Director of Compliance - GRC

About Worth AI

Worth AI is a B2B fintech company reshaping how financial institutions onboard and evaluate small and medium-sized businesses. Its AI-driven infrastructure brings KYB, KYC, AML, fraud detection, and identity verification into one decisioning layer, supported by a database of more than 700 million SMB records and 1,200+ data points. The company operates with SOC 2 certification and compliance alignment for GDPR and CCPA, at the intersection of financial services, machine learning, and regulatory technology.

Role Overview

Worth AI is hiring a Director of Compliance to build, lead, and continuously improve the organization’s compliance and governance programs as the business grows. This person will act as the internal authority on regulatory compliance, AI governance, risk management, and audit readiness, while working closely with Product, Engineering, Security, Legal, and Customer teams.

The role is highly cross-functional and customer-facing. The right candidate will be comfortable speaking directly with enterprise clients, financial institutions, auditors, and partners about regulatory, governance, and compliance matters while representing Worth AI as a trusted leader in the space.

This position suits someone who thrives in a fast-moving environment, can design scalable compliance processes, and can convert complex regulatory requirements into practical guidance for business and product teams.

Responsibilities

• Lead Worth AI’s compliance and governance programs covering AML/BSA, KYB/KYC, OFAC and sanctions, FCRA, privacy, and other applicable financial services regulations.
• Build out and strengthen the GRC function, including risk assessments, policy oversight, control management, audit preparation, and compliance documentation.
• Coordinate external audits, certifications, and regulatory initiatives such as SOC 2, PCI DSS, privacy-related GDPR obligations, customer due diligence reviews, and new AI governance or assurance frameworks as requirements evolve.
• Advise Product and Engineering teams so regulatory and governance requirements are incorporated into platform features and operational workflows.
• Create and maintain the AI governance framework, including oversight of AI use, model governance, data practices, automated decisioning, and emerging AI compliance expectations.
• Track changes in the regulatory landscape and turn new requirements into clear operational and product recommendations.
• Serve as a main contact for enterprise customers, auditors, and partners on compliance, governance, and regulatory topics.
• Manage third-party compliance and risk activities for vendors, data providers, and technology partners.
• Handle compliance-related incident response, including regulatory inquiries, customer escalations, and coordination for privacy or security events.
• Develop and mature the third-party risk management program through due diligence, ongoing monitoring, compliance review, and risk assessments.
• Design and roll out compliance training and awareness initiatives that strengthen governance and accountability across the company.

Requirements

• At least 8 years of experience in compliance, risk, governance, or regulatory operations in fintech, financial services, SaaS, or another regulated environment.
• Strong working knowledge of AML/BSA, KYB/KYC, OFAC, FCRA, GDPR, CCPA, and related regulatory standards.
• Hands-on experience supporting GRC programs, including risk registers, controls, policies, audits, and compliance frameworks.
• Experience supporting or leading SOC 2, PCI DSS, or comparable assessments.
• Working familiarity with AI governance, automated decisioning oversight, model risk concepts, and developing frameworks such as the EU AI Act or NIST AI RMF.
• Ability to communicate clearly and effectively with auditors, regulators, enterprise customers, and internal cross-functional teams.
• Strong operational judgment with the ability to balance compliance rigor and startup-level execution speed.
• Experience collaborating closely with Product, Engineering, Security, and Legal teams.

Nice to Have

• CAMS, CRCM, or a similar compliance credential.
• Experience with automated decisioning systems or AI/ML-based underwriting platforms.
• Exposure to community banks, credit unions, or payment processors.
• Familiarity with international compliance frameworks such as the UK FCA or Canadian FINTRAC.
• Experience with emerging AI regulatory frameworks, including the EU AI Act, NIST AI RMF, or comparable standards.
• For remote hires, travel to Orlando, Florida is required at least twice per year for town halls and team collaboration, plus orientation in Orlando.

Benefits

• Medical, dental, and vision coverage.
• 401(k) and IRA retirement options.
• Life insurance.
• Flexible paid time off.
• 9 paid holidays.
• Family leave.
• Work-from-home flexibility.
• Free food and snacks in Orlando.
• Wellness resources.