Lead the compliance and AML framework for our Cyprus regulated entity. You will keep policies and monitoring risk‑based and audit‑ready, operate the AML/CFT programme (including STR/SAR decisions and reporting to the competent authority), and ensure communications and processes are fair, clear and not misleading—while partnering with senior engineers so requirements become secure, testable controls.
Job Responsibilities
- Maintain the compliance programme and plan: compliance risk assessment, annual plan, policies/procedures, and documented monitoring with evidence and clear owners
- Horizon‑scan CySEC circulars and EU rules; log impacts, assign actions and track closure
- Operate the three lines of defence with clear role boundaries; coordinate independent internal audit and follow‑up to closure
- Oversee code of conduct and regulatory compliance policies and procedures by the first line of defence and across the firm, including as regards complaints handling
- Provide concise MI and written reports to the Board/committees; minute decisions and track actions
- Review client‑facing communications for “fair, clear and not misleading”; retain approvals and artefacts
- Advise on product governance (target market, risks, disclosures) and assess significant changes before release
- Maintain complaints, conflicts‑of‑interest and personal‑transactions registers; investigate and resolve to policy timelines
- Oversee outsourcing/third‑party compliance: due diligence standards, registers, SLAs, periodic reviews and exit plans
- Maintain AML/CFT policies and the enterprise‑wide ML/TF risk assessment; set standards for sanctions/PEP/adverse‑media screening
- Oversee CDD/EDD quality, ongoing monitoring and trigger‑event reviews; quality‑assure case files and evidence
- Operate the internal reports process; assess suspicions and file STRs/SARs to MOKAS; maintain liaison and records
- Deliver AML training and maintain CPT logs; keep training, sanctions and SAR/STR registers accurate and current
- Promote a strong compliance and ethics mindset and culture across the firm
- Act as primary liaison with CySEC, MOKAS and other competent authorities on day‑to‑day matters and during inspections, thematic reviews and supervisory interactions, in alignment with other oversight functions and lines of defence
- Prepare and submit the Annual Compliance Report and AMLCO Annual Report to the Board and CySEC; ensure timely filing of all required declarations, notifications and reports to the competent regulator(s)
- Coordinate regulatory reporting and information requests; support inspections and external audit with complete artefacts
- Partner with Product, Engineering, SRE and Security to embed privacy‑by‑design and security‑by‑design; define testable controls, data sources and audit trails
Key frameworks and topics
- CySEC conduct requirements and circulars; EU conduct rules (product governance, marketing communications, best‑execution disclosures)
- Cyprus AML/CFT Law and EU AML directives; sanctions regimes (EU/UN/OFAC/UK)
- CySEC, ESMA (and other EU financial services regulators’) framework over MiFIR/ MiFID II, Market Abuse Regulation, GDPR, IFR/IFD, PSD2/PSD3
- Outsourcing oversight, operational resilience expectations, incident classification/notification basics
- Record‑keeping, MI/reporting standards and evidence management
Qualifications
- CySEC Advanced Certification in good standing (current; CPT maintained and verifiable)
- CySEC Anti‑Money Laundering Certification in good standing (current; CPT maintained and verifiable)
- 5+ years’ senior experience in compliance and AML within regulated financial services, including Board‑level reporting and MLRO decision making
- Demonstrated independence, integrity and sound judgement; able to challenge and support constructively
- Proven ability to translate regulatory requirements into precise, testable operational/technical controls and clear documentation
- Excellent written English and stakeholder communication; disciplined evidence and record‑keeping
- Ability to work on‑site in Limassol; effective partnership with engineers, operations and leadership
- Desirable: LL.M or Master’s degree in a related field or international compliance certifications (e.g. CAMS, ICA, ACAMS)
- Experience directly handling regulatory matters in Cyprus and other EU countries, on a FOS/ cross-border basis
We encourage applications from all qualified candidates and provide reasonable accommodations on request (email [email protected]).
Other skills
- Structured, evidence‑driven thinker with calm, practical judgement
- Crisp risk articulation and prioritisation; drives durable remediation with owners and timelines
- Training mindset; raises standards through clear guidance and repeatable processes