Вакансии

Location: New York, New York, United States About the Role The Senior Vice President of ERISA Compliance is responsible for leading iCapital's enterprise-wide compliance program relating to the Employee Retirement Income Security Act of 1974 (ERISA), Department of Labor (DOL) regulations, prohibited transaction exemptions, and Qualified Professional Asset Manager (QPAM) compliance requirements. This role serves as the primary subject matter expert for ERISA-related regulatory obligations impacting iCapital's registered investment advisers, collective investment trusts (CITs), retirement-focused investment products, and retirement-plan clients. This individual will partner closely with Legal, Product, Operations, Finance, Investment Management, and Distribution teams to develop and maintain policies, procedures, testing programs, training, and governance frameworks designed to ensure compliance with ERISA fiduciary standards and QPAM exemption requirements. This SVP will play a key role in regulatory examinations, new product launches, and transaction reviews. Responsibilities ERISA Compliance Oversight Work with the Registered Funds CCO to develop, maintain, and enhance ERISA compliance policies, procedures, controls, and monitoring programs. Provide regulatory guidance regarding fiduciary duties, plan-asset rules, prohibited transactions, party-in-interest restrictions, and applicable exemptions. Advise business stakeholders on ERISA implications of investment products, distribution activities, service arrangements, and operational processes. Monitor legal and regulatory developments from the Department of Labor, IRS, SEC, and other regulatory authorities and assess impacts on the business. Design and administer risk-based compliance reviews relating to ERISA and retirement-plan business activities. Implement monitoring programs, testing protocols, certifications, and issue-management processes. QPAM Compliance Program Management Oversee the firm's ongoing compliance with the Qualified Professional Asset Manager (QPAM) Exemption and related requirements. Maintain and execute QPAM monitoring and testing programs, including annual and periodic certifications. Coordinate reviews of QPAM eligibility criteria, including assets under management, shareholder equity, affiliate requirements, and integrity standards. Establish and maintain documentation evidencing compliance with QPAM conditions and regulatory requirements. Partner with Legal and business stakeholders regarding transactions that may rely on the QPAM exemption or other prohibited transaction exemptions. Qualifications Bachelor's degree required; J.D., MBA, or other advanced degree is preferred 10+ years of experience in investment adviser, asset management, retirement, ERISA, legal, or compliance functions Deep knowledge of ERISA fiduciary standards, prohibited transaction rules, and Department of Labor regulations Familiar with collective investment trusts (CITs), private funds, alternative investments, and institutional asset management Experience developing compliance programs, controls, testing frameworks, and governance processes. Strong analytical, communication, and problem-solving skills Experience with QPAM compliance programs and prohibited transaction exemptions Benefits The base salary range for this role is $190,000 to $230,000.  iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: Bogotá; Colombia We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. The Global Trade Compliance Analyst plays an integral role in supporting Hasbro’s global compliance program by conducting restricted party screening investigations, strengthening compliance processes, and supporting trade operations across LATAM markets. This position combines analytical rigor, operational execution, and cross-functional teamwork to mitigate risk, improve data accuracy, and enhance the efficient flow of goods. This is a high-visibility role that partners closely with leadership and cross-functional collaborators to drive continuous improvement, ensure regulatory adherence, and support strategic compliance initiatives. Key Responsibilities Investigate potential matches arising from denied party and sanctions screening systems, applying good judgment and regulatory knowledge with minimal guidance to support business continuity while ensuring compliance. Stay current on global sanctions regulations and denied party lists, providing interpretation and guidance to impacted collaborators. Support internal and external audits, including government inquiries, by providing insights and documentation. Conduct root cause analysis to identify process inefficiencies and drive improvements in data accuracy and workflow efficiency. Support the development, standardization, and implementation of policies, procedures, and key performance indicators, and track compliance metrics and reporting to support leadership decision-making. Support critical initiatives focused on compliance enhancements, cost reduction, and operational efficiency, including participation in system testing, integration efforts, and continuous improvement projects. Partner with internal teams including Legal/Compliance, Logistics, Security, and Internal Audit to support trade compliance initiatives. Act as a consultative partner to global business units to ensure alignment with trade compliance requirements. LATAM Trade Compliance Support In addition to core screening responsibilities, this role provides operational and analytical support across LATAM markets, including: Tariff Classification Support: Assist with classification activities by compiling product data, maintaining records, and supporting periodic reviews of duty rates and product categories. Customs Broker Coordination: Support the validation of broker-assigned classifications by gathering documentation, tracking feedback, and calling out discrepancies. Post-Entry Audit Support: Assist with post-entry reviews by compiling documentation, validating declared data (e.g., classification, valuation), and supporting corrective actions. Data Management & Reporting: Maintain compliance trackers, support data validation efforts, and ensure accurate and complete recordkeeping. Process & SOP Support: Assist in updating and maintaining Standard Operating Procedures (SOPs) to ensure consistency across markets. Regional Projects: Provide support for regional compliance initiatives and process improvement efforts. Additional Responsibilities Conduct self-audits to ensure alignment with corporate policies and regulatory requirements. Participate in trade compliance training programs and actively contribute to risk reduction and process improvements. Required Qualifications & Skills Experience within the area of trade compliance, customs, or international logistics/operations preferred. Strong analytical and problem-solving skills, paired with the capacity to handle complex investigations independently. Excellent organization, time management, and prioritization skills in a fast-paced, global environment. Proactive, detail-oriented, and highly self-motivated. Advanced Excel skills and the ability to quickly learn new systems and tools. English and Spanish language proficiency preferred. Bachelor’s degree or equivalent experience required. Trade compliance or international logistics experience is a plus. Travel 10–15% travel (as needed) Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: Belgrade, Serbia Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Ищем hands-on DevSecOps / Security специалиста для проекта в сфере regulated crypto / fintech. Основная задача — разбирать результаты IT/Security-аудитов и технически закрывать выявленные vulnerabilities, security gaps и audit findings. Что важно: • DevSecOps / Application / Infrastructure / ICT Security; • DORA — обязательно; • MiCA, ISO 27001 или аналогичные стандарты; • опыт security/compliance-аудитов; • понимание regulated crypto / fintech; • умение самостоятельно делать remediation. Будет плюсом: Fireblocks, crypto custody, MPC, crypto exchanges, custodians, fintech/payment. Не рассматриваем чистых Compliance Officers, специалистов только по документации и Backend Developers без Security/DevSecOps опыта.

