Location: New York Office
Workplace: Hybrid
The engineering team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.
Compliance Core builds and operates the platform that customers rely on to evaluate blockchain risk in real time and continuously monitor activity across billions of transfers. Our systems screen transfers and withdrawals, reassess exposure as new information arrives, aggregate risk at the user and organization level, and power datasets used by other teams and customers.
We’re looking for an Engineering Manager to lead the team and shape the next generation of this platform. You’ll help decide what to evolve, rebuild, or retire, and sequence those changes while keeping our systems reliable for every customer. This role combines hands-on technical leadership with responsibility for the team’s growth, delivery, and operational health.
In this role, you’ll:
- Lead the platform’s modernization. Set technical direction with the team, make architectural trade-offs, and turn complex changes into incremental migrations with clear milestones and safe rollouts.
- Stay hands-on. Review code, write and challenge design documents, contribute prototypes or targeted fixes, and work directly with engineers to resolve difficult technical problems and production incidents.
- Build and develop the team. Hire exceptional engineers, set clear expectations, provide candid feedback, manage performance, and support career growth. Create an environment where people can challenge ideas, take ownership, and do their best work.
- Own delivery with your partners. Work with Product and upstream teams to turn customer needs and industry changes into an executable roadmap. Make priorities, dependencies, and trade-offs explicit, and follow through on commitments.
- Make production operations sustainable. Set standards for reliability, latency, throughput, and data correctness. Improve observability, testing, incident response, and on-call practices so the platform can scale
We’re looking for candidates who have:
- Experience building and operating high-throughput, event-driven distributed systems
- Strong hands-on engineering judgment. You can work through implementation details, identify the real constraints in a design, and help the team make sound architectural decisions.
- Experience managing engineers, including coaching, performance management, and career development, with evidence of improving both team effectiveness and engineering quality.
- A track record of delivering complex technical initiatives across teams, breaking ambiguous problems into manageable steps, and balancing immediate customer needs with longer-term platform investment.
- A collaborative leadership style: you welcome challenges, explain your decisions, and help engineers develop the judgment and ownership to lead work themselves.
- Interest in blockchain and cryptocurrencies, or eagerness to learn.
Nice to have:
- Experience modernizing or migrating critical production systems while maintaining service continuity.
- Familiarity with JVM services in production.
- Experience operating customer-facing systems with strict latency and availability requirements.
- Background in compliance, payments, fraud, or another regulated domain.
- Blockchain protocol knowledge.
AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.
AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.
About Chainalysis
Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.
You belong here.
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.
Location: Hong Kong; Singapore; US / Remote
Workplace: remote
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About the Role
We are looking for an experienced compliance and financial crime leader to help shape and expand our work across anti money laundering, virtual asset compliance, and blockchain risk management. This role is designed for someone who understands compliance from both sides of the market: traditional financial institutions and virtual asset service providers. You should be comfortable operating at the intersection of regulation, financial crime prevention, blockchain analytics, and commercial strategy. You will serve as a senior subject matter expert on AML and virtual asset compliance, helping the company strengthen its compliance capabilities, advise financial institutions and VASPs, and engage credibly with regulators, law enforcement agencies, clients, and industry partners.
About You
You are a practical and commercially minded compliance leader with deep experience in AML, financial crime, and virtual assets.
You have worked within, or closely alongside, both traditional financial institutions and VASPs, and understand the differences between conventional transaction monitoring and the risks presented by blockchain based financial activity. You are equally comfortable reviewing a complex financial crime case, designing an AML framework, advising senior leadership, speaking with a regulator, and explaining blockchain risk to a bank, exchange, or government stakeholder. You do not approach compliance as a purely administrative function. You understand how strong compliance programs, credible risk controls, and effective blockchain analytics can support responsible business growth.
Responsibilities
Build and improve AML frameworks, virtual asset compliance strategy, sanctions, risk assessments, transaction monitoring, and investigation processes.
Advise financial institutions and VASPs on virtual asset compliance, regulatory expectations, and blockchain related financial crime risks.
Monitor regulatory developments and translate them into practical compliance guidance and product requirements.
Where applicable, serve as MLRO or support the designated MLRO on suspicious activity reviews and regulatory reporting.
Partner with product, engineering, business development teams, regulators, law enforcement, and other industry stakeholders.
Requirements
Prior experience as an MLRO, Chief Compliance Officer, Head of Financial Crime, or a similar senior compliance role.
Experience across both traditional financial institutions and the virtual asset industry.
Strong knowledge of AML, financial crime, sanctions, transaction monitoring, regulatory compliance and reporting, and virtual asset financial crime risks.
Hands on experience with blockchain analytics, KYT, wallet screening, or similar on-chain compliance tools and processes.
Strong communication skills and CAMS or an equivalent AML qualification.
Bonus Points
Experience owning the AML program of a regulated entity, VASP licensing, regulatory examinations, or remediation.
Established relationships across regulators, law enforcement, banks, exchanges, or the virtual asset industry.
The expected annual base salary range for this position in the United States is $150,000 to $220,000. Compensation for candidates outside the United States will be determined based on location, experience, and qualifications.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations:
Austin
Seattle
Denver
Atlanta
Washington DC
Application Deadline: December 16, 2026
Position Overview
Cloudflare is looking for a Senior Manager to lead a unified Infrastructure Operations function spanning physical network reliability, operational security, and global regulatory compliance across 750+ data center sites in 125+ countries. The leader in this role ensures 24x7 operational availability of Cloudflare's network infrastructure through incident response, hardware break-fix, circuit management, and physical hardware lifecycle operations. This leader also owns physical access control policy and administration, periodic access reviews, and evidence-based compliance delivery across SOC 2 Type II, ISO 27001, FedRAMP, ISMAP, and IRAP.
You will lead two teams, setting organizational direction, building talent, and being accountable for outcomes across the full lifecycle of Cloudflare's physical infrastructure: from how hardware is deployed and maintained, to how access is controlled and reviewed, to how assets are securely retired and evidenced for audit. The breadth of this scope demands a leader who can hold the org-level tensions, speed versus rigor, global scale versus precise detail, partner dependency versus uncompromising standards, without losing either end.
You will bring credibility across both dimensions of this role. On the infrastructure side, a strong grasp of data center colocation environments, network architecture, and hardware operations as well as the judgment to lead managers and teams who live in that world every day. On the compliance side, the organizational instinct to maintain audit readiness continuously, not just at cycle time, and the stakeholder fluency to navigate relationships with GRC, government auditors, and strategic global partners. Above all, you will bring a bias toward building smarter processes, better tooling, and AI-assisted operations that multiply your team's capacity as Cloudflare's footprint continues to grow.
What You'll Do
Team Leadership
Lead two teams, the Operations team and the Security and Compliance team.
Set goals, develop talent, and build a culture of operational excellence and compliance-consciousness across both functions
Hold both teams to shared SLAs and quality standards, balancing the urgency of 24x7 incident response with the rigor of compliance audit cycles
Serve as the escalation point for cross-team issues, complex vendor negotiations, and decisions that touch both operational and regulatory domains
Unified Decommissioning Lifecycle
Own the end-to-end DECOM process as a single, governed workflow: physical collections and unracking, secure asset destruction with CoD issuance (ITAD vendor management), serial number verification, compliance evidence filing, and records closure
Eliminate the current handoff gap between Maintain's physical operations and DCSC's compliance oversight building a single, auditable pipeline from "decom triggered" to "evidence archived”.
Drive ITAD vendor relationships, escalation paths, and contractual SLAs for asset destruction across all regions (APAC, EMEA, NASA, South America)
Maintain audit-readiness of decommissioning records for SOC 2, ISO 27001, PCI DSS, and FedRAMP control requirements
Maintain Team Operational Accountability
Accountable for 24x7 incident response coverage across all Cloudflare locations: carrier outages, DC facility issues, hardware degradation, and power/temperature events.
