Director of Compliance - GRC

About the Company

Worth AI is a business-to-business fintech platform that is reshaping how financial institutions evaluate and onboard small and medium-sized businesses. Its AI-driven infrastructure brings KYB, KYC, AML, fraud detection, and identity verification together in one decisioning layer, supported by a database of more than 700 million SMBs and 1,200+ data points. The company is SOC 2 certified, aligned with GDPR and CCPA obligations, and works at the crossroads of financial services, machine learning, and regulatory technology.

The Role

Worth AI is looking for a Director of Compliance to lead and continually improve its compliance and governance programs as the organization grows. This leader will act as the in-house expert on regulatory compliance, AI governance, risk management, and audit preparedness, while working closely with Product, Engineering, Security, Legal, and Customer teams.

This is a highly cross-functional position with external visibility. The right candidate should be confident speaking directly with enterprise customers, financial institutions, auditors, and partners about compliance, governance, and regulatory topics while representing Worth AI as a trusted authority.

The role suits someone who thrives in a fast-changing environment, can build compliance processes that scale, and can turn complex regulations into practical guidance for the business and product teams.

Responsibilities

• Maintain and own the company’s compliance and governance programs covering AML/BSA, KYB/KYC, OFAC and sanctions, FCRA, privacy, and other applicable financial services regulations.
• Lead the GRC function by driving risk assessments, policy oversight, control management, audit readiness, and compliance documentation.
• Support external audits, certifications, and regulatory efforts such as SOC 2, PCI DSS, privacy-related GDPR obligations, customer due diligence reviews, and new AI governance or assurance standards as they emerge.
• Advise Product and Engineering teams so regulatory and governance expectations are built into platform features and operational workflows.
• Create and maintain the AI governance framework, including oversight of AI use, model governance, data handling, automated decisioning, and new AI regulatory requirements.
• Track regulatory changes and convert new requirements into clear operational and product guidance.
• Serve as a main contact for enterprise customers, auditors, and partners on compliance, governance, and regulatory matters.
• Manage third-party compliance and risk processes for vendors, data providers, and technology partners.
• Handle compliance-related incident response, including regulatory inquiries, customer escalations, and coordination related to privacy or security events.
• Develop and strengthen the third-party risk management program through due diligence, ongoing monitoring, compliance oversight, and risk reviews for regulated operations.
• Create training and awareness programs that build a strong organization-wide culture of governance and accountability.

Requirements

• At least 8 years of experience in compliance, risk, governance, or regulatory operations within fintech, financial services, SaaS, or similar regulated environments.
• Deep familiarity with AML/BSA, KYB/KYC, OFAC, FCRA, GDPR, CCPA, and related regulatory frameworks.
• Hands-on experience supporting GRC programs such as risk registers, controls, policies, audits, and compliance frameworks.
• Experience helping manage or run SOC 2, PCI DSS, or comparable assessments.
• Working knowledge of AI governance, automated decision oversight, model risk concepts, and emerging regulations such as the EU AI Act or NIST AI RMF.
• Strong communication skills for engaging with auditors, regulators, enterprise customers, and internal cross-functional teams.
• Operationally strong with the ability to balance regulatory discipline and startup-speed execution.
• Experience partnering with Product, Engineering, Security, and Legal teams.
• For remote hires, travel to Orlando, Florida is required at least twice a year for town halls and team collaboration, plus an orientation in Orlando.

Nice to Have

• CAMS, CRCM, or a similar compliance credential.
• Experience with automated decisioning platforms or AI/ML-based underwriting systems.
• Exposure to community banks, credit unions, or payment processors.
• Familiarity with international compliance frameworks such as UK FCA or Canadian FINTRAC.
• Experience with newer AI regulatory standards such as the EU AI Act, NIST AI RMF, or similar frameworks.

Benefits

• Medical, dental, and vision coverage.
• 401(k) and IRA retirement options.
• Life insurance.
• Flexible paid time off.
• 9 paid holidays.
• Family leave.
• Work-from-home support.
• Free food and snacks in Orlando.
• Wellness resources.

Additional Information

Remote hires must travel to Orlando, Florida at least twice per year for town halls and collaboration, in addition to orientation in Orlando.