Compliance Controls & Monitoring

OnePay

7d•$120,000 - $150,000•Remote

About The Position

Compliance Controls & Monitoring (C&M) is OnePay’s second line of defense responsible for establishing and overseeing the firm’s compliance control environment. Distinct from independent Compliance Testing, the team partners across the organization to ensure compliance risks are appropriately identified, assessed, and managed through effective controls, monitoring, and governance throughout the product lifecycle.

Requirements

Mid Career (5-10 Years) with progressively responsible experience in Compliance, Risk Management, Controls, Compliance Monitoring, or a related second-line function within banking, fintech, or another regulated financial services environment.
Strong analytical and organizational skills with high attention to detail and accuracy and the ability to manage multiple priorities.
Experience using GRC platforms and risk assessment methodologies, including risk registers, inherent and residual risk assessments and control documentation.
Experience partnering across regulatory change management, operational/project change management, and third-party or vendor risk to assess the control impact of change.
Experience leveraging data analytics, automation, or AI-enabled tools to improve compliance monitoring, reporting, or operational efficiency, or a demonstrated ability to quickly adopt emerging technologies.
A risk-based mindset — demonstrates strong critical thinking and sound judgment with the ability to identify root causes, assess risk, and balance regulatory expectations with practical business solutions.
Excellent written and verbal communication skills (English proficiency required), with a track record of producing clear, audit-ready documentation and high-impact reporting for management and risk committees. Ability to communicate effectively with technical teams, business leaders, and executive stakeholders.
A proven track record of delivering high-quality work under competing priorities and deadlines.

Nice To Haves

CRCM, CIA or equivalent certification preferred.

Responsibilities

Build trusted relationships across Product, Operations, Engineering, Legal, Risk, Compliance and other business partners to influence compliance outcomes.
Support the maintenance and ongoing enhancement of the compliance control framework, including centralized control inventories, risk-to-control mapping, ownership, control documentation, and monitoring relationships within the firm’s GRC platform.
Support the enterprise Compliance Risk Assessment process by maintaining the compliance risk register, facilitating periodic risk assessments, supporting calibration of inherent and residual risk ratings, and ensuring identified risks are appropriately mapped to controls and monitoring activities.
Develop, execute, and enhance risk-based monitoring activities, including exception reporting, threshold monitoring, trend analysis, and data quality reviews across applicable regulatory requirements. Recommend and implement automation, data analytics, and AI-enabled solutions that improve monitoring efficiency and coverage.
Recommend opportunities to improve existing controls, monitoring activities, documentation, and operational processes to increase efficiency, consistency, and scalability.
Partner with Regulatory Change Management, Operational Change Management, and Third-Party Risk Management to translate regulatory changes, operational/system changes, and third-party relationships into control and monitoring impacts, and perform compliance risk and control impact assessments for material changes.
Partner with cross-functional teams during product development and implementation to ensure compliance risks, controls, and monitoring activities are identified and documented prior to launch. Provide ongoing post-launch oversight to identify emerging compliance risks, control gaps, and opportunities for enhancement.
Support assigned regulatory or operational domains by serving as a compliance resource and trusted partner, which may include Disputes (Reg E/Reg Z), Fraud, FCRA reporting and disputes, AI governance, operations change management, and third-party/partner monitoring.
Prepare clear, concise reporting for leadership, governance committees, and other stakeholders highlighting monitoring results, emerging risks, control trends, key observations, and recommended actions.
Provide credible second-line challenge on control design, issue remediation, and root cause analysis while maintaining appropriate separation from first-line control ownership and execution.