Director of Compliance - GRC

About the Company

Worth AI is a B2B fintech platform that is reshaping how financial institutions onboard and assess small and medium-sized businesses. Its AI-driven infrastructure brings KYB, KYC, AML, fraud detection, and identity verification into one decisioning engine, supported by a database of more than 700 million SMBs and over 1,200 data points. The company operates at the intersection of financial services, machine learning, and regulatory technology, and is certified SOC 2 compliant while also meeting GDPR and CCPA requirements.

The Opportunity

Worth AI is looking for a Director of Compliance to build, lead, and continuously improve the company’s compliance and governance programs as the organization scales. This person will act as the in-house authority on regulatory compliance, AI governance, risk management, and audit preparedness, while working closely with Product, Engineering, Security, Legal, and Customer teams.

The position is highly cross-functional and customer-facing. The right candidate should be comfortable speaking directly with enterprise clients, financial institutions, auditors, and partners to answer compliance and governance questions, while representing Worth AI as a credible and trusted leader in this space.

This is a high-impact role for someone who thrives in a fast-moving environment, can create scalable compliance processes, and can turn complex regulatory obligations into practical guidance for the business and product teams.

Key Responsibilities

• Lead and oversee the company’s compliance and governance programs across AML/BSA, KYB/KYC, OFAC and sanctions, FCRA, privacy, and other applicable financial services regulations.
• Drive the maturity of the GRC function, including risk assessments, policy oversight, control management, audit readiness, and compliance documentation.
• Coordinate and support external audits, certifications, and regulatory efforts such as SOC 2, PCI DSS, privacy-related obligations under GDPR, customer due diligence reviews, and new AI governance or assurance standards as they emerge.
• Advise Product and Engineering teams so regulatory and governance requirements are built into platform features and workflows.
• Design and maintain Worth AI’s AI governance framework, covering AI usage, model governance, data handling, automated decisioning, and new AI-related regulatory expectations.
• Track regulatory changes and convert updated requirements into usable operational and product guidance.
• Serve as a key contact for enterprise customers, auditors, and partners on compliance, governance, and regulatory topics.
• Manage third-party compliance and risk processes for vendors, data providers, and technology partners.
• Lead compliance incident response efforts, including regulatory inquiries, customer escalations, and coordination around privacy or security events.
• Own and strengthen the third-party risk management program through oversight, due diligence, ongoing monitoring, and risk reviews for third parties supporting regulated operations.
• Develop compliance training and awareness initiatives across the organization and help build a strong culture of governance and accountability.

Requirements

• At least 8 years of experience in compliance, risk, governance, or regulatory operations within fintech, financial services, SaaS, or another regulated environment.
• Deep understanding of AML/BSA, KYB/KYC, OFAC, FCRA, GDPR, CCPA, and related regulatory frameworks.
• Hands-on experience with GRC programs, including risk registers, controls, policies, audits, and compliance frameworks.
• Experience supporting or managing SOC 2, PCI DSS, or similar assessment processes.
• Working familiarity with AI governance, automated decisioning oversight, model risk concepts, and newer AI frameworks such as the EU AI Act or NIST AI RMF.
• Strong communication skills for working with auditors, regulators, enterprise clients, and internal cross-functional teams.
• Ability to balance regulatory discipline with the pace and flexibility required in a startup environment.
• Experience collaborating with Product, Engineering, Security, and Legal teams.

Nice to Have

• CAMS, CRCM, or a comparable compliance certification.
• Exposure to automated decisioning platforms or AI/ML-based underwriting.
• Experience working with community banks, credit unions, or payment processors.
• Familiarity with international regulatory frameworks such as the UK FCA or Canadian FINTRAC.
• Experience with emerging AI regulations or guidance, including the EU AI Act and NIST AI RMF.
• All remote hires must travel to Orlando, Florida at least twice a year for town halls and team collaboration, in addition to an initial orientation in Orlando.

Benefits

• Medical, dental, and vision coverage.
• 401(k) and IRA retirement options.
• Life insurance coverage.
• Flexible paid time off.
• 9 paid holidays.
• Family leave.
• Work-from-home flexibility.
• Free food and snacks in Orlando.
• Wellness resources.