Compliance

• S’approprier l’état des lieux existant (gap analysis) du SMSI au regard des exigences ISO/IEC 27001 et la feuille de route vers la certification.
• Piloter et accompagner l’évolution du SMSI : définition du périmètre, du contexte, de la politique et des objectifs de sécurité.
• Conduire les analyses de risque (EBIOS RM ou équivalent), élaborer le plan de traitement des risques et la Déclaration d’Applicabilité (SoA).
• Rédiger, compléter et harmoniser les politiques, procédures et documents requis par la norme.
• Préparer et accompagner les audits internes, l’audit à blanc puis l’audit de certification (étapes 1 et 2) avec l’organisme certificateur.
• Coordonner la démarche avec le groupe GRC de NTT pour capitaliser sur les bonnes pratiques du groupe déjà certifié et aligner nos pratiques sur celles du groupe.
• Sensibiliser et former les équipes aux exigences du SMSI et à la culture sécurité.
• Assurer le transfert de connaissances vers les équipes internes afin de pérenniser le SMSI au-delà de la mission.

Consultant Sécurité GRC

• Manage GPV procedures, training curricula, and onboarding/offboarding activities
• Support Pharmacovigilance Agreements (PVAs) lifecycle management and compliance oversight
• Coordinate GPV compliance reporting, metrics, and stakeholder communication
• Support GPV audits, inspections, CAPA management, and PSMF maintenance
• Act as a key interface between GPV, Quality, and external partners
• Deputize for the EU/UK QPPV when required, including regulatory authority interactions and PV oversight
• Provide strategic PV guidance and support benefit-risk monitoring activities
• Contribute to continuous improvement and compliance initiatives across Global Pharmacovigilance

Senior Global PV Policy, Regulation and Compliance Manager – Deputy QPPV (EU)

• Compliance operations & case management
• Owner of member onboarding / new customer acceptance
• Lead for transaction monitoring
• Detection of weak signals and qualification of alerts
• Drafting and filing Suspicious Activity Reports (SARs)
• Communication with members and partners on compliance matters
• Data analysis and exploration
• Automation & applied AI
• Designing and iterating prompts to improve compliance workflows
• Data & AI liaison for the Compliance team
• Continuous maintenance and integration of AI tools
• Testing new AI solutions and active monitoring of regtech innovations

Compliance Data & AI Specialist – Work-study, 24-month contract, Master's M1 & M2

• Oversee the regulatory strategies essential for exporting cosmetics to various international markets.
• Act as the main regulatory contact for regions and partners throughout product lifecycle.
• Collaborate cross‑functionally to ensure compliant and timely submissions.
• Manage project timelines, organize export review meetings, and oversee registration tracking.
• Conduct regulatory risk assessments and propose mitigation plans.
• Monitor international regulatory developments impacting product registration and commercialization.
• Support business teams with pragmatic and compliant regulatory solutions.
• Track and monitor regulatory KPIs related to export activities.

Regulatory Affairs Export Manager – Cosmetics

• Setting the scope and framework for the Group Compliance function
• Collaborating with operational teams to identify gaps and translate them into practical processes
• Developing and implementing compliance monitoring programs
• Preparing reports for executive leadership and regulators

Compliance Operating Officer

• Review and validate high‑risk and complex KYC files escalated by Ayvens entities
• Assess risks related to AML/CFT, corruption, international sanctions, ESG and reputational exposure
• Act as a trusted advisor to local Compliance teams
• Provide guidance on complex due diligence cases, sanctions/PEP hits and corporate structures
• Ensure alignment with Group standards
• Serve as a key escalation point to Société Générale
• Contribute to Group‑level governance and decision‑making
• Produce clear reporting and dashboards for management committees
• Support continuous improvement initiatives

