Location: United Arab Emirates; Cyprus; Poland; Romania; United Kingdom; Georgia
Reporting Line
Reports directly to the
CEO
.
Leads a compliance function that includes the Group Paralegal (direct report) and all compliance personnel embedded across the CXM Group of Companies.
Location
Remote (EU timezone preferred)
This is a fully remote role. EU timezone alignment is preferred to ensure effective overlap with key offices across the CXM Group. Occasional travel may be required for regulator meetings and visits to regional teams.
General Purpose
CXM Group is building a compliance architecture across six business lines and multiple jurisdictions simultaneously — this role owns that build.
The group is at an inflection point: multiple licensing processes are running in parallel, including a Norwegian crypto exchange being structured for MiCA passporting, a South African broker-dealer acquisition, a VARA application in the UAE, and prospective acquisitions in LATAM and Southeast Asia. The CCO exists to hold this together — ensuring that a fast-moving, multi-asset, multi-jurisdictional expansion programme stays regulatorily sound, that new entities are acquired and integrated without compliance exposure, and that the group's licensing pipeline converts into durable, operating authorisations across FX, CFDs, crypto, prediction markets, prop trading, and education.
This is a role for someone who has operated across tier-one and emerging-market regimes simultaneously and has the regulator-facing credibility to show for it.
Specific Objectives
Build and deploy a group-wide compliance reporting framework
Within the first three months, establish a structured compliance reporting framework covering all regulated entities across the CXM Group — including defined reporting lines, cadences, and escalation paths that give the CEO and board clear, timely visibility of the group's regulatory posture.
Create an AI-enabled legal document database
Within six months, deliver a searchable, indexed, and cross-referenced repository of all legal documentation across the group — structured for AI-assisted retrieval so that agreements, licences, policies, and regulatory correspondence can be surfaced and compared at speed.
Establish and embed internal legal SLAs
Within the first three months, define and operationalise service-level agreements for all internal legal workflows: standard contract reviews turned in 24 hours; new contract drafting completed within 48 hours; policy creation on agreed timelines. Compliance with these SLAs to be tracked and reported.
Deploy legal and compliance risk monitoring tools
Within six months, implement risk monitoring tooling across all business verticals and target markets — covering FX, CFDs, crypto, prediction markets, prop trading, and education — providing structured, ongoing visibility of regulatory and legal risk exposure across the group.
Drive the live licensing and acquisition pipeline to defined milestones
Own delivery against the group's active regulatory and M&A programme: South African broker-dealer acquisition and VARA (UAE) licence obtained by Q3 2026; VARA application submitted by Q4 2026 and licence granted by Q3 2027; MiCA passporting for the Norwegian crypto exchange secured by Q2 2027; LATAM and Southeast Asia acquisition targets scoped and structured by Q1 2027.
Key Activities
Oversee group-wide legal and compliance communications
Manage all inbound and outbound communications across the compliance and legal function — ensuring consistency of position, appropriate escalation, and clear audit trails across all CXM Group entities.
Monitor brand, regulatory, and compliance risk
Run ongoing monitoring of online brand exposure and regulatory risk signals across all business verticals and target markets, using dedicated tooling to surface issues before they become regulatory events.
Research target markets and emerging regulatory requirements
Conduct structured research on new and existing jurisdictions — tracking legislative developments, regulatory guidance, and enforcement trends across FX, CFDs, crypto, prediction markets, prop trading, and education to keep the group's risk exposure visible and current.
Build and maintain reporting infrastructure with Ops and IT
Work cross-functionally with Operations and IT to design, implement, and maintain the compliance reporting systems and dashboards needed to give leadership real-time visibility of the group's regulatory posture.
Inventory, organise, and analyse all group legal agreements
Own the end-to-end legal document function: audit existing agreements across all entities, build and maintain the AI-enabled document repository, and ensure all contracts are indexed, cross-referenced, and accessible for rapid retrieval.
Manage regulatory relationships and respond to inquiries
Serve as the primary point of contact for regulators across all jurisdictions — preparing responses, managing ongoing dialogue, and coordinating regulator visits or meetings with appropriate precision and consistency.
Set and enforce contract throughput standards
Define the SLA framework for all internal legal workflows — 24 hours for standard contract reviews, 48 hours for new contract drafting — and hold the Group Paralegal and compliance staff accountable for delivery against those standards. The CCO personally handles high-stakes, novel, or regulator-facing agreements; standard throughput runs through the team.
