Logo for WavesReach

Compliance Manager

Role overview

Qualifications

  • 5+ years of experience in compliance, audit, or risk management within fintech, crypto, or regulated financial services.
  • Hands-on experience leading ISO 27001, PCI-DSS, SOC 1/2, and GDPR compliance initiatives.
  • Strong understanding of regulatory frameworks applicable to digital asset businesses, including VASP licensing.
  • Experience managing audits and working directly with external auditors and regulators.

Responsibilities

  • Lead and manage end-to-end compliance programs, including ISO 27001, PCI-DSS, SOC 1/2, and GDPR.
  • Own the preparation, coordination, and execution of internal and external audits.
  • Develop, implement, and continuously improve policies, procedures, and controls to ensure regulatory compliance.
  • Drive VASP licensing processes across relevant jurisdictions, including documentation, submissions, and regulator communication.

Key facts

Hard skills

Other skills

  • Communication
  • Leadership
  • Time Management
  • Teamwork
  • Organizational Skills

About the company

WavesReach logo

WavesReach

  • Staffing & Recruiting
  • 2–10
We're more than just matchmakers; we're wave riders, expertly navigating the dynamic currents of talent acquisition. With a keen eye for potential and a knack for aligning skills with opportunities, we ride the waves of industry trends to bring you exceptional candidates who can make a transformative impact. Join us on a journey where we tame the waves to find and deliver the best people for your team's success.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

We are looking for a Compliance Manager to lead and scale the company's global compliance framework across security, regulatory, and audit domains.

This role focuses on owning and driving key compliance programs, including ISO 27001, PCI-DSS, SOC 1/2, and GDPR, while ensuring alignment with regulatory requirements for digital asset businesses. You will play a critical role in building and maintaining a robust, audit-ready compliance infrastructure that supports secure and scalable operations.

Responsibilities:

  • Lead and manage end-to-end compliance programs, including ISO 27001, PCI-DSS, SOC 1/2, and GDPR.
  • Own the preparation, coordination, and execution of internal and external audits.
  • Develop, implement, and continuously improve policies, procedures, and controls to ensure regulatory compliance.
  • Drive VASP licensing processes across relevant jurisdictions, including documentation, submissions, and regulator communication.
  • Collaborate with cross-functional teams (engineering, security, legal, operations) to ensure compliance requirements are embedded into systems and processes.
  • Monitor regulatory developments in crypto and fintech, ensuring proactive adaptation of internal frameworks.
  • Manage risk assessments, gap analyses, and remediation plans to maintain compliance readiness.
  • Act as the primary point of contact for auditors, regulators, and external partners on compliance-related matters.
  • Promote a strong culture of security, compliance, and risk awareness across the organization.

Requirements:

  • 5+ years of experience in compliance, audit, or risk management within fintech, crypto, or regulated financial services.
  • Hands-on experience leading ISO 27001, PCI-DSS, SOC 1/2, and GDPR compliance initiatives.
  • Strong understanding of regulatory frameworks applicable to digital asset businesses, including VASP licensing.
  • Experience managing audits and working directly with external auditors and regulators.
  • Ability to translate complex regulatory requirements into practical business processes and controls.
  • Strong organizational skills with the ability to manage multiple compliance programs simultaneously.

Related jobs

See all Compliance Manager jobs

Other jobs at WavesReach