
Regulatory and Compliance Associate
- Johannesburg, Gauteng
- Permanent
- Full-time
- Education & Experience β Bachelorβs in Law, Finance, Business (or similar) plus 8 yearsβ compliance work in fintech, banking, gaming, or broader financial services.
- Regulatory Expertise β In-depth grasp of South African payments regulation (FIC Act, POPIA) and hands-on KYC/AML onboarding, periodic reviews, and escalations.
- Training & Reporting β Proven ability to craft compliance training and produce high-quality regulatory reports (e.g., to the FIC); strong risk-management track record.
- Technical Skillset β Skilled in designing AML/CTF controls and internal rules; comfortable with data analysis and reporting.
- Personal Attributes β Integrity, discretion, ownership mindset, and clear communication with clients, merchants, and cross-functional teams.
- Broader Reg-Framework β Exposure to FAIS, B-BBEE, Card Scheme rules, and SARB TPPP/System-Operator/Screen Scraping directives.
- Data Analytics Fluency β Comfort with analytics tools/programming for sharper risk insights.
- Professional Credentials β CAMS or similar AML certification (or willingness to earn).
- Fintech Product Insight β Working knowledge of payment tech, APIs, and related fintech offerings to spot compliance gaps early.
- Merchant Onboarding & Screening β Own the full onboarding workflow: gather documentation, run CDD/EDD checks, maintain screening systems, and escalate high-risk cases.
- Regulatory Compliance β Monitor regulatory changes, refresh policies and training, and ensure company practices stay aligned with law.
- Risk Management β Assign merchant risk ratings, update risk registers, run gap analyses, and report breaches to Compliance leadership.
- Regulatory & Internal Reporting β File mandatory reports (e.g., FIC, SARB) and deliver KYC insights to internal stakeholders.
- Stakeholder Liaison β Serve as the primary contact for KYC queries from merchants and internal teams.
- Tech-Driven Controls β Partner with Product/Tech to integrate compliance tools and build SQL-based AML/CTF monitoring rules.
- Data Protection β Conduct vendor impact assessments and enforce client/vendor adherence to data-privacy obligations.
- Process & Policy Governance β Document compliance procedures and audit ongoing adherence to internal policies and external requirements.