Requirements
Key Competences
Two competences are non-negotiable (and typically take a decade of multi-jurisdictional work to build) — everything else can be ramped. If you don't have these, the rest of the profile doesn't matter.
Non-negotiable
Multi-jurisdictional regulatory knowledge
Demonstrated command of tier-one regimes (CySEC, FCA, NFA, ASIC) and offshore/emerging-market frameworks (UAE, Mauritius, Seychelles, SVG, Cambodia), with working knowledge of MiCA and crypto licensing regimes globally. This is the core of the mandate — live deals are already in motion.
Regulator-facing credibility
Confidence and competence in direct regulator engagement — managing inquiries, coordinating responses, and representing the group's compliance posture with consistency across jurisdictions. The group has active regulator relationships that need an owner from day one.
Strong advantage
M&A and licensing fluency
Ability to support acquisition structuring and entity integration from a compliance perspective — assessing regulatory exposure, coordinating with external counsel, and managing parallel licensing processes without dropping threads.
AI-enabled legal operations
Experience deploying AI tooling in legal workflows — document retrieval, contract review acceleration, risk monitoring — is a strong advantage. Candidates without a deployment track record must demonstrate a concrete plan for rapid adoption and the aptitude to execute it.
Function leadership and SLA ownership
Ability to set standards, delegate effectively, and hold a team accountable for throughput — running the contract and compliance function at scale without becoming the bottleneck. Personal involvement reserved for high-stakes, novel, or regulator-facing matters.
Likely Current Job
Chief Compliance Officer (multi-jurisdictional broker or crypto exchange)
The closest equivalent — already holding a CCO title across FX, CFDs, or crypto at a group with multiple regulated entities and active regulator relationships. If your current seat is steady-state and you're ready to own a live build across six asset classes and a dozen jurisdictions, this is the step up.
Head of Compliance (tier-one regulated broker)
One level below CCO at a CySEC, FCA, or ASIC-regulated firm — strong regulatory depth, ready to move into group-level ownership. If you've hit the ceiling of what a single-jurisdiction, single-entity compliance role can teach you, this is where the complexity scales.
Regulatory Affairs Director (fintech or crypto)
Licensing and regulator-facing experience across multiple jurisdictions, possibly without the full compliance function remit yet. If you've been the technical expert behind the licensing programme and want to own the outcome end-to-end, this is the mandate.
M&A Compliance Lead (financial services)
Embedded in acquisition structuring and entity integration at a PE-backed or multi-entity financial services group. If you've been supporting deals from the compliance side and want a seat where M&A fluency is a core expectation rather than a secondary contribution, this is it.
Senior Legal Counsel / Head of Legal (retail broker or crypto exchange)
Contract-heavy, regulator-facing, with compliance responsibility baked in — a common feeder at smaller multi-jurisdictional groups where legal and compliance sit close together. If you've been carrying both functions informally and want a title and mandate that reflects the actual scope, this role makes it official.
Benefits
Employer Value Proposition
Most CCO roles at this level are maintenance jobs — one regulator, one entity, one asset class. This one is not.
Genuine architectural ownership across six asset classes and a dozen jurisdictions
FX, CFDs, crypto, prediction markets, prop trading, and education — running simultaneously, across tier-one and emerging-market regimes, with live licensing and M&A deals already in motion. The compliance architecture doesn't exist yet at group level. You're building it. By the end of year one, you'll be able to say you built a multi-jurisdictional compliance architecture from scratch, closed live licensing deals across MiCA, VARA, and emerging markets simultaneously, and stood up an AI-enabled legal ops function before almost anyone in the segment has done it. That is a résumé paragraph no single-jurisdiction maintenance role can produce.
Direct line to the CEO — and the mandate authority that comes with it
This role reports directly to the CEO, not to a CLO or CFO. In a live licensing and M&A environment where decisions need to move fast, that access matters: no layers between compliance judgment and executive action. Many group-level CCO seats don't offer this — this one does.
A live deal pipeline, not a hypothetical one
MiCA passporting, VARA in the UAE, a South African broker-dealer acquisition, and prospective acquisitions in LATAM and Southeast Asia — these are active, not aspirational. You'll be in the room on deals that will define the group's regulatory footprint for the next decade.