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Team The Compliance function at OKX is responsible for promoting a strong compliance culture and supporting the business in meeting its regulatory obligations and managing enterprise risk. The Product Compliance team is responsible for embedding compliance into the product lifecycle and supporting the compliant development, launch and ongoing operation of OKX products and features globally across all markets in which our products and services are offered. We work closely with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to identify regulatory and compliance requirements, assess product risks and develop practical solutions that support responsible commercial growth. About the Opportunity We are seeking an experienced, hands-on and commercially minded Senior Compliance Manager to join our Product Compliance team. This is a senior individual-contributor role focused primarily on the day-to-day review of new products, material product changes and existing product enhancements. The emphasis is on delivering timely, well-reasoned product compliance assessments using a risk-based approach, ensuring that material compliance risks are sufficiently mitigated and the firm’s regulatory positioning protected. You will act as a trusted compliance partner throughout the product development lifecycle, helping Product and Engineering teams navigate complex regulatory requirements while enabling commercially viable outcomes. You will be expected to distinguish between legal or regulatory constraints that cannot be crossed, risks that can be addressed through proportionate controls, and residual risks that require documented escalation or risk acceptance. What You’ll Be Doing Own and deliver day-to-day compliance reviews of new products, features, market expansions and material changes to existing products across OKX's global business and product suite. Review product requirements, technical documentation, user journeys, onboarding flows, trading or transaction mechanics, reward structures, disclosures and operational processes. Apply a risk-based waterfall that distinguishes hard legal or regulatory blockers from risks that may be addressed through controls, product conditions, jurisdictional restrictions, monitoring or escalation. Conduct and document product compliance risk assessments covering areas such as regulatory perimeter and licensing, AML/CFT, sanctions, KYC, consumer protection, financial promotions, trading and market conduct, asset safeguarding, data privacy and third-party risk. Produce clear, concise and evidence-based and solutions-based compliance recommendations setting out identified risks, required mitigants, residual exposure and the proposed approval or escalation route. Work directly with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to develop practical and scalable solutions to identified compliance requirements. Maintain complete and accurate documentation and audit trails for product reviews, decisions, conditions, exceptions, approvals and subsequent changes. Support post-launch monitoring, control testing and assurance in partnership with Audit, Product and other Compliance teams, and drive remediation of identified issues. Promote a compliance-by-design culture within the product lifecycle; communicate the Product Compliance framework and program requirements to relevant stakeholders and deliver targeted training or guidance to Product, Engineering and business teams as required. Support special projects and priority product launches in a fast-paced and continually evolving environment. What We Look For In You At least 8 years of relevant experience in Compliance, Legal or Risk within financial services, fintech, payments or the cryptocurrency industry. Bachelor's degree in law, finance, business, economics, engineering or a related field, or equivalent practical experience. Significant hands-on experience in product compliance, regulatory advisory or product risk assessment, including advising on new products and material product changes. Strong understanding of the digital-asset industry and the products offered by crypto platforms, including trading, custody, payments, staking or earn products, lending, structured products, wallets or DeFi. Strong working knowledge of relevant regulatory and compliance requirements, including licensing and regulatory-perimeter considerations, AML/CFT, sanctions, KYC, consumer protection, financial promotions and trading or market-conduct requirements. Demonstrated ability to analyze products or initiatives involving significant complexity and risk and translate regulatory requirements into practical product requirements and controls. Experience in and demonstrated success in leveraging AI-enabled technology to maintain risk assessment standards, including ongoing tuning of agentic skills aligned with the Company’s risk appetite. Excellent risk judgment and the ability to balance compliance rigor with a pragmatic, risk-based approach that supports responsible commercial outcomes. Proven ability to develop and deliver repeatable product compliance solutions, controls and review processes aligned with broader group requirements. Strong project-management and execution skills, including the ability to manage multiple concurrent reviews, maintain accurate documentation and meet product-launch deadlines. Excellent written and verbal communication skills, with the ability to present clear recommendations and lead discussions with Product, Engineering, Legal, Risk, senior management and other Compliance stakeholders. Strong stakeholder-management skills and the ability to influence product decisions and constructively challenge proposals without compromising Compliance rigor. Self-motivated, proactive and comfortable operating independently within a fast-paced, globally dispersed team. High personal integrity and sound professional judgment, including the ability to identify when an issue requires escalation. Nice to Haves Direct product compliance or regulatory advisory experience at a crypto exchange, fintech or technology-led financial-services company. Experience supporting multi-jurisdictional product launches and applying regulatory requirements across the United States, European Union, Middle East or Asia-Pacific. Practical knowledge of CeFi trading products, including spot, derivatives, leverage, custody, institutional products and OTC flows. Familiarity with Web3 products, blockchain technology, smart contracts, DeFi protocols and digital-asset transaction flows. Experience developing compliance risk-assessment frameworks, controls, and key risk indicators. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Paris, France About Freedom Freedom Digital Bank France will form part of Freedom Holding Cor p., a diversified international financial services group publicly listed on the Nasdaq Capital Market under the ticker FRHC. The Group operates across Europe, the United States and Central Asia, with activities spanning banking, brokerage, investment services, insurance, payments and digital consumer services. About the role We are looking for an experienced Head of Compliance to establish and lead the compliance function of Freedom Digital Bank France. The final regulated designation and scope of the position, including a potential RCSI designation, will be determined by the entity’s licensing perimeter, products and regulated activities. The Head of Compliance will develop the local compliance framework, advise senior management and the Board, oversee financial-crime compliance and maintain effective relationships with the relevant French and European authorities. As a member of the founding executive team, the role will lead the compliance workstream for the regulatory authorisation process and ensure continuing adherence to the conditions, commitments and supervisory expectations associated with the bank’s licence. Key responsibilities: Establish and lead the compliance function of Freedom Digital Bank France. Develop and maintain the local compliance framework, compliance monitoring programme and governance arrangements. Lead the compliance workstream for the bank’s French regulatory authorisation. Ensure compliance with applicable ACPR, AMF, EBA and EU regulatory requirements , according to the bank’s final licensing and product scope. Oversee AML/CFT, KYC, sanctions, transaction monitoring and financial crime frameworks. Establish processes for suspicious activity reporting and engagement with TRACFIN . Ensure that digital onboarding, customer journeys, marketing communications and financial products meet applicable regulatory requirements. Advise senior management and the Board on compliance risks and regulatory obligations. Monitor regulatory developments and coordinate the implementation of required changes. Establish and maintain compliance policies, procedures and controls. Conduct compliance risk assessments and thematic reviews. Manage regulatory reporting, information requests, regulatory inspections and remediation programmes. Act as a key point of contact with French regulators and other relevant regulatory authorities. Review new products, partnerships, outsourcing arrangements and distribution models from a compliance perspective. Work closely with Risk, Legal, Product, Technology, Operations and Business teams. Promote a strong compliance culture and conduct culture across the bank. Requirements 10+ years of compliance experience within digital banking, banking, payments, investment services, brokerage or fintech. Previous experience as a Head of Compliance, Chief Compliance Officer, RCSI or in an equivalent senior regulated position. In-depth knowledge of French and EU banking and financial-services regulation. Strong working knowledge of applicable ACPR and AMF requirements, AML/CFT, KYC, sanctions, consumer protection, GDPR, PSD2 and MiFID II , according to the bank’s product scope. Demonstrated experience engaging with the ACPR, AMF, TRACFIN or other French and European regulatory authorities. Experience preparing or supporting regulatory authorisation applications, supervisory inspections and remediation programmes. Strong knowledge of French AML/CFT reporting, regulatory recordkeeping and financial crime controls. Experience advising on digital financial products, remote onboarding and technology-enabled customer journeys. Eligibility and professional standing to hold the applicable regulated compliance position in France, subject to the entity’s final governance and licensing structure. Excellent communication, judgement and stakeholder-management skills. Full professional fluency in French and English is mandatory, including the ability to engage with regulators and prepare regulatory documentation in French. Benefits Employment contract in accordance with French labor law; Relocation package for the employee and family members; 50% coverage of the annual health insurance cost for the employee and eligible family members; 25 days of annual leave, public holidays, and all statutory leave entitlements. On-site work in a modern, well-located office.