Oversee hardware break-fix operations including coordination with Metro Technicians, third-party repair vendors and remote contractors.
Drive maturity in circuit decommissioning, RMA management, and physical collections processes
Ensure on-call schedules, handover protocols, and incident SLAs are consistently met across APAC, EMEA, and NASA shifts.
DCSC Compliance & Access Control Accountability
Accountable for quarterly and monthly access review cycles (QAR/MAR) across 750+ global data center sites covering SOC 2 Type II, ISO 27001, FedRAMP Moderate/High, ISMAP, and IRAP frameworks
Own the physical access provisioning and deprovisioning function, including SLA adherence and ACL integrity
Serve as the senior owner of the team’s automation initiatives
Maintain executive-level relationships with GRC leads across all active compliance frameworks; be the accountable voice for DCSC's control obligations in audit conversations
Represent DCSC at Monthly Business Reviews and executive infrastructure health checks
Automation & Operational Efficiency
Drive a meaningful reduction in manual operational burden across both teams identifying and prioritizing automation opportunities in access reviews, decommissioning evidence collection, portal data extraction, and incident triage
Sponsor and guide the development of internal tooling (DCSC Portal, automation scripts, AI-assisted workflows) that multiplies team capacity without proportional headcount growth
Evaluate and adopt AI tooling for repetitive operational tasks, documentation acceleration, root-cause analysis, and compliance evidence generation.
Who You Are
An experienced infrastructure operations leader. You have managed engineering teams responsible for large-scale, globally distributed physical or network infrastructure. You know how to hold a team accountable to 24x7 operational standards while also driving longer-horizon strategic work. You don't lose sight of the incident queue while building the roadmap.
Comfortable at the compliance/operations intersection. You don't need to be a GRC expert, but you understand why physical access controls matter for SOC 2 and FedRAMP, why the decommissioning chain of custody is an audit control, and why a missed quarterly access review has real consequences. You approach compliance not as overhead but as a non-negotiable quality dimension of operational work.
You ensure the teams you're inheriting are operationally capable but structurally manual. You see automation as a force multiplier and have a track record of reducing operational toil through process design, tooling investment, and thoughtful prioritization, not just through headcount.
A strong people leader with a coaching instinct. You manage managers. You know how to develop them, set clear expectations, give direct feedback, and create the conditions for high-performing teams. You build trust across functions and are comfortable representing your organization at the executive level.
Energized by global complexity. Your teams operate across APAC, EMEA, and NASA time zones, spanning hundreds of vendors, data center providers, and regulatory jurisdictions. You thrive in this environment rather than being overwhelmed by it.
Required Experience
7+ years in infrastructure operations, data center operations, network operations, or a closely related field, with at least 3 years in a people management role
Demonstrated experience managing managers and holding multiple teams accountable to operational SLAs simultaneously
Direct experience with physical data center operations including hardware lifecycle management, decommissioning, colocation vendor management, or break-fix operations
Familiarity with compliance frameworks relevant to physical infrastructure: SOC 2, ISO 27001, FedRAMP, or equivalent — at an operational (not auditor) level
Strong program management instincts: comfortable running complex, multi-workstream initiatives with dependencies across teams, vendors, and time zones
Proven track record of driving operational efficiency through process redesign or automation adoption
Excellent written and verbal communication; able to translate technical operational details into executive-level reporting and vice versa
Preferred Qualifications
Experience managing 24x7 on-call operations teams, including PagerDuty or equivalent tooling and incident escalation frameworks
Familiarity with network infrastructure concepts (circuit management, cross-connect decommissioning, network operations)
Experience with physical access control systems, access control list management, or vendor portal administration at scale
Knowledge of ITAD (IT Asset Disposition) vendor management and compliance requirements for secure destruction
Background in a rapidly scaling, global infrastructure environment (hyperscaler, cloud provider, major CDN, or similar)
Experience driving SSO or identity federation projects across large third-party vendor ecosystems
Familiarity with Jira-based operational workflows, Netbox or similar DCIM tools, and Confluence-based documentation practices
Reporting Structure
This role reports to the Director, Infrastructure Operations (AMER) and is part of the broader Infrastructure Operations leadership team.
Compensation
Compensation may be adjusted depending on work location.
For Colorado based hires: Estimated annual salary of $156,000 - $215,000.
Washington (Kirkland), and Washington D.C. based hires: Estimated annual salary of $182,000 - $251,000.
Equity
This role is eligible to participate in Cloudflare's equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Belgrade, Serbia
Workplace: hybrid
Are you ready to join our digital revolution journey?
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.
Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.
With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career.
Role Purpose
As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities.
What Makes This Role Different:
Build, don't just maintain.
You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process.
Full regional ownership.
This role spans the entire Europe region.
High visibility, real stakes.
You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment.
A technology-forward environment.
The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you.
Cross-functional reach.
You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews.
What You'll Do:
1. Statutory & Global Audit Leadership
Audit Lifecycle Ownership:
Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off.
External Auditor Relationship:
Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items.
Consolidation Alignment:
Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process.
Pre-Audit Structuring:
Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests.
2. Tax Governance & Regulatory Compliance
Filing Oversight:
Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness.
Tax Team Liaison:
Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready.
Notice & Assessment Management:
Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses.
Corporate Secretarial Support:
Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements.
3. Process Improvement & Digital Transformation
Root Cause Analysis:
Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source.
Internal Controls:
Strengthen the control environment across the region to minimize audit findings.
Technology & Automation:
Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting.
What We're Looking For:
Mindset & Soft Skills (critical to this role)
A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook.
Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it.
Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams.
Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities.
Experience & Technical Skills
Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire.
10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe.
Chartered Accountant (CA), CPA, or ACCA qualification.
Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals.
Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite).
Fluent English, written and spoken — required given daily interaction with regional and global stakeholders.
Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures.
#ALEPH
Why Join Us?
Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.
We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.
#ALEPH
Ищем hands-on DevSecOps / Security специалиста для проекта в сфере regulated crypto / fintech.
Основная задача — разбирать результаты IT/Security-аудитов и технически закрывать выявленные vulnerabilities, security gaps и audit findings.
Что важно:
• DevSecOps / Application / Infrastructure / ICT Security;
• DORA — обязательно;
• MiCA, ISO 27001 или аналогичные стандарты;
• опыт security/compliance-аудитов;
• понимание regulated crypto / fintech;
• умение самостоятельно делать remediation.
Будет плюсом: Fireblocks, crypto custody, MPC, crypto exchanges, custodians, fintech/payment.
Не рассматриваем чистых Compliance Officers, специалистов только по документации и Backend Developers без Security/DevSecOps опыта.
Location: Hong Kong, Hong Kong SAR; Singapore, Singapore
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Team
The Compliance function at OKX is responsible for promoting a strong compliance culture and supporting the business in meeting its regulatory obligations and managing enterprise risk.
The Product Compliance team is responsible for embedding compliance into the product lifecycle and supporting the compliant development, launch and ongoing operation of OKX products and features globally across all markets in which our products and services are offered. We work closely with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to identify regulatory and compliance requirements, assess product risks and develop practical solutions that support responsible commercial growth.
About the Opportunity
We are seeking an experienced, hands-on and commercially minded Senior Compliance Manager to join our Product Compliance team.
This is a senior individual-contributor role focused primarily on the day-to-day review of new products, material product changes and existing product enhancements. The emphasis is on delivering timely, well-reasoned product compliance assessments using a risk-based approach, ensuring that material compliance risks are sufficiently mitigated and the firm’s regulatory positioning protected.
You will act as a trusted compliance partner throughout the product development lifecycle, helping Product and Engineering teams navigate complex regulatory requirements while enabling commercially viable outcomes. You will be expected to distinguish between legal or regulatory constraints that cannot be crossed, risks that can be addressed through proportionate controls, and residual risks that require documented escalation or risk acceptance.