Compliance Specialist

• Draft or update policy mappings, procedures, and operational methods in collaboration with operational teams
• Participate in the preparation of regulatory reporting for the AMF and ACPR, as well as non-regulatory reporting
• Support the Senior Risk and Compliance Manager by promoting awareness, performing controls, and ensuring the risk management framework is effective and operational, including the Risk & Control Self‑Assessment (RCSA) framework
• Assist with the collection and consolidation of Key Risk Indicators and risk meeting data points
• Participate in reviews and follow-ups to ensure incidents are accurately recorded, control gaps are identified, and corrective actions properly remediate the issues
• Collect and analyze incidents to ensure lessons are learned; monitor agreed action plans and escalate issues to management when necessary
• Assist in preparing risk presentations and incident case studies
• Support global risk initiatives, thematic risk reviews, and other remediation/assurance activities that deliver tangible risk reduction/mitigation
• Develop an understanding of each team’s roles, processes, and key operational risks, including regional nuances
• Promote a strong risk and control culture and a positive learning environment; contribute to risk awareness training and ensure learnings and best practices are effectively shared
• Prepare minutes for risk and compliance meetings
• Monitor upcoming regulations and changes to existing regulations to assess their impact
• Assist in managing the outsourced internal audit function and in conducting risk audits and spot checks on the business

Risk & Regulatory Analyst

• Maintain, and continuously enhance the Compliance Framework, including policies, procedures, and internal controls, covering all applicable regulations for the entity.
• Implement and oversee the annual Compliance Plan, including compliance monitoring activities and thematic reviews focusing on regulatory outcomes and conduct risk, and management and board-level reporting.
• Identify, assess, and escalate material compliance risks, breaches, or control weaknesses.
• Ensure compliance requirements are embedded into business processes, product governance, customer onboarding, and ongoing operations.
• Assess and monitor Conduct Risk, ensuring that the firm’s culture and business practices consistently deliver fair outcomes for customers.
• Provide regulatory interpretation, guidance, and practical advice to the business on existing, new, and evolving regulatory requirements and their operational impact.
• Support product development and change initiatives, ensuring that new or significantly modified products, services, and distribution models comply with applicable regulatory obligations.
• Act as a trusted advisor to senior management on regulatory matters, compliance risk exposure, and regulatory strategy.
• Provide input for escalations requiring Senior Management approval. Participate in the second line of defence oversight of Financial Crime & AML/CFT Framework.
• Challenge the adequacy and effectiveness of first-line AML/CFT implementation and ensure alignment with regulatory expectations.
• Collaborate with the AML/Financial Crime team to ensure a holistic view of compliance risk for Senior Management.
• Act as a point of contact for authorities on regulatory compliance matters, together with the CRCO.
• Manage and coordinate responses to regulatory inquiries, including preparation of documentation and follow-up actions.
• Maintain a Regulatory Change Management tracker to ensure all upcoming legislative changes are mapped to internal owners and implemented ahead of deadlines.
• Ensure adequate metrics are provided for Senior Management oversight.
• Ensure timely, accurate, and consistent regulatory reporting within the scope of regulatory compliance responsibilities.
• Ensure adequate compliance training and awareness programs across the organisation tailored to regulatory developments and risk exposure.
• Ensure staff understand their regulatory responsibilities, applicable policies and procedures, and escalation pathways.
• Monitor regulatory developments and proactively assess their applicability and impact on the business.
• Contribute to the ongoing improvement of governance arrangements, compliance methodologies, and reporting frameworks.
• Collaborate with second line of defence colleagues on Risk, Legal, AML, and Permanent Control functions to ensure coherent second-line coverage.

Regulatory Compliance Officer

• Contribute to drafting, updating and implementing internal compliance policies and procedures.
• Ensure the company’s compliance with applicable regulations (GDPR, DORA, AI Act, Sapin II Law, BRRD II, OCIR, etc.).
• Implement and oversee GDPR requirements: Conduct and maintain DPIAs for high‑risk processing activities.
• Maintain and complete the records of processing activities.
• Establish and manage the personal data breach notification process.
• Handle data subject rights requests.
• Contribute to implementing DORA requirements: Participate in the ICT risk management framework and associated governance.
• Assess risks related to critical third‑party providers and monitor continuous supplier oversight.
• Contribute to the preparation and reporting of major incidents to the competent authorities.
• Ensure regulatory compliance of outsourced activities and supplier contracts (GDPR clauses, DORA requirements, etc.) in coordination with Finance and Procurement teams.
• Support business teams, notably HR, Finance and Procurement, in integrating regulatory requirements into their projects and activities.
• Identify non‑compliance risks, feed and maintain the company risk mapping.
• Lead remediation plans and risk mitigation actions.
• Define, implement and oversee the continuous compliance control framework.
• Train and raise employee awareness on compliance issues (GDPR, anti‑corruption framework, etc.).
• Contribute to structuring and improving the business continuity and crisis management arrangements.
• Prepare regular reporting and keep documentation up to date for internal and external audits.