We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion. The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization. General Information (About the Client): Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model. They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements. Tasks and Deliverables: SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap. Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards. Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready. PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag. Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution. Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle. Required Experience: SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies. GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements. Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata). Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls. Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.

Location: U.S. (Remote) Workplace: Remote ABOUT CLIPBOARD Our mission is to uplift as many communities as possible. We do this through our app-based marketplace that connects healthcare professionals with the workplaces that need amazing workers. This enables hundreds of thousands of people to achieve financial stability for themselves and their families while providing essential care to millions of people across the U.S. Founded in 2016, we are a remote-first team of over 1,000 people building a top Y-Combinator company https://www.ycombinator.com/topcompanies/ and have been profitable since 2022. We’re the leader in Long-Term Care staffing and are rapidly expanding into Home Health, Hospitals, and more, meaning we have more work to do than people to do it, and are growing our team to support millions more people and their communities. ABOUT THE ROLE: As a Documents Compliance Analyst, you own the compliance decisions behind whether a healthcare professional is cleared to work: background check disqualifications, credential and risk review, and how new state requirements get implemented. You set the standard the team applies, and you are the named decision-maker when a case is hard. What the law requires is a given. How we meet it is up to you, and you own that call. This is not a people management role. The work is recurring by design. The same categories of questions arrive every week, alongside state license renewals and reporting that run on a fixed calendar and never finish. Your value is in reaching the same well-reasoned decision every time and documenting your reasoning well enough that others can apply it. You'll work closely with Agents, SMEs, Team Leads, and Legal, none of whom report to you, so your credibility comes from the quality and consistency of your judgment rather than from authority. You will report to the Head of the Documents Team. WHAT YOU’LL OWN Judgment and decisions - Serve as the named escalation point for background check disqualification decisions - Make the initial call on agency compliance implementation - Handle escalations on worker credential verification, including license violations and reprimands - Decide which questions you resolve and document yourself, and which warrant partnering with Legal Written analysis - Produce risk analyses in a consistent format: the question, your research, your reasoning, your recommended path. - Evaluate new state and agency requirements before implementation, quantifying what compliance costs a worker in time, money, and completion rate, and recommending how we implement. - Build and maintain the decision record that lets other people reach the same conclusion you would Recurring compliance operations - Own the credential verification audits - Plan and drive the implementation of high-value requirements, such as continuing education - State license renewals - Ongoing state reporting REQUIREMENTS: - Bachelor’s degree. - At least 5 years of professional experience. - Prior experience in a role where you applied regulations to real decisions. Examples: - regulatory or compliance-focused paralegal - regulatory compliance specialist - legal analyst - background screening adjudicator - trust and safety or eligibility policy at a marketplace - Experience interpreting statutes, regulations, or agency guidance and turning them into operational requirements. WHAT WE’RE LOOKING FOR: - You can reach a defensible decision when documentation is incomplete or unavailable, and you're explicit about what your reasoning rests on. - You can read complex regulatory material and work out how it applies in practice to a marketplace model. - You weigh compliance risk against business impact and find the path that meets the requirement without restricting more than it demands. - You write decision memos and business cases that leadership can act on. - You build credibility with people who don't report to you. - You own recurring work with hard deadlines, such as license renewals and state reporting. - Willingness to maintain overlapping working hours with Eastern and Pacific time (ET/PT). NICE TO HAVE: - Compliance, regulatory, or licensing experience in healthcare, staffing, or another regulated industry. - Experience at a government or regulatory agency. - Experience with independent contractor or marketplace models. - Experience with background check adjudication or adverse action processes. - Experience with state licensing filings. SYSTEM REQUIREMENTS - Minimum 15Mbps wired internet connection - Minimum i5 processor or equivalent - Minimum 12GB RAM - Dedicated, quiet working environment - Reliable power source and backup internet connection Quick Note on Scammers: Clipboard would never ask you for money or your bank details to participate in our hiring process. Report any scammers impersonating the Clipboard hiring team members here https://forms.gle/SyGaxHFbon7Hg9fW6.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. As a Manager of Governance, Risk, and Compliance you will lead the day-to-day execution and support the ongoing operation of the GRC program in a fast-paced, high-growth environment. This role is responsible for hands-on execution of GRC initiatives, collaborating across Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk exposure, and strengthen operational resilience. RESPONSIBILITIES - Lead the day-to-day operations of the GRC function, ensuring timely execution of governance, risk, compliance, third-party risk, and secure development lifecycle (SSDLC) assessment activities. - Lead enterprise risk reviews by driving GRC intake and request triage, personally overseeing complex assessments while prioritizing and delegating work across the team. - Perform and lead the third-party risk management lifecycle by conducting and overseeing vendor risk assessments and due diligence in partnership with Legal, IT, and Security. - Manage team workload and capacity by assigning, tracking, and escalating requests as needed to ensure consistent delivery, quality, and stakeholder satisfaction. - Develop and report operational metrics and KPIs, providing weekly dashboards and status updates to GRC leadership. - Contribute directly to governance activities, including policy management, control assessments, evidence collection, audit support, and continuous compliance initiatives. - Maintain the enterprise risk register by documenting, tracking, escalating, and reporting technology, cybersecurity, privacy, and third-party risks - Support security incident response activities by coordinating compliance-related obligations, regulatory documentation, and risk remediation tracking. QUALIFICATIONS - 8+ years of experience in GRC, information security, cybersecurity; with 2+ years of experience leading or managing GRC, information security, or audit professionals. - Demonstrated experience leading operational GRC programs, including intake management, workload prioritization, KPI reporting, and cross-functional coordination. - Extensive hands-on experience performing third-party/vendor risk assessments, security reviews, due diligence, and risk-based decision support. - Strong knowledge of SSDLC risk assessments and application security governance processes. - Deep knowledge of security and privacy frameworks and regulations, including ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS, and modern cybersecurity risk management practices. - Excellent written and verbal communication skills, with the ability to communicate effectively with technical teams, business stakeholders, auditors, and executive leadership - A minimum bachelor’s degree in any discipline. Computer science, cybersecurity, and risk or technology degrees preferred. BONUS QUALIFICATIONS - Professional certifications such as CISSP, CRISC, CISA, or ISO 27001 Lead Auditor. - Demonstrated success in program and project management skills with the ability to manage multiple concurrent workstreams in a fast-paced environment. - Exceptional organizational, analytical, and problem-solving skills. - Background in establishing SSDLC guardrails. ABOUT YOU - You are a risk focused GRC leader with ability to assess security risks and translate it into business impact. - You have the ability to assess a risk impact in terms of business trade-offs. - You are passionate about building scalable GRC programs that have a lasting impact in improving the overall security posture of an organization without slowing the speed of innovation. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility. The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $155,000-$195,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. As a Senior Manager GRC you will play a critical role in shaping, driving, and leading our GRC team towards supporting ongoing operation and enhancement of the overall information security governance program, assessing the risk landscape in a fast-paced, high-growth environment. This role will strategically craft the roadmap in collaboration with stakeholders across the business and fulfill growing security needs assessing risk landscape across WHOOP. In addition to core GRC responsibilities, you will partner closely with functions across Product, Engineering, Data Analytics, and Legal to meaningfully move the security posture of the company. We are seeking a leader and strategic partner with prior experience driving GRC programs for technology teams. RESPONSIBILITIES - Lead the development, implementation, and continuous evolution of the GRC program, driving both strategy and hands-on execution. - Lead the development, implementation, and ongoing management of scalable security control frameworks, policies, standards, and security awareness programs, contributing directly while guiding the team’s work to strengthen organizational compliance. - Support incident response activities and translated into actionable improvements across the risk and compliance program. - Actively manage the enterprise risk register, driving risk prioritization, and delivering executive-level reporting. - Manage, mentor, and develop GRC analysts while balancing hands-on execution with effective delegation and team enablement as the program scales. - Evaluate, implement, and continuously improve GRC program, tools, processes, and metrics. QUALIFICATIONS - 10+ years of experience in GRC, or information security / cybersecurity, with 5+ years in managing GRC, information security, or cybersecurity professionals. - Demonstrated success scaling GRC programs whilst crafting clear and efficient team objectives and programs. - Deep understanding of regulations and standards including, but not limited to ISO 27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligations - Experience building or integrating GRC programs in enterprise security to improve overall security posture of the organization - Excellent communication, interpersonal, and leadership skills with the ability to influence across teams and levels - A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred. BONUS QUALIFICATIONS - Certifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor. - Background in leading Enterprise Risk, Cybersecurity Risk, Information Security programs. - Background in establishing DevSecOps, AI Governance, and SSDLC guardrails. ABOUT YOU - You are a strategic and people-focused leader who thrives on balancing hands-on oversight with long-term organizational growth. - You are a risk aware leader with ability to translate security risks in business terms to influence both technical and non-technical teams. - You are passionate about building bridges across different departments and can operate confidently in both strategic and security control tactical domains. - You believe that security enables innovation, and you lead with integrity fostering a culture that embodies a risk mind-set. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for these full-time positions is $185,000-$205,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Limassol, Cyprus Workplace: on-site Mayflower is a technology company building large-scale entertainment products for a global audience. Our platforms serve millions of users worldwide and rank among the top-50 most visited websites globally. For more than 10 years, we've been creating reliable, high-performance solutions at the intersection of product, engineering, and entertainment. The Tax & Compliance Manager will be responsible for overseeing the company’s direct and indirect tax obligations across multiple jurisdictions while ensuring ongoing compliance with international tax regulations and reporting requirements. The role combines strategic oversight with operational execution and requires someone comfortable working in a fast-paced international environment. The successful candidate will manage global VAT/sales tax matters, corporate tax coordination, regulatory tax compliance, and support business initiatives from a tax perspective. Responsibilities Direct Tax Coordinate corporate income tax compliance Work with external tax advisors and accountants on tax filings and reporting Support annual audits and tax provisions Monitor tax exposures and identify tax risks Assist with transfer pricing coordination and inter-company arrangements Review tax implications for new business initiatives Indirect Tax Manage global VAT/sales tax obligations mainly for B2C operations Ensure proper tax treatment for customer transactions and invoicing Monitor international indirect tax developments and regulatory changes Handle VAT registrations, filings, OSS requirements, and cross-border tax compliance Coordinate with Finance and Product teams regarding tax setup for new markets and payment flows Compliance & Regulatory Maintain global tax compliance calendars and filing deadlines Ensure documentation and records are maintained for audit readiness Coordinate with external advisors, auditors, and regulatory stakeholders Monitor changes in tax legislation and assess business impact Support compliance-related projects and internal process improvements Business Support Advise internal teams on tax-efficient operational practices Support treasury and payment-related initiatives from a tax perspective Participate in finance system and ERP improvement projects regarding Tax setups Assist with tax automation and reporting enhancements Support expansion into new operational structures You will thrive here if you have 5+ years of experience in tax, compliance, or international finance roles Strong knowledge of indirect tax (VAT/sales tax) Experience with international and cross-border tax matters Experience in B2C, fintech, payments, e-commerce, SaaS, or digital industries is highly preferred Ability to manage multiple jurisdictions and external advisors Strong analytical and problem-solving skills Excellent communication and stakeholder management abilities Ability to work independently in a fast-paced environment Strong organisational and project management skills Nice-to-Have ACCA / ACA / CPA / CTA qualification ADIT (Advanced Diploma in International Taxation) qualification is considered a strong advantage Experience with multinational group structures Knowledge of transfer pricing principles Experience with ERP systems such as Business Central 365 Experience in high-volume transaction environments Conditions We know that great talent deserves great conditions, so here's what you can expect when joining us: EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family. Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free. Transparent performance reviews twice a year, with bonus opportunities and salary adjustments. Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases. Provident fund (Cyprus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus. Mindfulness & well-being support, including psychological assistance with 50% coverage. 50% coverage of school and kindergarten fees for your children. Fully covered sports benefits, and also access to in-house electric scooters and bike rentals. Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey. A culture of recognition: a peer reward program to celebrate your contributions. A fully equipped office in Limassol, with everything you need for deep work and collaboration. Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks. A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities. Benefits are provided in accordance with the company's policies and eligibility criteria. Recruitment process HR Interview Interview with the Hiring Manager Test assignment: Case Study Final interview with C-level team Job Offer

Location: San Francisco, CA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Integrity & Compliance (I&C) function is building the systems that let us scale responsibly as our products reach more people, more enterprises, and more regulated industries. Our global compliance program is bespoke, reflecting our unique mission and position as one of the leading AI labs operating on the frontier. Our Regulatory Programs pillar is a key pillar of our overall Integrity & Compliance function and covers a range of compliance domain areas including economic sanctions, US export controls, and regulatory compliance programs stemming from global content and AI regulation. As Sanctions Compliance Lead, you will take day-to-day leadership of Anthropic's sanctions compliance program and support oversight of our export controls program, supporting the Regulatory Programs lead as a senior leader within the function. This is a leadership seat in a domain where the rules governing AI models and compute are still being written, and where sanctions exposure runs through globally accessible APIs, downstream and embedded-partner channels, and rapid geographic expansion. You will own the sanctions program end to end: setting strategy and risk appetite with leadership, continuously assessing risk and driving remediation and program enhancements, governing our screening and enforcement controls, directing regulator-facing matters, and reporting on program health to I&C leadership and the Audit Committee. You will partner closely with our in-house Trade Compliance Counsel on interpretation of applicable law, represent the function with senior stakeholders, and lead and develop trade compliance professionals as the team grows. This is a builder's role at a company that takes integrity seriously and moves fast. You will exercise independent judgment on issues without clear precedent and build durable programs that let Anthropic move quickly while honoring its obligations to regulators, customers, and the public. Key responsibilities Lead Anthropic's sanctions compliance program, including strategy, risk appetite, policy frameworks, and the program roadmap, and keep them current as regulations and the business evolve