What You’ll Be Doing
Own and deliver day-to-day compliance reviews of new products, features, market expansions and material changes to existing products across OKX's global business and product suite.
Review product requirements, technical documentation, user journeys, onboarding flows, trading or transaction mechanics, reward structures, disclosures and operational processes.
Apply a risk-based waterfall that distinguishes hard legal or regulatory blockers from risks that may be addressed through controls, product conditions, jurisdictional restrictions, monitoring or escalation.
Conduct and document product compliance risk assessments covering areas such as regulatory perimeter and licensing, AML/CFT, sanctions, KYC, consumer protection, financial promotions, trading and market conduct, asset safeguarding, data privacy and third-party risk.
Produce clear, concise and evidence-based and solutions-based compliance recommendations setting out identified risks, required mitigants, residual exposure and the proposed approval or escalation route.
Work directly with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to develop practical and scalable solutions to identified compliance requirements.
Maintain complete and accurate documentation and audit trails for product reviews, decisions, conditions, exceptions, approvals and subsequent changes.
Support post-launch monitoring, control testing and assurance in partnership with Audit, Product and other Compliance teams, and drive remediation of identified issues.
Promote a compliance-by-design culture within the product lifecycle; communicate the Product Compliance framework and program requirements to relevant stakeholders and deliver targeted training or guidance to Product, Engineering and business teams as required.
Support special projects and priority product launches in a fast-paced and continually evolving environment.
What We Look For In You
At least 8 years of relevant experience in Compliance, Legal or Risk within financial services, fintech, payments or the cryptocurrency industry.
Bachelor's degree in law, finance, business, economics, engineering or a related field, or equivalent practical experience.
Significant hands-on experience in product compliance, regulatory advisory or product risk assessment, including advising on new products and material product changes.
Strong understanding of the digital-asset industry and the products offered by crypto platforms, including trading, custody, payments, staking or earn products, lending, structured products, wallets or DeFi.
Strong working knowledge of relevant regulatory and compliance requirements, including licensing and regulatory-perimeter considerations, AML/CFT, sanctions, KYC, consumer protection, financial promotions and trading or market-conduct requirements.
Demonstrated ability to analyze products or initiatives involving significant complexity and risk and translate regulatory requirements into practical product requirements and controls.
Experience in and demonstrated success in leveraging AI-enabled technology to maintain risk assessment standards, including ongoing tuning of agentic skills aligned with the Company’s risk appetite.
Excellent risk judgment and the ability to balance compliance rigor with a pragmatic, risk-based approach that supports responsible commercial outcomes.
Proven ability to develop and deliver repeatable product compliance solutions, controls and review processes aligned with broader group requirements.
Strong project-management and execution skills, including the ability to manage multiple concurrent reviews, maintain accurate documentation and meet product-launch deadlines.
Excellent written and verbal communication skills, with the ability to present clear recommendations and lead discussions with Product, Engineering, Legal, Risk, senior management and other Compliance stakeholders.
Strong stakeholder-management skills and the ability to influence product decisions and constructively challenge proposals without compromising Compliance rigor.
Self-motivated, proactive and comfortable operating independently within a fast-paced, globally dispersed team.
High personal integrity and sound professional judgment, including the ability to identify when an issue requires escalation.
Nice to Haves
Direct product compliance or regulatory advisory experience at a crypto exchange, fintech or technology-led financial-services company.
Experience supporting multi-jurisdictional product launches and applying regulatory requirements across the United States, European Union, Middle East or Asia-Pacific.
Practical knowledge of CeFi trading products, including spot, derivatives, leverage, custody, institutional products and OTC flows.
Familiarity with Web3 products, blockchain technology, smart contracts, DeFi protocols and digital-asset transaction flows.
Experience developing compliance risk-assessment frameworks, controls, and key risk indicators.
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion.
The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization.
General Information (About the Client):
Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model.
They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements.
Tasks and Deliverables:
SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap.
Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards.
Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready.
PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag.
Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution.
Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle.
Required Experience:
SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies.
GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements.
Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata).
Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls.
Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers
members to perform at a higher level through a deeper understanding of their bodies
and daily lives.
As a Senior Manager GRC you will play a critical role in shaping, driving, and leading
our GRC team towards supporting ongoing operation and enhancement of the overall
information security governance program, assessing the risk landscape in a fast-paced,
high-growth environment. This role will strategically craft the roadmap in collaboration
with stakeholders across the business and fulfill growing security needs assessing risk
landscape across WHOOP.
In addition to core GRC responsibilities, you will partner closely with functions across
Product, Engineering, Data Analytics, and Legal to meaningfully move the security
posture of the company. We are seeking a leader and strategic partner with prior
experience driving GRC programs for technology teams.
RESPONSIBILITIES
- Lead the development, implementation, and continuous evolution of the GRC
program, driving both strategy and hands-on execution.
- Lead the development, implementation, and ongoing management of scalable
security control frameworks, policies, standards, and security awareness
programs, contributing directly while guiding the team’s work to strengthen organizational compliance.
- Support incident response activities and translated into actionable improvements
across the risk and compliance program.
- Actively manage the enterprise risk register, driving risk prioritization, and
delivering executive-level reporting.
- Manage, mentor, and develop GRC analysts while balancing hands-on execution
with effective delegation and team enablement as the program scales.
- Evaluate, implement, and continuously improve GRC program, tools, processes,
and metrics.
QUALIFICATIONS
- 10+ years of experience in GRC, or information security / cybersecurity, with 5+
years in managing GRC, information security, or cybersecurity professionals.
- Demonstrated success scaling GRC programs whilst crafting clear and efficient
team objectives and programs.
- Deep understanding of regulations and standards including, but not limited to ISO
27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligations
- Experience building or integrating GRC programs in enterprise security to
improve overall security posture of the organization
- Excellent communication, interpersonal, and leadership skills with the ability to
influence across teams and levels
- A minimum bachelor’s degree in any discipline. Computer science, cyber security
and risk or technology degrees preferred.
BONUS QUALIFICATIONS
- Certifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor.
- Background in leading Enterprise Risk, Cybersecurity Risk, Information Security
programs.
- Background in establishing DevSecOps, AI Governance, and SSDLC guardrails.
ABOUT YOU
- You are a strategic and people-focused leader who thrives on balancing hands-on
oversight with long-term organizational growth.
- You are a risk aware leader with ability to translate security risks in business
terms to influence both technical and non-technical teams.
- You are passionate about building bridges across different departments and can
operate confidently in both strategic and security control tactical domains.
- You believe that security enables innovation, and you lead with integrity fostering
a culture that embodies a risk mind-set.
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for these full-time positions is $185,000-$205,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
Location: United Arab Emirates; Cyprus; Poland; Romania; United Kingdom; Georgia
Reporting Line
Reports directly to the
CEO
.
Leads a compliance function that includes the Group Paralegal (direct report) and all compliance personnel embedded across the CXM Group of Companies.
Location
Remote (EU timezone preferred)
This is a fully remote role. EU timezone alignment is preferred to ensure effective overlap with key offices across the CXM Group. Occasional travel may be required for regulator meetings and visits to regional teams.
General Purpose
CXM Group is building a compliance architecture across six business lines and multiple jurisdictions simultaneously — this role owns that build.
The group is at an inflection point: multiple licensing processes are running in parallel, including a Norwegian crypto exchange being structured for MiCA passporting, a South African broker-dealer acquisition, a VARA application in the UAE, and prospective acquisitions in LATAM and Southeast Asia. The CCO exists to hold this together — ensuring that a fast-moving, multi-asset, multi-jurisdictional expansion programme stays regulatorily sound, that new entities are acquired and integrated without compliance exposure, and that the group's licensing pipeline converts into durable, operating authorisations across FX, CFDs, crypto, prediction markets, prop trading, and education.
This is a role for someone who has operated across tier-one and emerging-market regimes simultaneously and has the regulator-facing credibility to show for it.
