Astra

Compliance

• Set the strategy for Astra's enterprise compliance program and improve policies, procedures, risk assessments, controls, testing, training, and reporting
• Serve as Astra's designated BSA/AML Compliance Officer
• Oversee KYC/KYB, customer due diligence, sanctions screening, transaction monitoring, alert and case management, and financial-crimes risk
• Report material compliance risks, program performance, audits, and remediation to executive leadership and the Board
• Lead, develop, and scale the Compliance and GRC team
• Serve as senior compliance contact for sponsor-bank partners
• Oversee ACH/NACHA, card-network, RTP, FedNow, and other payment-rail compliance
• Evaluate new products, payment flows, customers, partnerships, and markets and establish controls before launch
• Evaluate regulatory developments and licensing or registration requirements with outside counsel
• Build and enhance fraud controls across payment flows
• Own SOC 2 and PCI DSS programs, including scoping, control ownership, audit readiness, auditor coordination, findings management, and annual assessments
• Oversee readiness for BSA, NACHA, sponsor-bank, customer, SOC 2, PCI DSS, and other audits
• Maintain an enterprise risk and controls framework
• Lead Astra's privacy compliance program, including GDPR and U.S. privacy requirements, data-subject requests, retention, privacy notices, and reviews
• Oversee third-party compliance risk, customer assurance, and compliance due-diligence responses
• Advise Product, Engineering, Sales, and Integrations on compliance requirements
• Manage third-party compliance vendors
• Report to the COO and advise executive leadership and the Board

Head of Compliance