Represent the sanctions and export controls function with senior leadership and cross-functional partners, and step in for the Regulatory Programs lead across the function as needed Continuously assess sanctions risk across products, channels, and markets, and own the remediation of identified issues and the delivery of program enhancements, in partnership with Legal, Internal Audit, Finance, and first-line teams Direct regulator-facing matters, including voluntary self-disclosures, blocking and reject reports, licensing questions, and responses to regulator or third-party inquiries, in partnership with Trade Compliance Counsel and National Security Legal Govern Anthropic's restricted-party screening and enforcement controls, including list configuration, thresholds, escalation criteria, vendor management, and exception review, in partnership with Regulatory Operations and Safeguards Serve as the senior escalation point for complex sanctions matters surfaced by Safeguards, Threat Intelligence, Go-to-Market, and Finance, and set the standards by which first-line teams disposition and escalate cases Advise business and product teams on sanctions and trade controls implications of commercial and geographic expansion, new products and channels, partnerships, and acquisitions, and translate findings into clear control requirements Support oversight of the export controls program, partnering with the Sanctions & Export Controls Compliance Officer and Trade Compliance Counsel on program priorities, controls, and reporting Prepare and deliver program reporting on health, key risks, and emerging issues for I&C and Legal leadership, the Audit Committee, and other governance forums Monitor sanctions regulatory developments and enforcement actions, assess impact on Anthropic, and drive required program changes Lead, mentor, and develop compliance team members, and help shape the structure of the function as it grows Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Anthropic's discretion, or otherwise applicable with local law Minimum qualifications Substantive, hands-on experience leading an economic sanctions compliance program (OFAC, EU, UK, and other applicable regimes) in a commercial environment, including program design, policy ownership, and risk governance Experience managing voluntary self-disclosures, blocking or reject reports, and other regulator filings end to end, including coordinating counsel, internal stakeholders, and remediation Experience assessing sanctions risk on an ongoing basis and owning the remediation of identified issues and delivery of program enhancements through to closure Experience governing a restricted-party screening program, including list scope, match thresholds, escalation criteria, and screening vendor management A track record of reporting on program health and risk to senior leadership, an audit committee, or a board, and of driving decisions on risk appetite with executives Working knowledge of US export controls (EAR and BIS rules) sufficient to oversee an export controls program and partner effectively with technical subject-matter experts Experience partnering with in-house and outside counsel to interpret trade controls requirements and translating them into practical guidance for product, engineering, operations, and commercial teams Excellent written and verbal communication skills, including drafting policy and preparing materials for senior leadership Preferred qualifications 10+ years of relevant experience in economic sanctions compliance, including several years leading a program or team Experience managing and developing compliance professionals Experience conducting sanctions diligence for acquisitions, vendors, and third parties, including state-ownership and 50 percent rule analysis Experience partnering with trust and safety, enforcement, or threat intelligence teams on account actions and sanctions escalations Exposure to sanctions compliance in software, cloud, fintech, or AI contexts, including globally accessible platforms and downstream access risk Prior experience in a Big 4 or other compliance consulting or advisory professional services firm, or at OFAC or another trade regulator Experience in a hyper-scaling tech company or other fast-paced environment Sound judgment and the ability to make risk-based decisions and move work forward with imperfect information A leadership style characterized by integrity, humility, strategic thinking, and solution-orientation Role-specific policy: For this role, we expect staff to be able to work from either our Washington, DC, San Francisco, or New York City office at least 3 days a week, though we encourage you to apply even if you might need some flexibility for an interim period of time. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $270,000 — $345,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Brazil Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.     THE OPPORTUNITY - Conducting financial investigations and writing SARs/STRs - Monitor and proactively adjust to volume fluctuations, and effectively handle volume surges to maintain operational efficiency and compliance - Utilize advanced tools and spreadsheet functions for data analysis - Focus on multiple priorities, including individual production efforts and ad hoc projects   WHAT YOU BRING - 2+ years of anti-financial crime related experience with a crypto-background - Understanding of compliance operational functions and processes - Proven ability to identify, assess, and mitigate risks associated with financial crimes - Familiarity with Google Suite applications, with emphasis on Google Sheets and Google Doc or similar programs - Familiarity and comfort utilizing AI and technology for automation - Familiarity with specific tools (Chainalysis, Elliptic, TRM) and practices used in FIU - Good attention to detail and organizational skills     NICE TO HAVES - Financial crime related certifications (e.g., CAMS, ICA, CRCM, CRC) - Database and programming skills such as SQL and Python       Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: India Who We Are: Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America. The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. Additional information about Galaxy's businesses and products is available on www.galaxy.com . What We Value: We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Seek Excellence. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Encourage Independent Decision-Making. Build Dream Teams. Who You Are: The Compliance Associate will be responsible for maintaining the Firm’s compliance policies and procedures that are part of our robust BSA/AML compliance program across all business lines including but not limited to Trading, Lending, and Asset Management, focusing on KYC (Know Your Customer) and AML (Anti-Money Laundering) activities. This will include evaluation of client identification, risk profiles and other assessments. This role will interact with Senior Management, Legal, Technology, as well as clients, investors, and among other groups. What You’ll Do: OFAC, Sanctions, PEPS or adverse media: Conduct and review OFAC screens and research OFAC false positives and escalate potential OFAC issues for review; file OFAC reports if required; testing and validating the sanction screening tool Conduct Customer Due Diligence, review Customer Risk Ranking, conduct Enhanced Due Diligence, escalate potential AML risks with recommendations for mitigation. Investigating, analyzing and identifying AML alerts which may lead to filing suspicious activity reports as required by law. Assist in implementing on-chain transaction monitoring including validation, and clearing AML transaction monitoring alerts Implement respective BSA/AML and OFAC procedures and recommend procedure improvements based on regulations and industry practices that correspond to the Company's business model. Assist with regulatory audits and requests Ensure appropriate adherence to CDD, EDD and Transaction Monitoring processes while providing a positive experience for clients Identify compliance and risk issues. Assist institutional clients and investors during the onboarding process, which will include questions regarding onboarding to Galaxy and also onboarding Galaxy to their platform Provide an exceptional “client-first” experience both through email and over scheduled phone calls with business personnel to properly ensure the correct guidance and information is given to clients and investors What We’re Looking For: 3 to 5 years of experience conducting end-to-end KYC onboarding reviews Experience in blockchain investigations and AML alert clearance Preference for working in a fast paced and ever-changing environment Bachelor’s Degree Intellectually curious self-starter, comfortable in ambiguity and a fast-paced environment Strong appetite for problem solving in a high growth business Strong attention to detail Team player with a can-do attitude Excellent communication skills Bonus Points: CAMS certification Strong knowledge of BSA/AML, CDD, EDD, and Transaction Monitoring requirements Experience conducting and dispositioning transaction monitoring alerts and cases Ability to manage multiple projects and functions Experience, knowledge and interest in cryptocurrency a plus What We Offer: Competitive base salary and discretionary bonus Competitive paid time off Hybrid Working Arrangements Company-paid health and protective benefits for employees and their eligible dependents Free coaching and counseling sessions through Headspace Generous paid Parental Leave Opportunities to learn about the Crypto industry Smart, entrepreneurial, and fun colleagues Employee Resource Groups *Benefits may vary depending on location. Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances. We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact careers@galaxy.com.