Specific Objectives
Build and deploy a group-wide compliance reporting framework
Within the first three months, establish a structured compliance reporting framework covering all regulated entities across the CXM Group — including defined reporting lines, cadences, and escalation paths that give the CEO and board clear, timely visibility of the group's regulatory posture.
Create an AI-enabled legal document database
Within six months, deliver a searchable, indexed, and cross-referenced repository of all legal documentation across the group — structured for AI-assisted retrieval so that agreements, licences, policies, and regulatory correspondence can be surfaced and compared at speed.
Establish and embed internal legal SLAs
Within the first three months, define and operationalise service-level agreements for all internal legal workflows: standard contract reviews turned in 24 hours; new contract drafting completed within 48 hours; policy creation on agreed timelines. Compliance with these SLAs to be tracked and reported.
Deploy legal and compliance risk monitoring tools
Within six months, implement risk monitoring tooling across all business verticals and target markets — covering FX, CFDs, crypto, prediction markets, prop trading, and education — providing structured, ongoing visibility of regulatory and legal risk exposure across the group.
Drive the live licensing and acquisition pipeline to defined milestones
Own delivery against the group's active regulatory and M&A programme: South African broker-dealer acquisition and VARA (UAE) licence obtained by Q3 2026; VARA application submitted by Q4 2026 and licence granted by Q3 2027; MiCA passporting for the Norwegian crypto exchange secured by Q2 2027; LATAM and Southeast Asia acquisition targets scoped and structured by Q1 2027.
Key Activities
Oversee group-wide legal and compliance communications
Manage all inbound and outbound communications across the compliance and legal function — ensuring consistency of position, appropriate escalation, and clear audit trails across all CXM Group entities.
Monitor brand, regulatory, and compliance risk
Run ongoing monitoring of online brand exposure and regulatory risk signals across all business verticals and target markets, using dedicated tooling to surface issues before they become regulatory events.
Research target markets and emerging regulatory requirements
Conduct structured research on new and existing jurisdictions — tracking legislative developments, regulatory guidance, and enforcement trends across FX, CFDs, crypto, prediction markets, prop trading, and education to keep the group's risk exposure visible and current.
Build and maintain reporting infrastructure with Ops and IT
Work cross-functionally with Operations and IT to design, implement, and maintain the compliance reporting systems and dashboards needed to give leadership real-time visibility of the group's regulatory posture.
Inventory, organise, and analyse all group legal agreements
Own the end-to-end legal document function: audit existing agreements across all entities, build and maintain the AI-enabled document repository, and ensure all contracts are indexed, cross-referenced, and accessible for rapid retrieval.
Manage regulatory relationships and respond to inquiries
Serve as the primary point of contact for regulators across all jurisdictions — preparing responses, managing ongoing dialogue, and coordinating regulator visits or meetings with appropriate precision and consistency.
Set and enforce contract throughput standards
Define the SLA framework for all internal legal workflows — 24 hours for standard contract reviews, 48 hours for new contract drafting — and hold the Group Paralegal and compliance staff accountable for delivery against those standards. The CCO personally handles high-stakes, novel, or regulator-facing agreements; standard throughput runs through the team.
Requirements
Key Competences
Two competences are non-negotiable (and typically take a decade of multi-jurisdictional work to build) — everything else can be ramped. If you don't have these, the rest of the profile doesn't matter.
Non-negotiable
Multi-jurisdictional regulatory knowledge
Demonstrated command of tier-one regimes (CySEC, FCA, NFA, ASIC) and offshore/emerging-market frameworks (UAE, Mauritius, Seychelles, SVG, Cambodia), with working knowledge of MiCA and crypto licensing regimes globally. This is the core of the mandate — live deals are already in motion.
Regulator-facing credibility
Confidence and competence in direct regulator engagement — managing inquiries, coordinating responses, and representing the group's compliance posture with consistency across jurisdictions. The group has active regulator relationships that need an owner from day one.
Strong advantage
M&A and licensing fluency
Ability to support acquisition structuring and entity integration from a compliance perspective — assessing regulatory exposure, coordinating with external counsel, and managing parallel licensing processes without dropping threads.
AI-enabled legal operations
Experience deploying AI tooling in legal workflows — document retrieval, contract review acceleration, risk monitoring — is a strong advantage. Candidates without a deployment track record must demonstrate a concrete plan for rapid adoption and the aptitude to execute it.
Function leadership and SLA ownership
Ability to set standards, delegate effectively, and hold a team accountable for throughput — running the contract and compliance function at scale without becoming the bottleneck. Personal involvement reserved for high-stakes, novel, or regulator-facing matters.
Likely Current Job
Chief Compliance Officer (multi-jurisdictional broker or crypto exchange)
The closest equivalent — already holding a CCO title across FX, CFDs, or crypto at a group with multiple regulated entities and active regulator relationships. If your current seat is steady-state and you're ready to own a live build across six asset classes and a dozen jurisdictions, this is the step up.
Head of Compliance (tier-one regulated broker)
One level below CCO at a CySEC, FCA, or ASIC-regulated firm — strong regulatory depth, ready to move into group-level ownership. If you've hit the ceiling of what a single-jurisdiction, single-entity compliance role can teach you, this is where the complexity scales.
Regulatory Affairs Director (fintech or crypto)
Licensing and regulator-facing experience across multiple jurisdictions, possibly without the full compliance function remit yet. If you've been the technical expert behind the licensing programme and want to own the outcome end-to-end, this is the mandate.
M&A Compliance Lead (financial services)
Embedded in acquisition structuring and entity integration at a PE-backed or multi-entity financial services group. If you've been supporting deals from the compliance side and want a seat where M&A fluency is a core expectation rather than a secondary contribution, this is it.
Senior Legal Counsel / Head of Legal (retail broker or crypto exchange)
Contract-heavy, regulator-facing, with compliance responsibility baked in — a common feeder at smaller multi-jurisdictional groups where legal and compliance sit close together. If you've been carrying both functions informally and want a title and mandate that reflects the actual scope, this role makes it official.
Benefits
Employer Value Proposition
Most CCO roles at this level are maintenance jobs — one regulator, one entity, one asset class. This one is not.
Genuine architectural ownership across six asset classes and a dozen jurisdictions
FX, CFDs, crypto, prediction markets, prop trading, and education — running simultaneously, across tier-one and emerging-market regimes, with live licensing and M&A deals already in motion. The compliance architecture doesn't exist yet at group level. You're building it. By the end of year one, you'll be able to say you built a multi-jurisdictional compliance architecture from scratch, closed live licensing deals across MiCA, VARA, and emerging markets simultaneously, and stood up an AI-enabled legal ops function before almost anyone in the segment has done it. That is a résumé paragraph no single-jurisdiction maintenance role can produce.
Direct line to the CEO — and the mandate authority that comes with it
This role reports directly to the CEO, not to a CLO or CFO. In a live licensing and M&A environment where decisions need to move fast, that access matters: no layers between compliance judgment and executive action. Many group-level CCO seats don't offer this — this one does.
A live deal pipeline, not a hypothetical one
MiCA passporting, VARA in the UAE, a South African broker-dealer acquisition, and prospective acquisitions in LATAM and Southeast Asia — these are active, not aspirational. You'll be in the room on deals that will define the group's regulatory footprint for the next decade.
A first-mover opportunity in AI-enabled legal ops
The mandate includes building the AI-enabled legal ops function at group level — document retrieval, contract throughput acceleration, risk monitoring — in a segment where almost nobody has done it yet at this scale. If you've started deploying AI in legal workflows and want a seat where that capability shapes the entire function, this is it.
Group-level mandate, not a function-level seat
Functional authority over compliance personnel across all CXM Group entities. The scope matches the title — and the title reflects the actual job.
Fully remote
No relocation. No commute. Occasional travel when it matters — regulator meetings, regional teams — and otherwise, work from wherever you do your best thinking.
