Compliance Controls & Monitoring

About OnePay

OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken—high fees, low rates, and too few ways to grow your money. We’re fixing it by building an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. Backed by Walmart and Ribbit Capital, we move fast and look for people who are hungry, driven by urgency, exceptional at what they do, and comfortable operating in motion.

Responsibilities

• Relationships: Build trusted relationships across Product, Operations, Engineering, Legal, Risk, Compliance, and other business partners to influence compliance outcomes.
• Controls framework: Support the maintenance and enhancement of the compliance control framework, including control inventories, risk-to-control mapping, ownership, documentation, and monitoring within the GRC platform.
• Risk assessment: Support the enterprise Compliance Risk Assessment process by maintaining the compliance risk register, facilitating risk assessments, and ensuring risks are mapped to controls and monitoring activities.
• Monitoring: Develop, execute, and enhance risk-based monitoring activities, including exception reporting, threshold monitoring, trend analysis, and data quality reviews. Recommend automation, data analytics, and AI-enabled solutions.
• Process Improvement: Identify opportunities to improve controls, monitoring, documentation, and operational processes for efficiency and scalability.
• Cross-functional coordination: Partner with Regulatory Change Management, Operational Change Management, and Third-Party Risk Management to assess control impacts of changes.
• Product compliance: Partner with cross-functional teams during product development to ensure compliance risks, controls, and monitoring are documented pre-launch and post-launch.
• Program ownership: Serve as a compliance resource for domains like Disputes (Reg E/Reg Z), Fraud, FCRA reporting, AI governance, and third-party monitoring.
• Escalation & reporting: Prepare reporting for leadership and governance committees on monitoring results, risks, and recommended actions.
• Advisory & challenge: Provide second-line challenge on control design, issue remediation, and root cause analysis while maintaining separation from first-line execution.

Requirements

• 5–10 years of progressively responsible experience in Compliance, Risk Management, Controls, Compliance Monitoring, or a related second-line function within banking, fintech, or regulated financial services.
• Strong analytical and organizational skills with high attention to detail and the ability to manage multiple priorities.
• Experience with GRC platforms, risk assessment methodologies, risk registers, and control documentation.
• Experience partnering across regulatory change, operational change, and third-party risk to assess control impacts.
• Experience leveraging data analytics, automation, or AI-enabled tools for compliance monitoring or a demonstrated ability to adopt emerging technologies.
• A risk-based mindset with critical thinking and sound judgment to balance regulatory expectations with business solutions.
• Excellent written and verbal communication skills, including audit-ready documentation and reporting for management and risk committees.
• Proven track record of delivering high-quality work under competing priorities and deadlines.
• CRCM, CIA, or equivalent certification preferred.

Benefits

• Competitive base salary and stock options.
• Health benefits from Day 1.
• 401(k) plan with company match.
• Remote-friendly (US) with flexible time off (FTO).
• Opportunities for growth in a high-growth, mission-driven, inclusive culture.