Location: United Arab Emirates; Cyprus; Poland; Romania; United Kingdom; Georgia Reporting Line Reports directly to the CEO . Leads a compliance function that includes the Group Paralegal (direct report) and all compliance personnel embedded across the CXM Group of Companies. Location Remote (EU timezone preferred) This is a fully remote role. EU timezone alignment is preferred to ensure effective overlap with key offices across the CXM Group. Occasional travel may be required for regulator meetings and visits to regional teams. General Purpose CXM Group is building a compliance architecture across six business lines and multiple jurisdictions simultaneously — this role owns that build. The group is at an inflection point: multiple licensing processes are running in parallel, including a Norwegian crypto exchange being structured for MiCA passporting, a South African broker-dealer acquisition, a VARA application in the UAE, and prospective acquisitions in LATAM and Southeast Asia. The CCO exists to hold this together — ensuring that a fast-moving, multi-asset, multi-jurisdictional expansion programme stays regulatorily sound, that new entities are acquired and integrated without compliance exposure, and that the group's licensing pipeline converts into durable, operating authorisations across FX, CFDs, crypto, prediction markets, prop trading, and education. This is a role for someone who has operated across tier-one and emerging-market regimes simultaneously and has the regulator-facing credibility to show for it. Specific Objectives Build and deploy a group-wide compliance reporting framework Within the first three months, establish a structured compliance reporting framework covering all regulated entities across the CXM Group — including defined reporting lines, cadences, and escalation paths that give the CEO and board clear, timely visibility of the group's regulatory posture. Create an AI-enabled legal document database Within six months, deliver a searchable, indexed, and cross-referenced repository of all legal documentation across the group — structured for AI-assisted retrieval so that agreements, licences, policies, and regulatory correspondence can be surfaced and compared at speed. Establish and embed internal legal SLAs Within the first three months, define and operationalise service-level agreements for all internal legal workflows: standard contract reviews turned in 24 hours; new contract drafting completed within 48 hours; policy creation on agreed timelines. Compliance with these SLAs to be tracked and reported. Deploy legal and compliance risk monitoring tools Within six months, implement risk monitoring tooling across all business verticals and target markets — covering FX, CFDs, crypto, prediction markets, prop trading, and education — providing structured, ongoing visibility of regulatory and legal risk exposure across the group. Drive the live licensing and acquisition pipeline to defined milestones Own delivery against the group's active regulatory and M&A programme: South African broker-dealer acquisition and VARA (UAE) licence obtained by Q3 2026; VARA application submitted by Q4 2026 and licence granted by Q3 2027; MiCA passporting for the Norwegian crypto exchange secured by Q2 2027; LATAM and Southeast Asia acquisition targets scoped and structured by Q1 2027. Key Activities Oversee group-wide legal and compliance communications Manage all inbound and outbound communications across the compliance and legal function — ensuring consistency of position, appropriate escalation, and clear audit trails across all CXM Group entities. Monitor brand, regulatory, and compliance risk Run ongoing monitoring of online brand exposure and regulatory risk signals across all business verticals and target markets, using dedicated tooling to surface issues before they become regulatory events. Research target markets and emerging regulatory requirements Conduct structured research on new and existing jurisdictions — tracking legislative developments, regulatory guidance, and enforcement trends across FX, CFDs, crypto, prediction markets, prop trading, and education to keep the group's risk exposure visible and current. Build and maintain reporting infrastructure with Ops and IT Work cross-functionally with Operations and IT to design, implement, and maintain the compliance reporting systems and dashboards needed to give leadership real-time visibility of the group's regulatory posture. Inventory, organise, and analyse all group legal agreements Own the end-to-end legal document function: audit existing agreements across all entities, build and maintain the AI-enabled document repository, and ensure all contracts are indexed, cross-referenced, and accessible for rapid retrieval. Manage regulatory relationships and respond to inquiries Serve as the primary point of contact for regulators across all jurisdictions — preparing responses, managing ongoing dialogue, and coordinating regulator visits or meetings with appropriate precision and consistency. Set and enforce contract throughput standards Define the SLA framework for all internal legal workflows — 24 hours for standard contract reviews, 48 hours for new contract drafting — and hold the Group Paralegal and compliance staff accountable for delivery against those standards. The CCO personally handles high-stakes, novel, or regulator-facing agreements; standard throughput runs through the team. Requirements Key Competences Two competences are non-negotiable (and typically take a decade of multi-jurisdictional work to build) — everything else can be ramped. If you don't have these, the rest of the profile doesn't matter. Non-negotiable Multi-jurisdictional regulatory knowledge Demonstrated command of tier-one regimes (CySEC, FCA, NFA, ASIC) and offshore/emerging-market frameworks (UAE, Mauritius, Seychelles, SVG, Cambodia), with working knowledge of MiCA and crypto licensing regimes globally. This is the core of the mandate — live deals are already in motion. Regulator-facing credibility Confidence and competence in direct regulator engagement — managing inquiries, coordinating responses, and representing the group's compliance posture with consistency across jurisdictions. The group has active regulator relationships that need an owner from day one. Strong advantage M&A and licensing fluency Ability to support acquisition structuring and entity integration from a compliance perspective — assessing regulatory exposure, coordinating with external counsel, and managing parallel licensing processes without dropping threads. AI-enabled legal operations Experience deploying AI tooling in legal workflows — document retrieval, contract review acceleration, risk monitoring — is a strong advantage. Candidates without a deployment track record must demonstrate a concrete plan for rapid adoption and the aptitude to execute it. Function leadership and SLA ownership Ability to set standards, delegate effectively, and hold a team accountable for throughput — running the contract and compliance function at scale without becoming the bottleneck. Personal involvement reserved for high-stakes, novel, or regulator-facing matters. Likely Current Job Chief Compliance Officer (multi-jurisdictional broker or crypto exchange) The closest equivalent — already holding a CCO title across FX, CFDs, or crypto at a group with multiple regulated entities and active regulator relationships. If your current seat is steady-state and you're ready to own a live build across six asset classes and a dozen jurisdictions, this is the step up. Head of Compliance (tier-one regulated broker) One level below CCO at a CySEC, FCA, or ASIC-regulated firm — strong regulatory depth, ready to move into group-level ownership. If you've hit the ceiling of what a single-jurisdiction, single-entity compliance role can teach you, this is where the complexity scales. Regulatory Affairs Director (fintech or crypto) Licensing and regulator-facing experience across multiple jurisdictions, possibly without the full compliance function remit yet. If you've been the technical expert behind the licensing programme and want to own the outcome end-to-end, this is the mandate. M&A Compliance Lead (financial services) Embedded in acquisition structuring and entity integration at a PE-backed or multi-entity financial services group. If you've been supporting deals from the compliance side and want a seat where M&A fluency is a core expectation rather than a secondary contribution, this is it. Senior Legal Counsel / Head of Legal (retail broker or crypto exchange) Contract-heavy, regulator-facing, with compliance responsibility baked in — a common feeder at smaller multi-jurisdictional groups where legal and compliance sit close together. If you've been carrying both functions informally and want a title and mandate that reflects the actual scope, this role makes it official. Benefits Employer Value Proposition Most CCO roles at this level are maintenance jobs — one regulator, one entity, one asset class. This one is not. Genuine architectural ownership across six asset classes and a dozen jurisdictions FX, CFDs, crypto, prediction markets, prop trading, and education — running simultaneously, across tier-one and emerging-market regimes, with live licensing and M&A deals already in