A genuinely uncommon opportunity
Multi-asset, multi-jurisdictional, M&A-active, AI-forward, fully remote — and at a scale that is still early enough for you to leave a visible mark. Roles with this combination of complexity and ownership don't come up often.
Compensation
Compensation is bespoke to the hire. We'd rather understand what you bring to the table and have a direct conversation about expectations than anchor the discussion prematurely. The package will be competitive with the scope of the mandate and consist of base + bonus that is tied to hitting agreed KPIs.
Assessment Process
This process is designed to match the weight of the mandate. A seat with this scope — live licensing, active M&A, and a compliance architecture being built from scratch — deserves a rigorous hire, and we make no apology for that. Every stage is purposeful, and every interviewer is there for a reason.
Group Legal Counsel
— regulatory and legal technical depth across jurisdictions, plus practical M&A case questions to assess acquisition structuring judgment.
CHRO
— leadership style, function-building track record, and cultural alignment with CXM Group's operating style.
CEO
— strategic judgment, mandate clarity, and the candidate's vision for the compliance architecture they'd build and own.
Board members
— select Board involvement at final stage, focused on governance credibility and long-term fit at group level.
The full process is designed to run within one month. We move quickly and respect that your time is finite — every stage is as much your opportunity to assess CXM as ours to assess you. If you take your next move as seriously as we take this hire, that's exactly the kind of conversation we want to have.
Location: San Francisco Bay Area, USA
Workplace: Hybrid
Why work at Higgsfield AI?
Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.
We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.
About the role:
Higgsfield AI is looking for a hands-on Member of Technical Staff, GRC Engineering to build and scale the technical infrastructure supporting our security, risk, and compliance programs.
As we scale globally, you'll translate compliance requirements into automated technical controls, continuous monitoring systems, and preventative security measures that evolve alongside our business.
Working closely with Security, Engineering, IT, and cross-functional teams, you'll design and implement controls that proactively prevent compliance gaps rather than simply identifying them during audits. This is a technical engineering role focused on building scalable GRC infrastructure, not traditional policy management or audit coordination.
We're looking for someone who combines strong knowledge of compliance frameworks with technical problem-solving skills, sound judgment, and the ability to build systems that support a rapidly growing organization.
WHAT YOU'LL DO
COMPLIANCE ENGINEERING & CONTROL AUTOMATION
- Translate regulatory and compliance requirements into actionable technical controls across corporate and product infrastructure.
- Design and implement automated controls for access management, system configurations, security monitoring, and compliance validation.
- Build preventative controls and release gates that identify and block noncompliant changes before deployment.
- Evaluate which controls should be automated and where human review remains necessary.
GRC INFRASTRUCTURE & CONTINUOUS MONITORING
- Build and maintain scalable GRC infrastructure that supports continuous compliance monitoring and evidence collection.
- Develop automated workflows to validate control effectiveness and identify compliance gaps in real time.
- Design controls that remain effective as employees, systems, vendors, locations, and products evolve.
- Integrate compliance checks into existing engineering workflows, infrastructure, and security tooling.
RISK MANAGEMENT & SECURITY CONTROLS
- Translate frameworks such as SOC 2, ISO 27001, and other applicable standards into practical engineering requirements.
- Partner with Security and Engineering to identify control gaps, prioritize risks, and implement sustainable remediation.
- Establish technical standards and preventative guardrails that reduce reliance on manual compliance processes.
- Evaluate emerging security and compliance requirements and incorporate them into scalable control designs.
TECHNICAL OWNERSHIP & COLLABORATION
- Own GRC engineering initiatives from control design through implementation, validation, and ongoing operations.
- Build automation through scripts, APIs, integrations, and engineering workflows.
- Partner with technical teams to embed compliance requirements into system architecture and development processes.
- Help define the long-term GRC infrastructure roadmap to support the company's growth over the next several years.
Requirements:
- 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
- Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
- Hands-on experience personally building or automating security and compliance controls.
- Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
- Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
- Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
- Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
- Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
- Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.
Compensation & Benefits
- We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth.
- Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location.
- Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program.
- Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth.
- Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks.
- The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team.
- Significant ownership, direct impact, and opportunities for professional growth as the company scales.
This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams.
Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.
Location: United States
Workplace: remote
Sphere Labs
The infrastructure moving the world's money today was built for another era: slow rails, walls between markets, and compliance layered in over time creating friction. Sphere Labs is building what comes next: modern, compliance-native infrastructure for cross-border payments and settlement, designed from the ground up to work for the businesses and regulated institutions it actually runs through. We work in active partnership with banks, licensed entities, and the regulators and jurisdictions shaping how global money moves, because the infrastructure that earns institutional trust has to be built alongside it.
Backed by Coinbase, Kraken, The Chernin Group, Jump Trading, Hudson River Trading, and some of the world's largest sovereign affiliates, we're a fully remote, global team building at the moment stablecoins are crossing into mainstream finance and regulated institutions are ready for modern rails. We hire self-starters: strong communicators and systematic thinkers who can look at a blank page and build something real. If you want a meaningful role in how global money movement evolves, and the upside that comes with getting in early, we'd like to meet you.
About the Role
We are seeking an experienced Head of Compliance to build, mature, and lead our compliance program in a fast-paced, crypto-native environment. This role will partner closely with the product and engineering teams in order to automate the existing program into a scalable, highly embedded into the day-to-day operations of the business. This is a hands-on leadership role: the ideal candidate is a decisive operator who can write SOPs, work cross-functionally with Product and Ops to design guardrails for new business lines, manage a compliance program at scale (including nested onboarding flows with integrator/partner relationships), and mentor others — all while combining deep AML/KYC/KYB expertise with a strong international regulatory background.
Key Responsibilities
Program Build-Out & Maturity:
Evaluate the existing compliance program, identify gaps in adoption and execution, and scale it into a program that is well-used, well-understood, and embedded across the business. This includes evaluating the risks associated with new geographic areas, and enhancing the existing program to account for those findings.
SOP Development:
Write clear, actionable Standard Operating Procedures that translate policy into repeatable, auditable day-to-day practice.
Product & Ops Partnership on New Business Lines:
Partner with Product and Operations to identify compliance requirements for new initiatives before they launch.
Day-to-Day Compliance Operations:
Own and manage the organization's daily compliance activities, ensuring consistent application of policies, procedures, and regulatory requirements.
Transaction Monitoring & Alert Disposition:
Review, investigate, and disposition alerts generated by the transaction monitoring system (built and maintained by the Risk team), ensuring timely and well-documented decisions.
Cross-Functional Partnership with Risk:
Work closely and collaboratively with the Risk, Compliance, Product and Operations teams to align on system design, alert logic, thresholds, and escalation processes.
Complaints Management:
Support the handling of complaints filed with regulatory bodies, ensuring timely, accurate, and well-documented responses.
Sales & Customer Onboarding Support:
Partner with the Sales team on customer onboarding to ensure new relationships meet compliance and risk standards from day one.
Law Enforcement Requests:
Support law enforcement inquiries and requests, ensuring appropriate handling, documentation, and legal coordination.
Investigations & SAR Filing:
Lead internal investigations into suspicious activity and prepare and file Suspicious Activity Reports (SARs) in accordance with regulatory requirements.
Team Development:
Train, mentor, and develop current and future junior compliance team members, building a strong bench of compliance talent.
Qualifications
Proven experience building or significantly maturing a compliance program from the ground up, ideally within crypto, fintech, or financial services.
Track record of meeting compliance SLAs and operating with strong, auditable rigor.
Experience managing a compliance program at scale, including nested/multi-layer onboarding flows involving integrator or partner relationships
Strong, hands-on knowledge of AML, KYC, and KYB frameworks and regulatory requirements.
Direct experience with transaction monitoring systems and alert disposition/investigation processes.
Demonstrated experience conducting investigations and filing SARs.
Crypto-native — deep familiarity with digital assets, blockchain transactions, and the unique compliance challenges of the crypto industry.
