{"id":3195869,"url":"https://alion.io/job/zact-compliance-and-risk-manager","title":"Compliance and Risk Manager","company":{"id":692410,"name":"Zact","domain":"zact.com","url":"https://alion.io/company/zact","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":90000,"max_usd":174000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1030},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-24T02:15:46Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-30T13:55:36Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About Zact\nZact is a fintech innovator dedicated to helping organizations simplify expense and payment management. Our platform aligns employees, finance, and accounting with stronger controls, cleaner workflows, and continuous reconciliation to financial systems.\nWe partner with banks and other financial institutions to deliver modern commercial card, expense management, accounts payable, travel, and related payment capabilities.\nRole Overview\nZact is seeking a Compliance & Risk Manager to own the day-to-day operation of key elements of our compliance program across audit, privacy, and financial-crime oversight.\nThis is a hands-on role responsible for coordinating Zact's SOC and PCI audits, managing compliance with GDPR and other applicable privacy laws, supporting compliance monitoring and testing, and overseeing Zact's responsibilities related to BSA, AML, and OFAC.\nBecause Zact distributes its platform through financial institutions, the BSA/AML/OFAC component of the role is primarily focused on monitoring and documenting the compliance activities of our reseller bank partners, confirming that assigned responsibilities are being performed, and supporting related audits, examinations, and due diligence reviews.\nThis role is not intended to serve as a bank's BSA Officer or perform the bank's core transaction-monitoring function. Instead, the Compliance & Risk Manager will ensure that Zact maintains appropriate oversight, documentation, escalation, and evidence regarding the compliance responsibilities performed by its financial institution partners.\nThe Compliance & Risk Manager will report to the Chief Compliance Officer and work closely with Security, Legal, Operations, Engineering, Finance, and our bank partners.\nKey Responsibilities\nSOC and PCI Compliance\nCoordinate Zact's annual SOC 1 and SOC 2 audit processes, including audit planning, evidence collection, auditor requests, control-owner coordination, and remediation activities.\nCoordinate PCI DSS assessments and related compliance activities.\nMaintain audit calendars, evidence repositories, control documentation, and supporting records.\nWork with internal control owners to ensure required controls are performed and appropriately documented throughout the year.\nTrack audit findings, exceptions, and remediation items through completion.\nServe as a primary operational contact for external auditors and assessors.\nHelp maintain continuous audit readiness rather than preparing only at the time of an assessment.\nPrivacy Compliance\nManage Zact's operational compliance with GDPR and other applicable privacy laws and regulations.\nMaintain and coordinate privacy policies, procedures, data inventories, retention requirements, and supporting documentation.\nWork with Legal, Security, Engineering, and business teams to incorporate privacy requirements into Zact's products and operations.\nCoordinate responses to privacy-related customer and bank due diligence requests.\nSupport privacy assessments, audits, and remediation activities.\nMonitor changes in applicable privacy requirements and coordinate necessary updates to Zact's controls, policies, and procedures.\nBSA, AML, and OFAC Oversight\nManage Zact's oversight program for BSA, AML, and OFAC activities performed by reseller bank partners.\nConfirm that applicable bank partners maintain appropriate BSA/AML and OFAC programs and perform the responsibilities assigned to them.\nCollect and review required certifications, policies, audit reports, testing results, or other evidence from bank partners.\nMaintain documentation demonstrating Zact's ongoing oversight of reseller bank compliance activities.\nIdentify gaps, exceptions, or missing evidence and coordinate follow-up with the appropriate bank partner and internal stakeholders.\nSupport audits, examinations, and due diligence reviews involving Zact's BSA/AML and OFAC oversight responsibilities.\nCoordinate with the Chief Compliance Officer on escalation of material compliance issues.\nCompliance Monitoring and Risk Management\nConduct periodic compliance risk assessments across applicable regulatory and compliance areas.\nDevelop and maintain a risk-based compliance monitoring and testing program.\nPerform or coordinate periodic testing to confirm that compliance controls are operating as intended.\nIdentify, document, escalate, and track compliance issues through remediation and closure.\nMonitor changes in applicable laws, regulations, and compliance frameworks and coordinate updates to policies, controls, and procedures.\nMaintain a clear record of open findings, remediation plans, owners, and target completion dates.\nCompliance Program Management\nMaintain compliance policies, procedures, control documentation, and supporting evidence.\nCoordinate regulatory, customer, and third-party compliance audits and assessments.\nTrack compliance obligations, testing schedules, findings, remediation plans, and deadlines.\nServe as a primary coordinator for bank and prospective customer compliance due diligence requests.\nPrepare compliance reporting for the Chief Compliance Officer, including open findings, remediation status, upcoming audits, and material compliance risks.\nWork across the organization to ensure compliance requirements are understood and implemented.\nHelp identify opportunities to improve and automate compliance processes as the company scales.\nRequired Qualifications\nBachelor's degree required or equivalent experience strongly demonstrating the competency.\n5+ years of experience in compliance, risk management, audit, information security compliance, or a related field.\nExperience working in banking, fintech, payments, or another regulated financial-services environment.\nExperience coordinating SOC 1, SOC 2, PCI DSS, or comparable compliance assessments and audits.\nHands-on experience managing or supporting compliance with GDPR and/or U.S. privacy laws.\nHands-on experience with BSA/AML, OFAC, or financial-crime compliance in a banking, fintech, payments, or financial-services environment.\nExperience overseeing responsibilities performed by financial institutions, regulated partners, or other third parties.\nExperience managing audit evidence, control testing, findings, exceptions, and remediation activities.\nExperience conducting or supporting compliance risk assessments, monitoring, or testing.\nAbility to work directly with auditors, assessors, financial institutions, and internal control owners.\nStrong organizational skills with the ability to manage multiple compliance initiatives and deadlines simultaneously.\nStrong written communication and documentation skills.\nAbility to translate regulatory and compliance requirements into practical operational processes.\nComfortable working in a fast-moving environment where the individual is expected to be hands-on and take ownership of execution.\nPreferred Qualifications\nExperience working with bank partners where compliance responsibilities are shared between a technology provider and the financial institution.\nFamiliarity with SOC 1, SOC 2, PCI DSS, GDPR, CCPA/CPRA, BSA/AML, OFAC, and related regulatory frameworks.\nExperience with compliance management, GRC, or audit-management platforms.\nRelevant certifications such as CAMS, CIPP, CRCM, CISA, or similar credentials.","description_format":"text","description_chars":7287,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Cards & Card Issuing","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-24T04:51:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":35,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/zact-compliance-and-risk-manager","json_url":"https://alion.io/job/zact-compliance-and-risk-manager.json","meta":{"generated_at":"2026-10-30T15:54:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3865,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":692410},"rest":"https://alion.io/mcp/rest/get_company?id=692410"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzact-compliance-and-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzact-compliance-and-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzact-compliance-and-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zact-compliance-and-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzact-compliance-and-risk-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3195869}},{"tool":"search_jobs","arguments":{"company":"zact.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3195869},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}