Compliance Analyst

• Lead and develop an 8-person team
• Own Qonto’s regulatory compliance roadmap
• Partner with Product & Strategy teams
• Assist in handling queries from banking authorities
• Leverage tooling and AI for analysis

Head of Regulatory Compliance

• Are you looking to have an impact on the daily life of millions of entrepreneurs in France (and tomorrow in Europe)?
• Are you looking for a work environment that values trust, proactivity, and autonomy?
• Then Pennylane is the right place for you !
• **Our vision**
• We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones).
• We help entrepreneurs rid themselves of time-consuming tasks related to accounting and finance while providing them with access to key financial information to assist in making the best decisions for their business.
• **About us**
• Pennylane is one of the fastest growing Fintechs in France (and soon to be in Europe!)
• In 5 years of existence, we’ve managed to :
• 💻 Make ourselves known as a groundbreaking accounting and financial software for small businesses and their accountants
• 💰 Raise a total of €400 millions, including from Sequoia, the famous fund from the Silicon Valley who invested early in companies like Google, Facebook, Airbnb, Stripe, Paypal and much more...
• 👨‍👩‍👧‍👦 Grow from 7 cofounders to 1000 happy Pennylaners : we’re now recognized as one of the greatest places to work in France (and also remotely), with a 4.6/5 rating on Glassdoor.
• 🌍 Build an international environment with more than 25 nationalities, with a strong remote-friendly culture, where 30% of the employees are already working from all parts of Europe
• 🤝 Earn the trust of thousands of customers and accounting firms and obtain outstanding ratings
• 🚀 Already more than 900,000 small and medium-sized enterprises (SMEs) and over 6000 accounting firms use Pennylane in France!****
• Context
• - We are currently operating approximately 30k business accounts under a BaaS model
• - The role of Financial Services in Pennylane’s strategy is set to grow, both in terms of revenue and product contribution, to serve our 750k+ current customer base
• - As such, we are initiating a process to get licensed as *Etablissement de paiement* et *Société de financement* to meet our current functional scope at the very least
• - Our ambition is to start onboarding new customers by early 2027 before starting migrating existing customers
• - To meet this ambition, we are starting to hire our Tech, Product, Compliance and Ops leaders
• - We are looking for a Lead Compliance / MLRO.
• - Reporting directly to the Director of Compliance and Risk, you will be responsible for the consistency and effectiveness of the non-compliance risk management framework across the payment institution and financing company. The role covers all regulatory compliance functions, including AML/CFT, customer protection, fraud management, in full alignment with French and European regulatory requirements.
• - Your mission would be to :
• - Design and implement the compliance framework, risk, permanent controls for a combined payment services and financing perimeter.
• - Act as point of contact for the regulator on LCB‑FT / Tracfin matters
• - Build and lead a compliance team
• - Work in close partnership with the group compliance function (eg on GDPR and ethics), while maintaining full independence as a control function.
• This is a greenfield project with high autonomy and responsibility, direct exposure to regulators, and the opportunity to shape the compliance function and culture of a fast‑growing fintech with a robust preexisting customer base.
• Missions & objectives**AML/CFT Program (MLRO)**
• - Act as the designated MLRO, responsible for filing Suspicious Activity Reports (SARs) with TRACFIN
• - Oversee KYC/KYB procedures, risk scoring, transaction monitoring, and sanctions / PEP screening
• - Chair the AML/CFT Committee and report to the Board on money laundering and terrorist financing exposure
• - Keep the AML/CFT framework up to date in line with AMLD6, EBA guidelines, and ACPR requirements
• **Norms, Policies & Procedures**
• - Design, implement, and maintain compliance policies and procedures, including the AML/CFT procedure, the compliance manual, and all related internal frameworks
• - Ensure procedures are accessible, up to date, and effectively communicated across the organization
• **New Product Compliance**
• - Review and formally approve all new products before commercialization, as well as any significant changes to existing products (including through M&A)
• - Issue written, formalized opinions to ensure products are compliant with applicable regulations prior to launch