Highly decisive, with the judgment to make timely calls in ambiguous or high-stakes situations.
Ability to write clear, effective SOPs and translate policy into practice.
Excellent cross-functional collaboration skills, particularly with Risk, Product, Ops, and Sales teams.
Excellent judgment, attention to detail, and ability to operate independently in a fast-moving environment.
Why Sphere?
We sit at the intersection of crypto infrastructure and regulated finance — at the moment those worlds are finally converging. That means:
The window is now: For the first time in decades, the backbone of cross-border payments is being rebuilt. Legacy systems are fading, stablecoins are entering institutional finance, and the next settlement layer is being shaped right now. We're building it alongside the institutions that will run it, not around them.
High ownership, no playbook: This is early-stage work. You’ll be making decisions, building processes from scratch, and setting the direction instead of just following one. We’re looking for people who don’t wait for instructions, but jump in and figure things out.
Adaptability is the job: Strategy pivots here aren't failures, they're how we stay ahead of a fast-moving market and that’s our strength.
Real traction, real stakes: SpherePay is live and trusted by 200+ businesses. SphereNet is in active development with banks and regulators across 18 jurisdictions and counting. There’s real demand, real momentum, and a huge opportunity to shape what comes next.
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic's Tax team is hiring a Tax Director to own the company's global income tax provision and US income tax compliance function. This is a core operational leadership role: you will run the quarterly and annual ASC 740 close, manage the co-sourced compliance program, and build the processes, controls, and team that keep both scaling with the company.
What makes this seat unusual is what flows through it. Anthropic is deploying capital into compute and data center infrastructure at a scale and pace with few precedents, alongside an active program of acquisitions, joint ventures, and strategic investments — and every one of those transactions lands in the provision and the returns. We prefer candidates who bring familiarity and hands-on experience with complex M&A and infrastructure transactions on top of the core provision and compliance skill set: someone who can own the tax purchase price allocation workpapers, write the technical memo on a novel financing or lease structure, and then carry that answer correctly through the ASC 740 close and into the compliance workstream.
Key responsibilities
Own the quarterly and annual worldwide income tax provision: current and deferred computations, effective tax rate reconciliation, deferred tax inventory and valuation allowance assessments, stock-based compensation, uncertain tax positions, and return-to-provision true-ups
Own the tax journal entries, account reconciliations, income tax footnote and disclosures, and the supporting workpapers and SOX controls; manage the financial statement audit relationship with our Big 4 auditors
Coordinate the international components of the provision with the team and outside advisors, and drive continuous improvement in close speed and quality
Manage the US federal and state income tax compliance program, working with our co-sourced Big 4 providers: returns, estimated payments and extensions, elections and disclosures, and the compliance calendar
Own cash tax forecasting and support tax authority notices, examinations, and audit defense
Drive automation and tax technology adoption across the provision and compliance processes, including AI tooling
Own tax purchase price allocation workpapers for acquisitions: taxable vs. nontaxable characterization, ASC 805 opening balance sheet deferred taxes, goodwill component analysis, and reconciliation to the tax basis balance sheet — plus tax diligence, structuring, and integration (reorganization qualification, equity compensation in deals, Section 382, transaction costs, stub period returns)
Analyze data center and compute infrastructure arrangements — lease classification, sale-leasebacks, Section 467 rent schedules, build-out cost recovery — and the financing structures around them: debt vs. equity characterization, prepayments, vendor financing, warrants and equity instruments in commercial agreements, and joint venture formations and buyouts
Prepare and review technical memos documenting positions for auditors and leadership, and model the cash tax and effective tax rate consequences of proposed structures for Corp Dev, Finance, and Legal while deals are being negotiated
Mentor and develop tax team members and help build the function as the company grows
Manage outside advisors on opinions, studies, and valuations, and own those budgets and relationships
Minimum qualifications
Have substantial experience managing a corporate tax function in the multinational software and technology industry, including hands-on experience running the income tax provision and compliance processes, with a combination of Big 4 public accounting and in-house tax department experience
Have owned the full ASC 740 provision cycle at a multinational company — not just reviewed pieces of it — including deferred taxes, valuation allowance judgments, uncertain tax positions, footnote and disclosures, SOX controls, and auditor management
Have managed a US federal and state income tax compliance program at scale, including co-sourced arrangements with Big 4 providers
Bring familiarity and hands-on experience with complex M&A transactions — tax purchase price allocations, ASC 805 opening balance sheet accounting, diligence and structuring — and ideally experience with infrastructure leases, build-outs, and the financing arrangements behind them
Write clear, well-organized technical memos that hold up with Big 4 auditors, and can explain the same issue in plain terms to non-tax partners
Hold a CPA; a Master's in Taxation or LLM is a plus
Thrive on novel fact patterns and ambiguity, and default to building the workpaper and writing the position down rather than waiting for a template
Preferred qualifications
Familiarity and experience with data center or similar capital-intensive infrastructure transactions — hyperscaler-scale compute, energy, or telecom deals, project finance, or joint venture structures
Experience analyzing warrants, convertible instruments, or other equity components embedded in commercial and supply agreements, and debt-equity analysis for intercompany and third-party financing
An interest in applying AI tools to tax workflows
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$230,000
—
$300,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote - United States
Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit
www.redditinc.com
.
The Compliance Engineering team is responsible for preparing Reddit’s platforms for evolving regulatory requirements. We’re building products that establish the foundation of trust in the Reddit platform, while partnering closely with teams across the company to ensure our platforms and features meet the highest standards. Engineers on this team will thrive in dynamic, ambiguous problem spaces and work across multiple domains and technology stacks.
What You’ll Do:
Shape the future of Reddit by adapting our platforms to an evolving privacy, security, and regulatory landscape
Partner with product, design, and engineering teams across the company to build trusted, compliant experiences for millions of users
Join a highly visible team where you’ll influence both technical and product strategy, and help define an entirely new product space
Own product areas and shape strategy end-to-end: from technical design and coding to testing, experimentation, analysis, and launch
Lead high-impact, cross-functional initiatives that are critical to Reddit’s business and platform integrity
Raise the bar for engineering by improving workflows, setting standards, and mentoring the next generation of engineers
Qualifications for this role:
5+ years backend development experience with multiple parts of the backend stack, from databases to networking to efficient computing. We develop with Go, Python, Postgres, Redis, Thrift, GraphQL and deploy to Docker/k8s on AWS.
Experience as a tech lead on projects and teams with 3+ backend engineers
Ability to design and implement complex distributed systems operating under high load.
You must be self-directed, innovative, and biased towards action in fast-paced environments. You live to build new things and thrive in ambiguity and even failure.
Excellent communication skills. You must be able to collaborate effectively with teams in a fully-remote environment, and discuss complex topics with technical and non-technical audiences.
Experience mentoring engineers, owning team processes, and leading cross-functional projects is preferred.
Benefits:
Comprehensive Healthcare Benefits and Income Replacement Programs
401k with Employer Match
Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
Family Planning Support
Gender-Affirming Care
Mental Health & Coaching Benefits
Flexible Vacation & Paid Volunteer Time Off
Generous Paid Parental Leave
Pay Transparency:
This job posting may span more than one career level.
In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit
https://www.redditinc.com/careers/
.
To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.
The base salary range for this position is:
$190,800
—
$267,100 USD
In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.
During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our
Candidate Privacy Policy for Potential Employees and Contractors
.
Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.
Location: México
Compliance team:
We are looking for a motivated, ambitious and detail-oriented
SME
Compliance Lawyer
to join our Legal & Compliance team. If you’re passionate about compliance, risk assessment, and regulatory standards and want to contribute to a strong AML/CFT compliance framework within the fastest growing digital bank in Mexico, this role is for you.
This role is ideal for someone who enjoys structured, detail-oriented work and wants to develop a strong foundation in legal and compliance operations within a fast-paced fintech environment.