A first-mover opportunity in AI-enabled legal ops
The mandate includes building the AI-enabled legal ops function at group level — document retrieval, contract throughput acceleration, risk monitoring — in a segment where almost nobody has done it yet at this scale. If you've started deploying AI in legal workflows and want a seat where that capability shapes the entire function, this is it.
Group-level mandate, not a function-level seat
Functional authority over compliance personnel across all CXM Group entities. The scope matches the title — and the title reflects the actual job.
Fully remote
No relocation. No commute. Occasional travel when it matters — regulator meetings, regional teams — and otherwise, work from wherever you do your best thinking.
A genuinely uncommon opportunity
Multi-asset, multi-jurisdictional, M&A-active, AI-forward, fully remote — and at a scale that is still early enough for you to leave a visible mark. Roles with this combination of complexity and ownership don't come up often.
Compensation
Compensation is bespoke to the hire. We'd rather understand what you bring to the table and have a direct conversation about expectations than anchor the discussion prematurely. The package will be competitive with the scope of the mandate and consist of base + bonus that is tied to hitting agreed KPIs.
Assessment Process
This process is designed to match the weight of the mandate. A seat with this scope — live licensing, active M&A, and a compliance architecture being built from scratch — deserves a rigorous hire, and we make no apology for that. Every stage is purposeful, and every interviewer is there for a reason.
Group Legal Counsel
— regulatory and legal technical depth across jurisdictions, plus practical M&A case questions to assess acquisition structuring judgment.
CHRO
— leadership style, function-building track record, and cultural alignment with CXM Group's operating style.
CEO
— strategic judgment, mandate clarity, and the candidate's vision for the compliance architecture they'd build and own.
Board members
— select Board involvement at final stage, focused on governance credibility and long-term fit at group level.
The full process is designed to run within one month. We move quickly and respect that your time is finite — every stage is as much your opportunity to assess CXM as ours to assess you. If you take your next move as seriously as we take this hire, that's exactly the kind of conversation we want to have.
УдалённоUnited Arab Emirates; Cyprus; Poland; Romania; United Kingdom; Georgia; Remote (EU timezone preferred); EU timezone alignment is preferred to ensure effective overlap with key offices across the CXM Group; No relocation
Задачи:
— Стратегия и P&L B2B-направления: от позиционирования и pricing до коммерческого результата
— Построение коммерческой функции — Sales, BizDev, Account Management: найм, структура, процессы
— Прямые продажи операторам, интеграции с платформами, агрегаторами и провайдерами контента
— Партнёрства: платёжные компании, провайдеры, каналы дистрибуции
— Выход на новые рынки — Tier 1-3, приоритеты определяются вместе
— Account management и retention клиентской базы, рост revenue на существующих аккаунтах
— Управление собственным B2C-казино как активом и как референс-кейсом для B2B-продаж
— Коммерческие KPI: рост revenue, привлечение операторов, GGR партнёрской базы
Ожидаем:
— Опыт CEO / COO / CCO / GM в iGaming с прямой ответственностью за P&L B2B-продажи в iGaming: платформы, софт, агрегаторы, контент — обязательное ядро
— Понимание технической стороны: интеграции, API, сертификация, лицензионные требования
— Опыт построения или пересборки коммерческой команды
— Работа с Tier 1-3 рынками
— Операторский B2C-бэкграунд — плюс: помогает говорить с клиентом на его языке
— Английский C1+
Условия:
— Ключевая роль, прямая работа с фаундером, влияние на стратегию продукта
— Фикс + бонус от коммерческого результата; опцион обсуждается
— Full-time, remote-first
УдалённоКипр; CEO/COO | REMOTE GLOBAL OR RELOCATION TO CYPRUS | IGAMING #remote or #relocation #fulltime #clevel #coo #ceo #igaming https://teletype.in/@courierus/1Fke0-k7b_P; RELOCATION TO CYPRUS OR REMOTE GLOBAL 📍 Europe / Remote У нас есть работающая B2B-платформа с 5-летней историей: она построена под собственное онлайн-казино и уже держит боевую нагрузку
Location: Warszawa, Poland
Workplace: hybrid
What will you be doing on a day-to-day basis?