• **Non-Compliance Risk Mapping**
• - Build, maintain, and update the non-compliance risk map, which is distinct from the operational risk map but follows a similar process-based identification methodology
• - Ensure the map highlights key criminal and reputational risks
• - Produce a synthetic, executive-level view of the risk map for reporting to governance bodies (Board, Audit Committee, Risk Committee)
• **Permanent Compliance Control**
• - Lead the second-level permanent control activities related to compliance, as part of the broader second-level control framework
• - Ensure that first-level controls exist, are operational, and are effective
• **Compliance Systems & Tools Ownership**
• - Act as business owner for all compliance-related systems, in particular AML/CFT transaction monitoring and alerting tools
• - Define functional requirements for these tools and validate that delivered or updated systems are correctly configured and meet compliance expectations
• - Ensure that any new business application or material change to an existing one remains compliant with regulatory obligations
• **Training & Advisory**
• - Design and deliver compliance training programs to raise awareness of non-compliance risks across all business functions
• - Provide guidance and advisory support to employees on compliance matters
• **Regulatory Watch**
• - Monitor and analyze regulatory developments applicable to the business (laws, regulations, guidelines, industry standards)
• - Disseminate relevant regulatory updates across the organization in a timely and actionable manner
• Governance & Reporting
• - **Interaction with the Lead Control and Risk Officer:** Collaborate closely with the **Lead** **Controls & Risks Officer (RFC2)**, who oversees Level 2 controls, while you act as the ultimate escalation and decision point for recommendation definition and implementation within your scope.
• - **Management Reporting:** Provide regular updates to the **Director of Compliance & Risk (DE2)** and the **Supervisory Board** on the status of the AML/CFT program and identified residual risks.
• - **Training:** Implement and oversee the local AML/CFT and Sanctions training program, ensuring all employees (especially L1 Ops) are equipped to identify suspicious behavior.
• - **Product Counsel Collaboration:** Work closely with product counsel to ensure AML/CFT compliance for new products and activities at launch.
• Team Leadership
• - **Structure & Recruitment:** Participate in recruiting and managing a high-performing team, including specialists in SAR, TM, KYC, and compliance operations.
• - **Performance Management:** Establish clear roles, responsibilities, and Key Performance Indicators (KPIs) for each team member.
• - **Culture of Excellence:** Foster a culture of ownership, radical honesty, and accountability, ensuring high standards of documentation and auditability for future ACPR inspections.
• **Profile & Must‑Have Experience****Experience**
• - 8 to 10+ years of experience in regulatory compliance, with significant exposure to a payment institution, bank, credit institution, or regulated fintech
• - Proven track record as MLRO or designated AML/CFT officer
• - Strong knowledge of the regulatory framework applicable to payment institutions and financing companies (PSD2, PSD3, DORA, AMLD, ACPR regulations)
• **Technical Skills**
• - Deep expertise in AML/CFT frameworks (KYC/KYB, transaction monitoring, sanctions screening)
• - Experience as business owner for compliance tools and ability to bridge compliance requirements with IT/product teams
• - Ability to read, interpret, and apply complex regulatory texts in both French and English
• - Ability and passion to build from scratch: frameworks, policies, processes, tools, reporting.
• **Soft Skills**
• - Strong leadership and ability to influence
• - Excellent communication skills across all levels (Board, regulators, operational teams)
• - Rigorous, principled, and accountable
• - Pragmatic, impact‑driven approach, capable of operating under strong regulatory constraints without blocking innovation.
• - Comfortable operating in a dual posture of control and advisory, with clear boundaries between the two
• - Strong pedagogy: able to explain complex regulatory topics to product managers, engineers and founders in simple, actionable terms.
• - Challenging yet constructive: comfortable questioning senior leaders, while remaining solution‑oriented and business‑minded.
• **Languages, Presence & Location**
• - Languages: fluent French and English are mandatory (day‑to‑day work and ACPR & Tracfin interaction in French; internal and investor dialogue often in English).