Challenges that await you:
Own the day-to-day management of incoming legal and compliance requests, ensuring timely, accurate, and well-documented responses. This will be the core responsibility of the role.
Supervise the decision making process of analysts regarding the onboarding of clients and alerts in the transactional monitoring mechanisms within the bank.
Review, organize, prioritize, and follow up on requests received from internal stakeholders, maintaining clear communication throughout the process.
Support the tracking and coordination of regulatory matters, ensuring documentation is complete and deadlines are met.
Develop and modify internal policies and procedures to cover the financial products and services offered by Banco Plata.
Conduct legal research and preliminary investigations to support the Legal & Compliance team.
Help identify applicable regulations and understand what actions are permitted under current legal frameworks.
Collaborate with different business areas to gather information required for legal and regulatory processes.
What makes you a great fit:
Bachelor's Degree in Law.
3+ years of post-qualification experience on financial law & inclusion, AML/CFT, administrative law, or highly regulated markets.
Identify and assess compliance, AML/CFT, sanctions, reputational, and operational risks related to financial products and services offered to PYMEs.
Advanced English and Spanish (mandatory).
Strong communication and interpersonal skills, with professionalism when interacting with internal and external stakeholders.
Highly organized with excellent attention to detail.
Experience with Mexico's KYC/KYB regulation.
Proactive, reliable, and eager to learn in a fast-paced environment.
Strong sense of ownership and accountability for assigned tasks.
Nice to Have:
Exposure to banking and financial regulation.
Proficiency with transaction monitoring software.
Official AML/CFT certification issued by CNBV.
Experience as liaison between corporations and regulatory agencies.
Knowledge of the applicable regulation to Designated Non-Financial Professions and Businesses (
Actividades Vulnerables
).
Our ways of working:
Innovative Spirit
: A commitment to creativity and groundbreaking solutions.
Honest Feedback
: valuing open, transparent communication.
Supportive Team
: a strong, collaborative community.
Celebrating Achievements
: recognizing our wins together.
High-Tech Environment:
a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances.
Location: Hong Kong; Singapore; US / Remote
Workplace: remote
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
CertiK has spent years building security, risk, monitoring, and blockchain expertise across thousands of digital asset companies and institutional customers. As digital assets increasingly become part of mainstream financial infrastructure, security, financial crime risk, and regulatory compliance are converging. We believe there is an opportunity to build a new generation of institutional digital asset risk and compliance products at that intersection. This role will have significant influence over what that product becomes. We are looking for someone who wants to build it.
About the Role
CertiK is building the next generation of risk and compliance products for financial institutions and digital asset businesses. We are looking for a product leader to own this product area from customer discovery and product strategy through delivery, go to market, adoption, and expansion. This is not an internal compliance role. You are here to build the products that compliance, AML, financial crime, and risk teams use. You will work directly with financial institutions, exchanges, VASPs, fintechs, and other digital asset businesses to understand how their compliance teams operate, identify the problems that matter most, and turn those problems into scalable products. The product space may include areas such as blockchain and entity risk, transaction and wallet monitoring, sanctions and KYT, risk scoring, investigation and case management workflows, continuous monitoring, and compliance evidence and reporting. A core part of your job will be deciding which problems CertiK should solve first and which ones we should not. You will work closely with Product, Engineering, Data, Compliance, Business Development, and company leadership to build this product line.
Responsibilities
Own the product vision, strategy, and roadmap for CertiK's AML and digital asset compliance products.
Spend significant time with customers and prospective customers, including CCOs, MLROs, AML teams, investigators, and risk leaders, to deeply understand their workflows and unmet needs.
Identify repeatable market problems behind individual customer requests and determine which problems should become scalable products.
Translate customer and market insights into product concepts, prototypes, requirements, and clear engineering priorities.
Drive products from discovery through design, development, launch, adoption, and iteration.
Define the key workflows, risk models, decision systems, and user experiences required by institutional compliance teams.
Work closely with Engineering and Data teams to make appropriate product and technical trade offs.
Partner with Business Development and customer facing teams during strategic sales cycles, including discovery, product demonstrations, pilots, and design partnerships.
Work with Compliance and regulatory experts to translate evolving AML, sanctions, and digital asset requirements into scalable product capabilities.
Measure success through customer adoption, product usage, enterprise wins, expansion, and other measurable business outcomes.
Requirements
Significant product management experience building B2B software in fintech, regtech, financial services, risk, compliance, or digital assets.
A track record of owning meaningful products or product areas from discovery through launch and adoption.
Deep understanding of AML, financial crime, transaction monitoring, sanctions, KYC/KYB, investigations, or related compliance workflows.
Experience building or working closely with products such as transaction monitoring, blockchain analytics, wallet screening, risk engines, case management, investigation platforms, or compliance workflow systems.
Strong customer discovery skills. You can speak credibly with senior compliance leaders and frontline analysts, understand both what they say and what they actually need, and translate those insights into product decisions.
Strong product judgment. You know the difference between a one off customer request and a repeatable market need, and you are comfortable making hard prioritization decisions.
Commercial instincts. You understand that a successful enterprise product must not only work, customers must adopt it, pay for it, and expand their usage.
Ability to operate in an ambiguous, early stage product environment and personally drive work forward rather than simply coordinate across teams.
Bonus Points
Experience building AML or compliance products at a blockchain analytics, fintech, regtech, exchange, bank, or financial infrastructure company.
Experience with blockchain analytics, KYT, wallet screening, on chain investigations, or digital asset risk.
Previous experience as an AML practitioner, compliance officer, MLRO, investigator, or financial crime professional.
Experience working with regulated financial institutions and understanding how compliance products are evaluated, procured, implemented, and operated.
Experience with regulatory examinations, VASP licensing, or financial crime remediation.
CAMS or another relevant professional qualification.
Relationships with compliance and risk leaders across banks, fintechs, exchanges, VASPs, regulators, or law enforcement.
The expected annual base salary range for this position in the United States is $150,000 to $220,000. Compensation for candidates outside the United States will be determined based on location, experience, and qualifications.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: El Salvador (Remote)
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Role
OKX is one of the world's leading digital asset exchanges, with a regulated and actively expanding presence across Latin America. We are looking for a senior compliance professional to join our LatAm team as Compliance Officer for El Salvador and permanent support for LatAm jurisdictions.
This role combines day-to-day case management with direct regulatory reporting obligations before local authorities, and requires the ability to independently lead process improvements while acting as the key liaison between the global compliance operations team and the regional team.
Strategic Responsibilities
Design, implementation and continuous improvement of the AML/CFT compliance program for El Salvador in alignment with the global standards.
Lead and implement process improvement initiatives across operational workflows and control frameworks for our El Salvador entity.
Serve as the primary point of contact between the global compliance operations team and the local/regional team, ensuring alignment on policies, procedures, escalation protocols, and regulatory standards.
Develop scalable solutions for operational efficiency, accounting for both current regulatory requirements and anticipated changes.
Drive cross-functional collaboration to address regulatory challenges, working with Legal, Finance, Risk, and Product teams as needed.
Contribute to knowledge-sharing across compliance functions and support training efforts for the regional team.
Daily Responsibilities
For Our El Salvador Entity:
Review and resolve escalated Transaction Monitoring cases referred by the operational team: apply senior risk-based judgment to complex or ambiguous alerts, make final suspicious activity determinations, and ensure all case documentation meets the evidentiary standard required for regulatory defensibility.
Review and resolve escalated EDD cases for high-risk customers in accordance with local regulation requirements.
Make final match/no-match decisions on escalated sanctions screening cases referred by the operational team.
Review and determine escalated PEP cases, applying intensified due diligence measures where required and setting the standard for what warrants escalation in the first place.
Own the preparation and submission of Reportes de Operaciones Sospechosas (ROS/SARs) to the UIF.
Own the preparation and timely submission of all mandatory periodic regulatory reports before local authorities.