This position requires working in hybrid model in our Warsaw office
Ownership & Vision
Taking ownership and developing the game direction,
Owning the game's trajectory from first concept & prototypes to market & release, taking full accountability for the delivery of a high-quality, enjoyable & positive player experience with commercial success,
Work with creative leadership and members of the management team to define the game and unify visions,
Delivering guidelines, mandates to the team to design specific gameplay features,
Translating the creative vision into design mechanics, systems and whole player experience,
Ensuring that all elements work together to fulfill the vision,
Manage various creative ideation steps from pitching ideas to rapid prototyping,
Adapting to technical & production constraints and readjusting design direction if needed,
Ensuring strong alignment with the CCO and CPO on the creative and production vision.
Production
Reviewing and debating budgets & schedules with the producers,
Working with production team to set the best direction and track the progress during game production,
Supporting best practices through the production process.
Cooperation & Leadership
Collaborate with cross-functional teams to ensure cohesion of all conceptual, technical, visual and narrative elements,
Supporting designers in delivering high quality features that enhance game’s vision,
Working with tech team to evolve technology and ensure that it supports game direction,
Resolving creative and technical roadblocks,
Hands-on attitude while using tools and leading all teams by example.
Feedback
Regularly play the game for feedback and quality control purposes,
Support team members in feature development and provide mentoring and constructive feedback to reach quality.
Market research
Anticipate technological advances and stay informed of market trends to evolve our production processes and define best practices, and share them with our studios,
Aligning the creative vision with the project's business goals and target audience expectations.
Following market trends to update the production processes and our best practices.
What will help you succeed in this role?
At least 7 years of experience with a focus on design, art or creative direction,
Experience in game design will be a big plus and advantage,
Experience as Game Director, Creative Director, Design Lead/Director or Art Director/Lead,
Experience in leading teams with size of at least 20 developers,
Experience with prototyping and shipping games using Unreal Engine and knowledge of its limitations,
Very good knowledge of both Polish and English (minimum B2 level),
Understanding of our approach - meaningful entertainment & relatable games
Proven experience in working on games with similar approach will be a big plus and advantage
Mindset & Attitude
Towards creative work: Innovative, creative, curiosity
Towards people: empathetic, collaborative
Toward project: problem solving, critical thinking, strong adaptability;
Ability to examine data and draw meaningful conclusions;
Very good communication, organizational, interpersonal and mentoring skills,
Deep understanding of the gamedev market & current trends and a strong passion for video games.
What we offer?
Health and Wellness
psychological support/care
private medical package
Multisport
Development
team training budget
in-office library
Our office
near Metro Stadion Narodowy and Dworzec Wschodni stations
dog-friendly
in-house gym
no dress code
car and bike parking
chill zone
video, board and arcade games
Working conditions
flexible working hours
hybrid work (3 days from office, 2 days from home + additional pool of remote days per year)
20 or 26 days of fully-paid holiday leave
international working environment
Fair compensation
attractive bonus system – annual bonus, motivation programme
transparent salary brackets
Events and more
attendance in game dev events
relocation budget for candidates from abroad
referral program
annual company events
merch/swag
preferential loans
Location: Remote US
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
Remote US
The Director, Information Technology & Security will serve as a key member of the Bank's Management Team, serving as the Chief Information Security Officer, and will be responsible for establishing and leading the Bank's information security and cybersecurity programs. As the Bank prepares to launch as a de novo Industrial Loan Company (ILC), this leader will design and implement an enterprise-wide security framework that meets FDIC and state regulatory expectations, supports the Bank's risk appetite, and protects customer and institutional data.
This is a blended leadership role requiring both high-level strategic influence and deep technical execution. You will lead the development of information security governance, technical controls, and oversight of infrastructure and engineering, ensuring a strong and scalable security posture from inception. This leader must be a practitioner at heart—willing to "roll up their sleeves" to lead the technical build phase, collaborate closely with engineering on architecture, and ensure security is integrated into every aspect of the Bank's systems and operations.
What You’ll Do
Oversee infrastructure design and IT Engineering
Information Security Program Development
Design, implement, and maintain a comprehensive Information Security Program consistent with FDIC guidance (e.g., FIL-66-2019, FIL-13-2021) and the Interagency Guidelines Establishing Information Security Standards.
Develop and oversee policies, standards, and procedures governing cybersecurity, data protection, and incident response.
Ensure alignment with the Bank’s overall risk management and governance frameworks.
Provide regular reporting to executive management and the Board on the Bank’s security posture, emerging risks, and mitigation efforts.
Lead the technical build phase of the Bank's infrastructure, providing direct oversight and hands-on guidance for cloud security and DevOps integration.