• - Location:
• - Based in France, with a strong preference for Paris.
• - Regular on‑site presence in Paris is expected; partial remote is possible, but this is not a fully remote role.
• **Why Join Us?**
• - Greenfield regulatory project: Be the architect of a new regulated entity, from licence application to operational rollout.
• - Massive impact: Shape the way financial services are delivered to hundreds of thousands of French SMEs.
• - High autonomy & influence:
• - Direct, regular interaction with the Director of Compliance & Risk
• - Central role in building and applying the risk appetite and governance of the entity.
• - Fast‑growing fintech environment:
• - Work closely with top‑tier product and engineering teams.
• - Help invent the next generation of SME financial services under a robust, modern compliance and risk framework.
• - Competitive compensation package, including equity components aligned with impact and responsibility.
• Hiring process (TBC)
• - HR interview with Simon Peraldo (Senior Recruiter)
• - Who interview withStanislas de Villoutreys (Head of Legal, Compliance and Risk) and Maxime Leclercq (General Manager Financial Services)
• - Case study with Stanislas and Guillaume Nicolle (Lead Internal Control & Risk)
• - Last round with Felix Blossier (COO and cofounder)
• **What do we do to make your work life easier**
• 🌴 Wherever you are based, you will get 25 vacations days paid by Pennylane
• 💵 You’ll have a competitive compensation package
• 📈 You'll get company shares to enjoy a piece of the success story you're building with us
• 🏡 You’ll have a budget to turn your home into a more comfortable workspace, as well as a monthly allowance to work from a coworking space whenever you feel like it
• ⛹️ Through our partner Gymlib, you’ll have access to 8000 fitness spaces in Europe and more than 300 activities related to wellness
• 💻 You’ll get the latest Apple equipment
• 🏢 Depending on the teams and the requirements of the position - you'll be able to work remotely from your country of residence, as long as it is in Europe and within a maximum time difference of two hours from the CET time zone
• 🎉 We are committed to regularly coming together for company events such as Tech Days (which bring remote Pennylaners together every 3 months) or our annual company seminar, fostering significant moments of cohesion for everyone.
• If you are based in France, you will have a French contract following French regulation on top of the additional perks : 6 to 12 RTT, 5 weeks PTOs, lunch credits (Swile), Alan Blue healthcare cover and regular events in cities where Pennylaners are mostly presents (Lyon, Bordeaux, Nantes…)
• *We're working on providing those last advantages to our people based outside of France as well, but it can be quite more complex depending on different countries.*
• **Who are we looking for ?**
• To thrive at Pennylane, you need :
• -To speak English (level is assessed and appreciated according to the department you’re applying to)
• -To be energized by an ever-shifting work environment
• -To be highly collaborative (within your team or other stakeholders)
• -Sufficiently experienced to prioritize business-led actions on your day to day activity
• We know that some people are less likely to apply than others, if they don’t feel like they meet the full list of criteria.
• If you’re hesitating, we encourage you to apply : who knows, it might be the start of a meaningful and long-lasting collaboration.
• **Important information for candidates**
• Recruitment scam attempts are on the rise. We invite you to remain vigilant during your exchanges.
• **Applications through official channels only **: apply exclusively through our job postings published on our official platforms (career site, official partner pages).
• **Always verify the sender's email address**: our communications are sent from professional email addresses with the domains @pennylane.com or @pennylane-partners.com
• **We will never ask you for payment or financial information**
• (bank details, payment for an interview, equipment purchases, etc.) as part of the recruitment process. If such a request is made to you, it is fraudulent. We invite you to **not respond** and to **report it to us immediately**.
• We also want to emphasize that we fully embrace diversity, equity and inclusion and that we’re doing our best to create a safe and inclusive environment.
• We are committed to providing an equal employment opportunity regardless of gender, sexual orientation, origin, disabilities, or any other traits that make you who you are. If anything, diversity makes us a more fun place to work at.