Qualifications & Experience
4–6 years of verifiable experience in global AML compliance standards applicable to VASPs/PSPs; in-depth knowledge of AML/CFT operations (CDD, EDD, transaction monitoring, sanctions, PEPs).
At least 2 years of verifiable experience in compliance with a Crypto company. [Mandatory]
Stakeholder management skills: ability to interact with senior leadership, and cross-functional teams.
Advanced knowledge of AML/CFT compliance operations, including CDD, EDD, transaction monitoring, sanctions, and PEP screening.
Demonstrated ability to independently manage high-risk cases and make sound, risk-based compliance judgments.
Proficiency with blockchain analytics tools (Chainalysis, Elliptic, TRM Labs or equivalent).
Knowledge of regional and global VASP regulatory frameworks, with focus El Salvador. Experience in additional LATAM jurisdictions is a plus.
Fluency in Spanish is required; English proficiency is strongly preferred.
Perks & Benefits
Competitive total compensation package
Various team building programs and company events
#LI-EWR1 #LI-HYBRID
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Boston, Massachusetts, United States
We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.
Job Overview
Ready to bring your paralegal skills to one of the world's most iconic play and entertainment companies? Hasbro is looking for a sharp, driven Paralegal with 4+ years of experience to join our Legal Department!
In this role you'll be a key part of the corporate, litigation and compliance legal team. You'll partner with colleagues who handle commercial, employment, and litigation matters, and support compliance work including anti-bribery due diligence, code of conduct training, and conflict-of-interest reviews. You will also get a chance to have high visibility in the organization by assisting with corporate governance and securities compliance for a global, publicly traded company. If you like a fast pace, a high bar for accuracy, and seeing your work show up at the most senior levels of the company, this is your game! If your background looks a little different from what's described here but you can do the work, we encourage you to apply.
Location and Work Arrangement
This role is based at our Boston, Massachusetts office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays.
What You'll Do
Partner with attorneys and internal business teams in litigation matters, including document and witness discovery, case management, and research in commercial, employment, product liability, privacy and other types of claims.
Lead anti-bribery due diligence for global third parties, conducting risk assessments, reviewing red-flag findings, and providing formal compliance clearance to mitigate corruption, sanctions, and reputational risks.
Manage and update electronic code of conduct and compliance training, ensuring alignment with evolving legal, regulatory, and business requirements.
Review conflict-of-interest disclosures, assess responses that need follow-up, and work with stakeholders to resolve potential conflicts.
Assist in managing outside counsel relationships, including tracking invoices, budgets, and matter status.
Support corporate securities matters, including assisting with SEC filings (Forms 10-K, 10-Q, 8-K, proxy statements), Section 16 reporting, insider trading compliance, and maintenance of the corporate disclosure calendar.
Assist with corporate governance functions, including preparing board and committee materials, maintaining minute books, tracking director and officer information, and supporting annual meeting preparations.
Draft, review, and manage a broad range of commercial agreements, including vendor contracts, NDAs, services agreements, and other transactional documents; assist with maintaining contract management systems and track key deadlines and renewals.
Research federal and state securities regulations and commercial law developments to support attorney advice and strategy.
Respond to legal inquiries from Finance and business partners regarding securities compliance and contract obligations.
What You'll Bring
4+ years of relevant paralegal experience in a law firm or in-house legal department.
Strong interpersonal skills, sound judgment, and commitment to teamwork.
Ability to work effectively with attorneys, finance, and business managers at all levels.
Demonstrated ability to prioritize a substantial and diverse workload and meet deadlines in a fast-paced environment.
Advanced proficiency in Microsoft 365 (Word, Excel, PowerPoint, Outlook, SharePoint, Teams) and external platforms such as Workiva, Diligent, LRN and Docusign.
Exceptional organizational, analytical, and written communication skills with the ability to handle sensitive and confidential information with discretion.
Ability to be forward-looking and to develop new processes or adjust existing processes, as needed.
What Sets You Apart
Associate's Degree or Paralegal Certificate preferred; Bachelor's Degree a plus.
Paralegal experience spanning corporate securities or commercial transactions in a law firm or in-house legal department.
Expertise in anti-bribery and corruption due diligence, including risk assessments, red-flag analysis, and compliance clearance for third-party engagements.
Who We Are
We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all.
Hasbro
About the Company – Hasbro
Wizards of the Coast
Who We Are – Wizards of the Coast
Equal Opportunity
Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.
Accommodations
If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process.
Notice Regarding Hasbro’s use of AI in the Recruitment Process
We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.
How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review.
Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions.
Greenhouse has published the results of an independent bias audit of Talent Matching.
View the Greenhouse Talent Matching audit results
.
The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.
Pay Range
$73,600
—
$110,400 USD
Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:
Health & Wellness
Time Off to Recharge
Financial Well-being
Life & Family Support
Volunteer and Community Initiatives
Learning & Development
Exclusive Perks
Please review our
Applicant Privacy Notice
to learn how we collect, use, and protect your personal information in connection with the application process.
Location: Paris, France
Freedom24 is an international fintech and investment platform, part of Freedom Holding Corp. (NASDAQ: FRHC), providing brokerage and financial services to clients across Europe.
We are actively expanding our presence in France, and as part of our broader strategy to grow our product offering, we are exploring the launch of new regulated financial services in the French market, including a digital banking offering. To support this, we are strengthening our compliance team and looking for an experienced MLCO to build and lead the AML/CFT function for this new area of our business.
This is a unique opportunity to join at an early stage and directly shape the compliance infrastructure from the ground up.
Design and implement AML/CFT policies and procedures in line with ACPR, TRACFIN and EU regulatory requirements (AMLD5/6);
Build and oversee the KYC/KYB framework, including customer due diligence (CDD/EDD);
Monitor transactions, identify suspicious activity, and prepare TRACFIN filings;
Conduct risk assessments across products, customers, geographies and channels;
Act as the primary point of contact with regulators (ACPR, TRACFIN, AMF);
Train staff on AML/CFT, sanctions compliance and fraud prevention;
Report to senior management on compliance risks and controls.
Requirements
7+ years of experience in AML/CFT compliance within a bank, payment institution (PSP/EMI), or fintech company;
Strong knowledge of French and EU regulatory frameworks (Code monétaire et financier, LCB-FT, AMLD);
Proven hands-on experience directly engaging with regulators (ACPR, TRACFIN) — correspondence, inspections, reporting;
Experience independently building a compliance function or processes from scratch, not just operating within an already established system;
Comfortable working in a startup environment: high ambiguity, few pre-built processes, and the ability to make decisions independently;
Understanding of digital financial and/or payment services and related risks;
Fluent in French and English;
ACAMS certification is a plus.
Benefits
A rare opportunity to build a compliance function for a new business line from the ground up — with direct influence on strategy and product;
A competitive salary that reflects the seniority and responsibility of the role;
A role within an international, publicly listed company (NASDAQ: FRHC) with ambitious growth plans in Europe;
Real autonomy and high level of trust — a rare chance to build something new, not just maintain an existing function.
headParis, France
УдалённоHong Kong; Singapore; US / Remote
seniorYour teams operate across APAC, EMEA, and NASA time zones, spanning hundreds of vendors, data center providers, and regulatory jurisdictions; Strong program management instincts: comfortable running complex, multi-workstream initiatives with dependencies across teams, vendors, and time zones
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридBelgrade, Serbia; Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures
seniorHong Kong, Hong Kong SAR; Singapore, Singapore
УдалённоseniorГеография найма не уточнена
ОфисseniorBoston, MA
УдалённоUnited Arab Emirates; Cyprus; Poland; Romania; United Kingdom; Georgia; Remote (EU timezone preferred); EU timezone alignment is preferred to ensure effective overlap with key offices across the CXM Group; No relocation
ГибридSan Francisco Bay Area, USA; Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone
УдалённоheadUnited States
San Francisco, CA | New York City, NY | Seattle, WA