Partner deeply with Engineering to define and implement secure technical architectures, including network segmentation, encryption standards, and identity governance.
Cybersecurity and Threat Management
Establish and manage a threat monitoring and detection capability to identify, assess, and respond to cybersecurity risks.
Oversee implementation of layered security controls (e.g., network segmentation, encryption, access controls, endpoint protection, vulnerability management).
Lead the Bank’s Incident Response Program, ensuring timely escalation and coordination with regulators when required.
Maintain relationships with information-sharing groups (e.g., FS-ISAC) and law enforcement to stay informed of emerging threats.
Third-Party and Affiliate Risk Oversight
Evaluate the information security posture of third-party and affiliate service providers in accordance with the Bank’s Vendor Management Program and FDIC third-party risk guidance.
Establish due diligence, ongoing monitoring, and contractual requirements for vendors handling sensitive data or performing critical services.
Coordinate with Operations, Compliance, and Internal Audit to ensure third-party risks are identified, assessed, and mitigated.
Manage the technical lifecycle of security-critical third-party service providers, ensuring rigorous operational oversight of vendors handling sensitive financial data.
Data Governance and Privacy Protection
Ensure compliance with applicable privacy and data protection requirements (e.g., GLBA, Regulation P, state privacy laws).
Implement processes to safeguard customer information and prevent unauthorized access, disclosure, or misuse.
Partner with business and technology teams to integrate privacy-by-design principles into new products and services.
Business Continuity and Resilience
Assist Risk Officer in development and testing of the Bank’s Business Continuity and Disaster Recovery (BC/DR) plans, ensuring they are integrated with information security objectives.
Coordinate regular testing and simulations to validate readiness for cyber incidents and system disruptions.
Support resilience planning for key systems, vendors, and communication protocols.
De Novo and Pre-Opening Readiness
Build and document the Bank’s technology and information security program as part of the de novo application process.
Establish security architecture, monitoring tools, and vendor relationships prior to launch.
Prepare readiness materials for FDIC and state examinations related to cybersecurity and operational resilience.
Ensure security risk assessments and third-party reviews are completed and incorporated into pre-opening milestones.
Leadership and Culture
Serve as the Bank’s senior advocate for cybersecurity and data protection, promoting a culture of security awareness and accountability.
Provide training and guidance across the organization to enhance information security awareness.
Collaborate with peers in Risk, Compliance, Operations, and Technology to align security priorities with business strategy.
Build and lead a capable, mission-driven security team to support the Bank’s evolving needs.
What We Look For
Minimum of 10 years of experience in information technology, and security and technology risk management, with a proven track record of moving between strategic planning and hands-on technical execution.
Demonstrated experience designing and implementing information security programs compliant with FDIC and FFIEC standards.
Strong familiarity with third-party risk frameworks and financial services cybersecurity expectations.
Experience leading incident response, penetration testing, and security operations in cloud-based and hybrid environments.
Proven ability to communicate complex technical topics to executive leadership, the Board, and regulators.
Strong leadership, analytical, and problem-solving skills with a risk-based and pragmatic approach to decision-making.
Deep expertise in cloud-native infrastructure (AWS/GCP), DevOps practices, and software-defined security controls.
Demonstrated ability to "roll up sleeves" and contribute directly to the technology build while simultaneously managing executive stakeholders and regulators.
Core Competencies
Expert knowledge of information security principles, frameworks, and regulatory requirements.
Strategic thinker with strong operational execution and control discipline.
Effective communicator capable of influencing across technical and business functions.
Collaborative leader who fosters a culture of accountability, awareness, and continuous improvement.
Affirm Values
At Affirm, we live by our values: People Come First, No Fine Print, It’s On Us, Simplify, and Push the Envelope. As CCO, you will embody these principles while building the foundation of Affirm Bank as a trusted, transparent, and innovative financial institution.
Compensation & Benefits
Base Pay Grade
- T
Equity Grade
- 14
Employees new to Affirm
typically come in at the start of the pay range.
Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
USA Pacific base pay range (CA, WA, NY, NJ, CT) per year:
$300,000 - $360,000
USA Sapphire base pay range (all other U.S. states) per year:
$267,000 - $327,000
Please note that visa sponsorship is not available for this position.
#LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
ГибридWarszawa, Poland; relocation budget for candidates from abroad
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.