Responsable Conformité, LCB-FT

• Conduct KYC/KYB reviews and prepare onboarding recommendations, escalating high-risk or ambiguous cases (including complex ownership structures, PEPs, and clients in high-risk jurisdictions) to senior team members and/or the MLRO.
• Support Enhanced Due Diligence (EDD) case preparation under the guidance of senior colleagues.
• Help keep KYB processes operationally efficient as well as compliant, working with the Product team to flag friction points without compromising our regulatory standards.
• Contribute to scaling onboarding and refresh processes as Capi grows into new markets.
• Review flagged transactions and clear sanctions screening alerts in a timely, thorough way, working to defined SLAs.
• Handle follow-ups with customers and internal teams to gather information needed to clear cases.
• Escalate unusual fact patterns or potential financial-crime typologies to senior team members.
• Draft SAR/STR write-ups for senior review, and document case decisions clearly.
• Assist with information gathering for new partner and payment corridor due diligence.
• Help respond to regulatory and partner document requests.
• Support the team in implementing compliance processes as Capi launches into new markets.
• Monitor regulatory developments across Capi’s jurisdictions in North America, Africa and Europe and translate them into practical, timely guidance for the business.
• Advise on new product launches, market entries, and partnerships - giving clear, commercial, risk-proportionate guidance.
• Enforce Capi’s compliance policies and procedures and propose changes to them if you spot any improvements that could be made.

Compliance Associate

• Lead CRA scoping exercises to determine product classification (default, Important Class I/II or Critical) across hardware, software and connected infrastructure
• Conduct gap analysis workshops to assess clients' current security posture against CRA requirements
• Design and implement CRA compliance frameworks within GRC platforms (e.g. Vanta, ServiceNow GRC)
• Advise on Article 14 obligations including the definition of "severe incidents" and "actively exploited vulnerabilities," and establish reporting processes to ENISA and relevant CSIRTs
• Advise on corrective measure notification timeframes and patching obligations in line with regulatory requirements
• Define SBOM (Software Bill of Materials) requirements and support clients in establishing SBOM processes where applicable
• Map CRA controls to existing client frameworks (e.g. ISO 27001, SOC 2, NIS2)
• Produce client-ready proposals, compliance roadmaps and remediation plans
• Deliver ongoing advisory and retainer-based support post-initial engagement

Compliance Consultant

• Identifier les exigences réglementaires et coordonner les moyens de conformité
• Support aux projets d'améliorations, particulièrement pour des solutions techniques durables
• Définir une gouvernance transverse efficace
• Intervenir sur les sujets réglementaires techniques (expertises réglementaires, formation et sensibilisation, communication et support)

Ingénieur Réglementaire REACH/CLP

• Support the development and implementation of the Company’s Healthcare Compliance Program in France
• Collaborate with internal teams to identify required regulatory submissions
• Deliver training to teams on regulatory submission processes
• Provide advice and guidance on healthcare compliance matters

Senior Manager, Healthcare Compliance

• Define and lead the privacy and compliance roadmap for entering new global markets, navigating localized data privacy laws, and managing cross-border data transfer requirements.
• Take end-to-end ownership of completing enterprise security questionnaires and deeply review/negotiate liability caps, notice periods, and security exhibits in Data Processing Agreements (DPAs) and Business Associate Agreements (BAAs).
• Serve as Inato's registered Data Protection Officer (DPO). Own the ongoing governance of GDPR and HIPAA. Manage our Information Security Management System (ISMS) and partner closely with Engineering/IT to maintain our ISO 27001 certification.
• Act as the face of Inato’s compliance, leading live security calls with enterprise sponsors and clinical sites to defend our posture.
• Act as a consultant to Product Managers, reviewing feature roadmaps and data flows to ensure global patient data management remains compliant from the ideation phase.
• Act as the crucial translator who converts complex legal obligations into clear, actionable business requirements and tickets for the engineering team to build.
• Create compliance collateral (whitepapers, FAQs) to proactively answer customer questions and implement vendor risk management processes.

Compliance & Risk Lead

• Manage multiple concurrent projects, delivering high-quality, high-impact work that drives results for Anthesis clients.
• Provide technical leadership and guidance to both clients and colleagues on leading standards and trends, integrating this expertise into projects, proposals, and service evolution.
• Draft comprehensive reports and presentations that distill complex information into key messages to inform strategic decision-making.
• Execute detailed regulatory deep-dives to help clients interpret and action critical requirements, future-proof their operations, and plan for new legislative initiatives.
• Conduct regulatory readiness assessments focusing on existing and upcoming packaging frameworks.
• Perform landscape reviews, including sustainable packaging regulations and competitor commitments.
• Utilize data analysis to identify gaps or inaccuracies, developing well-reasoned approaches and assumptions to bridge them.
• Lead and grow client relationships, acting as the primary point of contact and trusted advisor with a relentless focus on their sustainability success.
• Develop and deliver high-impact proposals in collaboration with client managers, while also generating leads with existing clients through a deep understanding of their business goals.
• Proactively monitor and analyze emerging trends in sustainable packaging, supply chains, and innovative materials, translating these insights into actionable client recommendations.
• Collaborate with global experts to represent Anthesis at industry-leading conferences, fostering strategic connections and partnerships.
• Drive the creation of innovative thought leadership content, transforming complex concepts into accessible and engaging materials for diverse audiences.

Senior Consultant – Regulations Expert, Packaging

• As a GRC (Governance, Risk & Compliance) Consultant, you will support our clients in structuring, optimizing and securing their governance and risk management frameworks in complex regulatory and organizational contexts.
• Lead and execute high-value GRC consulting engagements (audits, maturity assessments, scoping and deployment of GRC frameworks).
• Support business lines, compliance, risk, IT and security functions in achieving regulatory compliance (ISO 27001, NIS2, DORA, GDPR, SOX, etc.).
• Design, deploy and improve governance frameworks, policies, procedures and internal control frameworks.
• Identify, analyze and prioritize operational, IT, cyber and regulatory risks, and propose pragmatic remediation plans.
• Participate in strategic scoping, decision-support and organizational transformation projects.
• Actively contribute to the development of GRC expertise (knowledge management, pre-sales activities, mentoring of more junior consultants).

GRC Consultant

• Serve as the primary regulatory liaison, working with counsel as appropriate, for all supervisory examinations, inquiries, and enforcement matters involving the CFPB, FTC, state attorneys general, state banking regulators, and other applicable agencies, including end‑to‑end exam management and remediation.
• Monitor federal and state regulatory developments, rulemaking, and enforcement trends, translating regulatory change into clear, actionable guidance for the business.
• Oversee state lending licensure, including applications, renewals, and market expansion activities.
• Lead enterprise consumer protection programs, including UDAAP and Fair Lending, overseeing risk assessments, compliance testing, marketing and product reviews, and regulatory analysis.
• Ensure compliance with all applicable federal and state consumer financial laws governing personal lending and related consumer credit products.
• Partner cross‑functionally with Product, Marketing, Pricing, Technology, and Operations to embed compliance into lending product development and ongoing business activities.
• Own the enterprise complaint management program, including CFPB complaint responses, root cause analysis, trend reporting, and the use of complaint insights to reduce regulatory and consumer risk.
• Maintain a robust third‑party compliance oversight program, including due diligence and ongoing monitoring of vendors, service providers, and marketing partners.
• Develop and oversee role‑based compliance training programs and metrics, and champion a strong speak‑up culture across the organization.
• Provide regular compliance reporting to executive leadership and the Board of Directors, including regulatory developments, risk assessments, examination outcomes, and program effectiveness.
• Serve as a key member of enterprise governance and risk committees, including those overseeing risk management, credit policy, and product governance.
• Build, lead, and scale a high‑performing compliance organization, aligning team structure, priorities, and resources with business growth and regulatory expectations.

VP, Chief Compliance Officer

• Support the ISO 27001:2022 certification effort: coordinate evidence collection, draft missing policies, and track the remediation plan across Engineering, HR, and Legal teams
• Contribute to information security risk management: maintain the risk register, track risk treatments, and flag deviations to the Head of Security
• Handle client security questionnaires and due diligence requests independently, building and maintaining a response library over time
• Participate in security operations activities: vulnerability tracking, security reviews, and incident response support
• Contribute to fraud analysis efforts where relevant: investigate suspicious patterns and support detection and response workflows

See all jobs on JobTailor