motion. The compliance architecture doesn't exist yet at group level. You're building it. By the end of year one, you'll be able to say you built a multi-jurisdictional compliance architecture from scratch, closed live licensing deals across MiCA, VARA, and emerging markets simultaneously, and stood up an AI-enabled legal ops function before almost anyone in the segment has done it. That is a résumé paragraph no single-jurisdiction maintenance role can produce. Direct line to the CEO — and the mandate authority that comes with it This role reports directly to the CEO, not to a CLO or CFO. In a live licensing and M&A environment where decisions need to move fast, that access matters: no layers between compliance judgment and executive action. Many group-level CCO seats don't offer this — this one does. A live deal pipeline, not a hypothetical one MiCA passporting, VARA in the UAE, a South African broker-dealer acquisition, and prospective acquisitions in LATAM and Southeast Asia — these are active, not aspirational. You'll be in the room on deals that will define the group's regulatory footprint for the next decade. A first-mover opportunity in AI-enabled legal ops The mandate includes building the AI-enabled legal ops function at group level — document retrieval, contract throughput acceleration, risk monitoring — in a segment where almost nobody has done it yet at this scale. If you've started deploying AI in legal workflows and want a seat where that capability shapes the entire function, this is it. Group-level mandate, not a function-level seat Functional authority over compliance personnel across all CXM Group entities. The scope matches the title — and the title reflects the actual job. Fully remote No relocation. No commute. Occasional travel when it matters — regulator meetings, regional teams — and otherwise, work from wherever you do your best thinking. A genuinely uncommon opportunity Multi-asset, multi-jurisdictional, M&A-active, AI-forward, fully remote — and at a scale that is still early enough for you to leave a visible mark. Roles with this combination of complexity and ownership don't come up often. Compensation Compensation is bespoke to the hire. We'd rather understand what you bring to the table and have a direct conversation about expectations than anchor the discussion prematurely. The package will be competitive with the scope of the mandate and consist of base + bonus that is tied to hitting agreed KPIs. Assessment Process This process is designed to match the weight of the mandate. A seat with this scope — live licensing, active M&A, and a compliance architecture being built from scratch — deserves a rigorous hire, and we make no apology for that. Every stage is purposeful, and every interviewer is there for a reason. Group Legal Counsel — regulatory and legal technical depth across jurisdictions, plus practical M&A case questions to assess acquisition structuring judgment. CHRO — leadership style, function-building track record, and cultural alignment with CXM Group's operating style. CEO — strategic judgment, mandate clarity, and the candidate's vision for the compliance architecture they'd build and own. Board members — select Board involvement at final stage, focused on governance credibility and long-term fit at group level. The full process is designed to run within one month. We move quickly and respect that your time is finite — every stage is as much your opportunity to assess CXM as ours to assess you. If you take your next move as seriously as we take this hire, that's exactly the kind of conversation we want to have.

Location: EMEA Reports to: Regional Head of Compliance, EMEA (with matrix reporting to the OEM Board and Global Compliance) Regulator: Malta Financial Services Authority (MFSA) About the Team The compliance function at OKX is responsible for the overall compliance culture at the company. We are a team of risk-minded problem solvers who advise the business on the company's AML and regulatory obligations and enterprise risks. OKX Europe Markets Limited is our MFSA-authorised investment services entity. Its licence covers the operation of a multilateral trading facility alongside our MiFID derivatives business. Operating a trading venue puts a distinct set of obligations on the firm: venue rulebook governance, member admission, market surveillance, transparency and reporting, systems resilience and orderly trading controls. This role owns compliance for that venue. What You Will Be Doing As Head of Compliance for the MTF, you will hold the MiFID compliance function for the trading venue and act as the MFSA-approved person for that role. The MLRO function sits separately; you will work alongside the OEM MLRO on financial crime matters that touch venue activity. You will: Own the MTF compliance framework end to end: policies, procedures, controls, registers and the compliance monitoring programme covering MiFID II, MiFIR, MAR and the MFSA Investment Services Rules applicable to MTF operators. Act as the primary compliance point of contact for the MFSA on venue matters: authorisation variations, notifications, thematic reviews, RFIs, inspections and remediation. Own the venue rulebook. Keep it current, ensure it is enforceable, and run the governance process for changes. Oversee member and participant admission: eligibility criteria, non-discriminatory access, direct electronic access arrangements, sponsored access controls, and ongoing monitoring of members' compliance with the rules of the venue. Oversee admission to trading of financial instruments, including the compliance assessment of new instruments, product classes and tokenised or DLT-based instruments where relevant. Provide compliance oversight of orderly trading requirements: systems capacity and resilience, testing of members' algorithms, circuit breakers, order-to-trade ratios, tick sizes, market making schemes and clock synchronisation. Provide compliance oversight of pre- and post-trade transparency, waivers and deferrals, transaction reporting, reference data and the accuracy and completeness controls behind them. Advise the business on the interaction between the MTF and OKX's wider European footprint: the MiFID derivatives business, MiCA-authorised activity in OKX Europe Ltd, and the DLT Pilot Regime where a DLT MTF is in scope. Deliver the annual compliance risk assessment, the compliance monitoring plan and the compliance report to senior management and the Board. Build, lead and develop the MTF compliance team, and set the compliance training curriculum for venue-facing staff, trading operations and technology. Give day-to-day advice to product, engineering, trading operations, legal and market operations in a fast-moving regulatory environment, including sign-off on venue changes, launches and marketing where required. Oversee compliance aspects of outsourcing, critical third parties and operational resilience, including DORA obligations relevant to the venue. Prepare Board, committee and matrix stakeholder reporting, and represent OKX with the MFSA, ESMA consultations, industry bodies and peer venue forums. What We Look For in You 10 years plus in regulatory compliance within financial services, market infrastructure, fintech or crypto, including time at a senior or head-of-function level. Direct experience of trading venue compliance: MTF, OTF, regulated market, SI or an equivalent execution venue. This is the core requirement. Working knowledge of MiFID II and MiFIR as they apply to venue operators: Articles 18–20 and 31 (MTF operating requirements and rule monitoring), Articles 48–50 (orderly trading), MiFIR transparency and transaction reporting, and the associated RTS. Practical experience of market abuse surveillance and MAR obligations for a venue operator, including STOR decision-making. Experience developing and owning a compliance framework that has stood up to regulatory examination, and a track record of engaging supervisors directly. Experience preparing and defending compliance reporting to a board or regulator. Familiarity with MFSA Investment Services Rules and Malta's regulatory environment, or a demonstrable ability to get there quickly from another EEA jurisdiction. Strong project management skills and the ability to run several regulatory workstreams to deadline. Comfortable working independently and in a dispersed, cross-border team across multiple varied tasks. Highly ethical, intuitive, and willing to question and challenge at every level of the business. Strong written and verbal communication, with the ability to explain venue regulation to engineers and commercial teams. Eligible for MFSA approval as the holder of the compliance function. Bachelor's degree or equivalent practical experience. Nice to Haves Prior experience in the crypto industry, particularly tokenised instruments, crypto derivatives or a MiCA-authorised trading platform. Experience with the DLT Pilot Regime or another distributed ledger market infrastructure. Experience of a trading venue authorisation or a licence variation to add MTF operation. Familiarity with surveillance platforms (Nasdaq Trade Surveillance, Eventus, Scila, Steeleye or similar) and with transaction reporting tooling. International Compliance Association, ACAMS, CISI or equivalent compliance certification. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. About the role: Higgsfield AI is looking for a hands-on Member of Technical Staff, GRC Engineering to build and scale the technical infrastructure supporting our security, risk, and compliance programs. As we scale globally, you'll translate compliance requirements into automated technical controls, continuous monitoring systems, and preventative security measures that evolve alongside our business. Working closely with Security, Engineering, IT, and cross-functional teams, you'll design and implement controls that proactively prevent compliance gaps rather than simply identifying them during audits. This is a technical engineering role focused on building scalable GRC infrastructure, not traditional policy management or audit coordination. We're looking for someone who combines strong knowledge of compliance frameworks with technical problem-solving skills, sound judgment, and the ability to build systems that support a rapidly growing organization. WHAT YOU'LL DO COMPLIANCE ENGINEERING & CONTROL AUTOMATION - Translate regulatory and compliance requirements into actionable technical controls across corporate and product infrastructure. - Design and implement automated controls for access management, system configurations, security monitoring, and compliance validation. - Build preventative controls and release gates that identify and block noncompliant changes before deployment. - Evaluate which controls should be automated and where human review remains necessary. GRC INFRASTRUCTURE & CONTINUOUS MONITORING - Build and maintain scalable GRC infrastructure that supports continuous compliance monitoring and evidence collection. - Develop automated workflows to validate control effectiveness and identify compliance gaps in real time. - Design controls that remain effective as employees, systems, vendors, locations, and products evolve. - Integrate compliance checks into existing engineering workflows, infrastructure, and security tooling. RISK MANAGEMENT & SECURITY CONTROLS - Translate frameworks such as SOC 2, ISO 27001, and other applicable standards into practical engineering requirements. - Partner with Security and Engineering to identify control gaps, prioritize risks, and implement sustainable remediation. - Establish technical standards and preventative guardrails that reduce reliance on manual compliance processes. - Evaluate emerging security and compliance requirements and incorporate them into scalable control designs. TECHNICAL OWNERSHIP & COLLABORATION - Own GRC engineering initiatives from control design through implementation, validation, and ongoing operations. - Build automation through scripts, APIs, integrations, and engineering workflows. - Partner with technical teams to embed compliance requirements into system architecture and development processes. - Help define the long-term GRC infrastructure roadmap to support the company's growth over the next several years. Requirements: - 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles. - Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations. - Hands-on experience personally building or automating security and compliance controls. - Production-grade scripting or programming experience, such as Python, including working with APIs and integrations. - Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence. - Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored. - Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams. - Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity. - Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. - Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: Istanbul, Türkiye Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity This role will support the Compliance function for OKX Türkiye, helping ensure the business operates in line with MASAK, SPK and wider local regulatory requirements. You’ll work across AML/CFT, KYC/EDD, regulatory reporting, marketing and product compliance, customer protection and compliance controls, while partnering closely with Product, Legal, Marketing, Risk and Operations. The role is ideal for an experienced compliance professional who can interpret regulation, identify risks and control gaps, and translate regulatory requirements into practical solutions within a fast-paced fintech and crypto environment. What You’ll Be Doing Support the establishment, execution and maintenance of OKX TR’s local Compliance Program in accordance with MASAK regulations ( Law No. 5549 ) , SPK requirements and applicable internal policies. Assist in the review and oversight of customer due diligence processes, including individual and corporate onboarding, identity verification, enhanced due diligence, customer risk assessment and ongoing monitoring requirements. Support the preparation, review and maintenance of suspicious transaction reporting processes, including case analysis, supporting documentation, internal coordination and communication with MASAK where required. Assist in the handling of regulatory, law enforcement and official authority requests, ensuring that relevant information is reviewed, documented and provided in line with applicable regulatory timelines and internal procedures. Support the review of marketing campaigns, campaign terms and conditions, GTM materials, reward mechanics, influencer / KOL content, social media content, customer-facing communications, website / app content and research / educational materials from a local Compliance perspective. Assist in assessing marketing and customer-facing materials against Türkiye-specific regulatory expectations, including fair and clear communication, customer protection, misleading statements, investment advice risk, guaranteed return language, reward disclosures, crypto-asset reward mechanics and onshore / offshore separation. Support Compliance review of new products, product changes, customer journeys, product documentation, business initiatives and launch materials, helping ensure that local regulatory requirements are considered before implementation. Assist in the preparation and review of internal procedures, regulatory registers and control documents relating to Compliance-related product, system, marketing and operational enhancements. Support the monitoring of customer activity, risk indicators and compliance controls to help identify potential suspicious activity, financial crime risks, data-quality issues or process gaps requiring further review or escalation. Assist in identifying, documenting and following up on control gaps, system limitations and remediation needs, including issues affecting customer data, account status visibility, regulatory reporting, KYC flows and operational controls. Assist in regulatory mapping and horizon-scanning activities by tracking applicable MASAK, SPK and other relevant regulatory requirements, and supporting the mapping of obligations to internal processes, owners and controls. Support the preparation and maintenance of Compliance trackers, management reports, Board-level inputs, regulatory DDQs, audit support materials, internal knowledge bases and workflow mappings. Work closely with Product, Legal, Marketing, Customer Support, CDD, Risk, Operations and Global Compliance teams to support effective implementation of local regulatory requirements across business processes. Contribute to automation, reporting and operational-efficiency initiatives, including workflow mapping, data analysis, compliance tools and system enhancement requests. What We Look For In You 3 – 5 years of experience in compliance, AML/CFT, regulatory compliance, risk management, financial crime, internal controls, legal / regulatory advisory or a similar role, preferably within financial services, fintech, crypto, payments or another regulated environment. Background in technology-driven, fintech, financial services or regulated environments; crypto experience is a plus but not mandatory. Understanding of, or strong interest in, AML / CFT , KYC , EDD , sanctions , PEP , Travel Rule , customer due diligence , regulatory reporting, marketing compliance and customer protection controls . Familiarity with MASAK and SPK regulations/requirements Ability to interpret regulatory requirements and translate them into practical operational processes, controls, documentation, customer communications and product / system requirements. Experience or strong interest in reviewing marketing materials, campaign terms, customer-facing communications, product documentation, website / app content, research content or regulatory disclosures. Strong analytical, research and problem-solving skills, with the ability to identify risk patterns, control gaps and process weaknesses. Well-organised, detail-oriented and able to manage documentation, trackers, controls and multiple workstreams accurately. Strong written and verbal communication skills in English and Turkish, with the ability to collaborate effectively with cross-functional teams. Familiarity with compliance databases, case management systems, screening tools, reporting systems, data analysis or workflow automation is a plus. Proactive mindset, high integrity and ability to work in a fast-paced, technology-driven environment. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .