A Compliance and Risk Manager is a strong relationship builder with valuable experience in the compliance and risk space. You will report to Legal Counsel and collaborate with the legal, product and development teams to strengthen our compliance and risk functions. You will be able to easily develop an in-depth knowledge of company offerings and lead a range of compliance and risk initiatives. You will have the opportunity to make an impact in a fast-scaling sector, with the potential to affect hundreds of millions of people around the world.
Responsibilities
- Assist in the design, development, and implementation of appropriate policies and procedures.
- Conduct periodic compliance testing, assess findings and address both the strengths and areas needing improvement.
- Manage the company’s activities related to various external security audits.
- Lead and perform due diligence on third parties and partners.
- Ensure regulatory reports and documentation (STR/LVCTR/FINTRAC/etc.) are completed with accuracy and expediency.
- Develop a framework for evaluating and reporting on potential threats or risks across all business units.
- Facilitate practical strategies for risk mitigation, addressing their root cause factors and potential consequences.
- Reviewing potential and existing users for AML/ATF Risk factors.
- Serve as the expert on risk management, compliance, and information security as they relate to the company’s business and operations.
- Assess changes and manage growth of risk environment as operations scale.
- Engage in ad-hoc projects as required.
- Facilitate and deliver training and awareness ensuring regulatory compliance and fostering a culture of Information Security.
- Develop initiatives that elevate the team’s ability to assess opportunities for improved security and resolve any compliance related gaps.
Requirements
- 3-5 years experience in Compliance, Information Security, or Technology Risk or leadership roles.
- Proven experience implementing risk management methods and security compliance standards and processes.
- Good understanding of FINTRAC’s PCMLTFA as it applies to AML, client identification, beneficial ownership, identifying and reporting STR’s, etc.
- Experience in system/network exploitation, attack, and intrusion techniques (denial of services, malicious code, password cracking, etc.).
- Ability to collaborate across departments, acquiring information to satisfy regulatory requirements.
- Interested in and knowledgeable about blockchain, Web3 and gaming in particular.