills Ability to operate independently in a fast-paced regulatory environment

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity This is not a traditional GRC hire. The Tech G overnance Office is looking for someone who combines the governance judgment of a seasoned compliance professional with the drive of a forward-deployed engineer — someone who closes gaps by shipping solutions, navigates ambiguity without hand-holding, and operates with the urgency of a startup and the rigour of a regulated financial institution. You will own complex cross-functional workstreams independently — coordinating across Engineering, Legal, Product, and Finance — while managing external auditors and regulators. Strong written and verbal communication in both English and Mandarin is a meaningful advantage in this role. AI tooling is not optional; it is how you work. Who You Are Self-directed driver — You run cross-functional workstreams without being managed. Ambiguity is a starting point, not a blocker. AI-native operator — You already use AI to do more, faster — and you raise the floor for the teams around you. Clear communicator — You earn trust across regulators, auditors, and C-suite through precision and consistency — in any room. Culture Fit Pace Standards Startup velocity — Decisions move fast. Priorities shift. You ship, iterate, and adapt — without waiting for perfect conditions or top-down direction. Financial institution rigour — Audit trails matter. Regulators scrutinise. The bar for accuracy, documentation, and accountability is institutional-grade — always. > The tension between these two is not a bug — it is the job. We are looking for someone who holds both without compromise. What You’ll Be Doing Independently lead audit remediation programmes — assess gaps, develop structured plans, and drive verified closure across engineering, product, legal, and operations without escalation dependency. Own cross-functional governance workstreams — set milestones, coordinate accountability, and remove blockers across departments with limited management oversight. Conduct IT security and architecture governance reviews — assess whether systems and processes meet applicable standards, and issue findings with clear ownership and remediation timelines. Build and maintain the policy estate — draft, refine, and operationalise IT governance policies and procedures; translate regulatory requirements into implementation-ready guidance for first-line teams. Lead regulator and auditor engagement — serve as the primary coordination interface for external audit and regulatory correspondence, representing the Tech G overnance Office with credibility and precision. Deploy AI to accelerate compliance operations — prototype and scale AI-assisted workflows for evidence collection, control monitoring, audit response, and policy generation; drive team-wide adoption. Deliver Tech G overnance -level reporting — produce governance dashboards and executive briefs on remediation status, risk exposure, and regulatory posture, independently and to publication standard. Track the regulatory horizon — monitor evolving requirements across active jurisdictions, translate changes into prioritised internal action, and brief senior leadership proactively. What We Look For In You AI Adoption & Application — Must Have Active daily use of AI tools to accelerate compliance and governance work — demonstrated practice with measurable output impact, not theoretical awareness. Ability to identify, build, and scale AI-assisted workflows within a Tech G overnance office context — evidence automation, policy generation, audit response, or control monitoring. Working knowledge of AI governance and risk — sufficient to contribute to internal AI oversight frameworks and assess AI-related compliance obligations. Independent Cross-Functional Leadership — Must Have Demonstrated ability to own and drive complex, multi-stakeholder workstreams independently — setting direction, coordinating accountability, and delivering outcomes without management escalation. Track record of influencing without authority across engineering, legal, finance, and operations in a fast-moving environment. Comfortable operating under ambiguity and shifting priorities while maintaining institutional-grade standards for accuracy and documentation. Experience 8+ years in IT audit, risk management, compliance, or security governance 3+ years leading governance programmes at a large-scale internet, financial services, or crypto firm Exposure to IPO-readiness or high-scrutiny regulatory examination programmes preferred Frameworks & Standards ISO 27001, SOC 1/2, PCI-DSS, COBIT, NIST — deep working knowledge GDPR and APAC data protection regimes Crypto and blockchain-specific compliance risk awareness a strong asset Engineering Sensibility Able to read and interpret code, architecture diagrams, and technical design documents without engineer-translation dependency Familiarity with cloud environments (Alibaba Cloud, AWS, GCP) and associated security tooling Communication Executive-level written and verbal communication in English — board-ready governance briefs, regulator responses, and Tech G overnance -level reporting produced independently Proficiency in Mandarin (written and verbal) is a strong advantage for APAC regulatory and stakeholder engagement Preferred Qualifications Professional security or governance certification: CISA · CISSP · CRISC · CISM · CCISO · Agentic AI Experience building AI-powered compliance tooling — audit automation, continuous control monitoring, or policy-to-control mapping Prior involvement in SOX ITGC, SEC Reg S-K Item 106, or equivalent listing-authority tech governance programmes Crypto-native compliance exposure — Proof of Reserves, SAB 121, Travel Rule, AML/CFT programme governance Active regulatory footprint across MAS, VARA, FCA, HKMA/SFC, or equivalent Why This Role OKX operates across 50+ jurisdictions with live regulatory programmes. The Tech G overnance Office is building infrastructure-grade compliance capability — not checkbox compliance. This is a rare opportunity to shape how that work gets done: independently, at pace, and with AI at the centre of the method. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .