High-Level Overview

Benevity is seeking a Governance, Risk & Compliance (GRC) Analyst to support and grow our security governance, risk, privacy, and regulatory program. In this role, you will contribute to the execution of Benevity’s GRC program by supporting compliance activities, assisting with risk assessments, contributing to third-party risk management, responding to client due diligence requests, and helping maintain the policies and controls that strengthen trust with our clients, partners, and stakeholders.

Working alongside experienced GRC professionals, you will build your skills in information security, compliance, and risk management while helping ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements. This is a hands-on role with significant learning and growth opportunities across governance, risk, audit, and privacy domains.

What you'll do:

Governance & Policy

• Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
• Support policy exception management, attestation processes, and identify opportunities for process improvement.

Risk Management

• Assist with enterprise risk assessments, including vendor and process-level reviews.
• Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning.
• Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.

Compliance & Audit

• Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
• Assist with evidence gathering, control validation, and auditor engagement.
• Leverage GRC platforms to support audit, privacy, and compliance workflows.

Client Support & Sales Enablement

• Support the sales process by responding to client inquiries related to security, privacy, and compliance.
• Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
• Partner with sales and client success teams to provide timely, accurate responses that build client trust.

Privacy and Regulatory

• Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
• Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations.
• Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
• Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory & Awareness

• Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives.
• Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership.
• Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations.
• Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.

What you'll bring:

• 2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment. (For a Junior GRC Analyst, we welcome candidates with 0–2 years of experience, including relevant internship, co-op, or academic project experience.)
• Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA.
• Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to support policy, risk, audit, privacy, and vendor risk workflows.
• Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering.
• Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
• Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders.
• Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving.
• An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus.
• Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.

High-Level Overview

Benevity is seeking a Senior Governance, Risk & Compliance (GRC) Analyst to elevate our security governance, risk, privacy, and regulatory posture. In this senior role, you will drive the execution, innovation, and continuous improvement of Benevity’s GRC program. You will lead compliance activities, conduct risk assessments, contribute to third-party risk management, respond to client due diligence requests, support FINTRAC/AML obligations, and influence policies and controls that strengthen trust with our clients, partners, and stakeholders.

As a trusted advisor across teams, you will help ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements while fostering a culture of security, compliance, and accountability. You’ll also mentor junior members of the team, helping to grow Benevity’s next generation of security and compliance professionals, with a focus on developing proactive and innovative approaches to GRC challenges.

What you'll do:

Governance & Policy

• Contribute to the development, maintenance, and rollout of security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
• Support policy approval, exception management, and attestation processes, actively seeking opportunities for process improvement and automation
  
  

Risk Management

• Lead and execute enterprise-wide risk assessments, including vendor and process-level reviews.
• Maintain and improve the risk register, track remediation activities, and support risk treatment planning.
• Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
  
  

Compliance & Audit

• Lead audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
• Coordinate evidence gathering, control validation, and auditor engagement.
• Leverage GRC platforms to streamline audit, privacy, and compliance workflows.

Client Support & Sales Enablement

• Support the sales process by responding to client inquiries related to security, privacy, and compliance.
• Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
• Partner with sales and client success teams to provide timely, accurate responses that build client trust.
  
  

Privacy and Regulatory

• Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
• Collaborate with legal and data governance teams to ensure compliance with data protection and financial crime regulations.
• Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
• Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory, Awareness & Mentorship

• Partner with business and technical teams to embed risk and compliance into projects and initiatives.
• Deliver reporting and insights (dashboards, risk metrics, executive summaries) for leadership.
• Lead Benevity’s Security Awareness & Training program, including the design, delivery, and continuous improvement of awareness campaigns, training modules, and phishing simulations.
• Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.
• Mentor and coach junior team members, providing guidance, feedback, and knowledge sharing to support their growth and development.

What you'll bring:

• 5+ years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or high-growth environment.
• Strong knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and CCPA/CPRA.
• Hands-on experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to manage policies, risks, audits, privacy, and vendor risk workflows.
• Proven success in conducting risk assessments, managing vendor risk/TPRM, maintaining risk registers, and driving remediation.
• Experience supporting client due diligence processes (security questionnaires, RFPs, TPRM).
• Ability to clearly communicate risk, security, privacy, and regulatory concepts to both technical and non-technical stakeholders.
• Strong organizational and project management skills with experience leading cross-functional initiatives.
• A demonstrated interest and track record in leveraging automation and AI to streamline GRC processes and enhance efficiency.
• Certifications such as CISM, CRISC, CISSP, CISA, or CIPM/CIPP are highly valued.

High Level Role Overview

Benevity is looking for a Principal Information Security Analyst to join our Security Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management.

This role is ideal for someone with deep hands-on experience in security operations who is also energized by the opportunity to work alongside AI. We are actively integrating AI tools into our SecOps practice to accelerate triage, investigation, detection engineering, and analyst productivity, and this role will play a meaningful part in shaping how we do that. You should be comfortable navigating AI tools, building your own skills with them, identifying practical use cases, and partnering with the team to put them into production.

You will serve as both a senior escalation point and a coach, helping elevate the team's ability to respond to threats in a cloud-native environment while modernizing how the work gets done.

What you'll do:

• Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, SIEM, and cloud-native platforms
• Lead and coordinate security incident response across the full lifecycle, from detection and containment through eradication, recovery, and lessons learned, serving as incident commander for significant events
• Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
• Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
• Identify, evaluate, and operationalize AI-assisted approaches to SecOps work, including AI-augmented triage, investigation, summarization, detection engineering, and reporting
• Build your own fluency with AI tooling and help the broader team develop the same skills, sharing patterns that work and being honest about ones that don't
• Apply a healthy degree of skepticism to AI outputs, validating findings and helping the team understand where AI assists the work and where human judgment still owns the decision
• Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
• Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
• Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
• Partner with our Senior Fraud Analyst on cross-functional investigations where fraud and cyber threats intersect, contributing SecOps expertise without owning the fraud function day-to-day
• Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
• Support the development, tracking, and reporting of KPIs and metrics to measure and improve team performance
• Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
• Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

What you'll bring:

• 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
• Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, SIEM, and cloud-native logging platforms
• Familiarity with MDR service models and hands-on experience validating escalated alerts
• Hands-on experience leading security incident response, including acting as incident commander, coordinating cross-functional responders, managing communications, and producing post-incident artifacts
• Practical experience using AI tools in a security or technical context, with a clear point of view on where they add value, where they fall short, and how to get them production-ready
• Curiosity and willingness to keep building AI skills as the tooling evolves, and an interest in helping teammates do the same
• Awareness of the security considerations that come with using AI tools in a SecOps environment (data handling, prompt hygiene, output validation)
• Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
• Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
• Experience developing or refining operational playbooks, triage guides, and incident workflows
• Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
• Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
• A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
• Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
• Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
• A passion for teaching and mentoring others, helping team members grow their skills and confidence
• Preferred certifications include GCIH, GCFA, OSCP, or CISSP

Position Overview:

The Security Operations team is an agile, exciting, hands-on security operations team focused on protecting Diligent personnel, sites, and assets worldwide. We like to get our hands dirty working closely together and cross-functionally with the greater Security Department. Our goal is to maintain the confidentiality and integrity of customer, employee, and business information in compliance with organization, industry, and regional policies and standards.

Security Operations Analyst II is a part of high impact security operations team focused on protecting Diligent personnel, sites and assets worldwide. As part of the Security team, you will help to with the strategy, development, and deployment of a comprehensive physical and logical security operation programs. The position is responsible for oversight and operations on security event monitoring, incident response, user behavior analysis, threat hunting, in addition to maintaining the confidentiality and integrity of customer, employee, and business information in compliance with organization, industry, and regional policies and standards.

Key Responsibilities

• Actively monitor and respond to security alerts from tools such as SIEM, EDR, CNAP, etc.
• Analyze security alerts and document tuning opportunities to reduce false positives.
• Support change management responsibilities to reduce security risk/impact to corporate systems and networks.
• Contribute to security tooling policies and supporting process enhancement as needed to mature defense controls and facilitate exceptions for BAU operations.
• Initiate and coordinate incident response activities. Maintain documentation and reports for compliance purposes. 
• Configure and run network and endpoint vulnerability scans. Closely collaborate with technical teams to mitigate risks through patching and configuration changes.
• Assess and evaluate the suitability of existing and new security tools to bolster the organization’s security posture

Required Experience/Skills 

• 3-5 years of information technology experience or the equivalent combination of education, technical training, or work experience.
• Working experience in information security, especially on a Computer/Security Incident Response Team (C/SIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)
• Working experience with regulatory compliance and information security management frameworks.
• Strong decision-making capabilities.
• Technical knowledge of anti-virus solutions, virus outbreak management, and the ability to differentiate virus activity from directed attack patterns.

Preferred Experience/Skills

• Must have strong interpersonal skills with the ability to interact with customer’s technical, non-technical easily and effectively, support, and business staff at all levels.

Sales at Brex

The Sales team is the driving factor behind revenue for Brex and every member of our team directly affects our bottom line. We focus on generating new opportunities, acquiring new customers, and building even stronger relationships with our current customers. Our winning culture recognizes big team wins and celebrates individual accomplishments. We ensure that top performers are recognized and have built a competitive environment to motivate and unify the team.

What you’ll do

Brex is looking for an individual to join the Revenue Operations Team, which is responsible for driving revenue growth in close partnership with revenue leaders. We help revenue teams drive consistent growth through regular reporting, analytical insights, process improvements, systems updates, strategic initiatives, cross-functional alignment, incentive design, and coverage model design. You should have an analytical mindset with a curiosity to get to the right solution to every problem. The ability to translate data into insights is critical as you will work closely with the Revenue Operations business partners, enablement, finance, systems, data, and revenue teams.

Responsibilities

• Create and update dashboards, reports, and presentations to give revenue leaders and operations partners the data they need to run their businesses
• Proactively identify opportunities to provide additional reporting or analytical clarity to better understand business performance
• Monitor pipeline health and funnel conversion metrics, surfacing trends and anomalies to sales and revenue operations leadership
• Run deep dive analyses to identify challenges and opportunities within the business
• Partner with Revenue Operations business partners and revenue leaders to support the design, implementation, documentation, and success tracking of operational solutions
• Assist with building complex capacity and funnel models for annual planning and scenario evaluation
• Respond to ad hoc data and reporting requests from sales leadership and cross-functional partners

Requirements

• 1-3+ years of experience in revenue operations, sales strategy, business operations, sales finance, or similar; preferably at a Fintech or SaaS company
• Analytical mindset with a desire for high data precision and accuracy
• Excellent written and verbal communication skills
• Comfortable working cross-functionally and managing requests from multiple stakeholders simultaneously
• Self-motivated and able to run with projects autonomously with moderate oversight
• Strong spreadsheet and modeling skills
• Basic to moderate SQL skills with experience in data visualization tools (Looker or Hex experience a plus)
• Comfortable working within CRM data models to extract, report on and interpret data (Salesforce preferred)
• Meticulous attention to detail, including in documentation

Bonus Points

• Exposure to sales compensation methodologies and tracking
• Experience supporting revenue annual planning cycles
• Knowledge of revenue recognition principles and finance systems
• Familiarity with marketing platforms such as Qualified or Leandata, sales engagement platforms like Outreach or Nooks, and sales management platforms such as Atrium or Gong. 
• Experience leveraging AI for analytics or process optimization

Compensation

a

Here’s a summary of the role 

In this role, you will turn complex, multi-product capabilities into clear, persona-led stories that show senior decision-makers exactly how Diligent helps them manage governance, risk and compliance with AI-driven insight. You’ll own solution-level messaging and narratives for key personas, then translate them into campaigns, sales plays and launch programs that drive pipeline, win rates and cross-sell across our portfolio. You’ll work directly with Product, Product Marketing, Sales and Content to make Diligent the AI company in GRC and a growth engine for your business unit. 

Here’s a breakdown of what you’ll do (not all of it, just the important stuff) 

• Develop persona-specific, solution-level messaging grounded in market trends, buyer challenges, our products and the business outcomes your personas care about most. 

• Serve as the central point of contact for your assigned business unit, aligning with Product Management and Product Marketing from roadmap through to go-to-market execution. 

• Partner with Content and Demand Generation to define persona-led campaigns, including campaign briefs, core narratives and landing-page messaging that drive engagement and conversion. 

• Lead and support product and solution launches by applying proven launch frameworks and ensuring clear, differentiated solution-level positioning. 

• Activate analyst research and market insights into compelling stories, content and sales enablement that improve confidence, consistency and win rates. 

• Collaborate closely with Sales and Enablement to deliver persona-specific narratives, use-case stories and repeatable sales plays that help teams open, progress and close opportunities – including cross-sell into our existing customer base. 

These are the essentials you’ll need to get an interview 

• 7+ years of experience in enterprise B2B SaaS marketing, with a strong background in Product Marketing and/or Solutions Marketing. 

• Proven track record developing persona-based messaging and positioning, ideally at both product and solution / portfolio levels. 

• Experience launching products, programs or major campaigns end to end, collaborating across Product, Sales and Marketing. 

• Demonstrated ability to translate complex technology into clear, outcome-oriented stories for senior personas (e.g., legal, compliance, audit, risk, CIO). 

• Strong storytelling and communication skills – you’re comfortable building narratives, slides and briefs, and presenting them to senior stakeholders and cross-functional partners. 

• High comfort level working in a fast-moving, evolving environment, with the confidence to prioritize, push back constructively and define process where needed. 

• Experience messaging about AI and using AI tools in your work (for research, content, analysis or experimentation). 

It would be great if you had these too, but we’ll support you if you don’t 

• Experience in governance, risk and compliance (GRC) or adjacent risk/compliance markets. 

• Background marketing to Boards of Directors, General Counsel or other senior legal and risk leaders. 

• Familiarity with product marketing frameworks (e.g., SiriusDecisions, Pragmatic / Practical Marketing) and analyst relations or working with industry reports. 

• Experience building integrated campaigns in partnership with Demand Generation, Field Marketing and Sales. 

• Comfort presenting to customers, at events and in virtual / in-person sessions, including tailoring your narrative for different audiences. 

Here’s a summary of the role 

In this role, you will turn complex, multi-product capabilities into clear, persona-led stories that show senior decision-makers exactly how Diligent helps them manage governance, risk and compliance with AI-driven insight. You’ll own solution-level messaging and narratives for key personas, then translate them into campaigns, sales plays and launch programs that drive pipeline, win rates and cross-sell across our portfolio. You’ll work directly with Product, Product Marketing, Sales and Content to make Diligent the AI company in GRC and a growth engine for your business unit. 

Here’s a breakdown of what you’ll do (not all of it, just the important stuff) 

• Develop persona-specific, solution-level messaging grounded in market trends, buyer challenges, our products and the business outcomes your personas care about most. 

• Serve as the central point of contact for your assigned business unit, aligning with Product Management and Product Marketing from roadmap through to go-to-market execution. 

• Partner with Content and Demand Generation to define persona-led campaigns, including campaign briefs, core narratives and landing-page messaging that drive engagement and conversion. 

• Lead and support product and solution launches by applying proven launch frameworks and ensuring clear, differentiated solution-level positioning. 

• Activate analyst research and market insights into compelling stories, content and sales enablement that improve confidence, consistency and win rates. 

• Collaborate closely with Sales and Enablement to deliver persona-specific narratives, use-case stories and repeatable sales plays that help teams open, progress and close opportunities – including cross-sell into our existing customer base. 

These are the essentials you’ll need to get an interview 

• 7+ years of experience in enterprise B2B SaaS marketing, with a strong background in Product Marketing and/or Solutions Marketing. 

• Proven track record developing persona-based messaging and positioning, ideally at both product and solution / portfolio levels. 

• Experience launching products, programs or major campaigns end to end, collaborating across Product, Sales and Marketing. 

• Demonstrated ability to translate complex technology into clear, outcome-oriented stories for senior personas (e.g., legal, compliance, audit, risk, CIO). 

• Strong storytelling and communication skills – you’re comfortable building narratives, slides and briefs, and presenting them to senior stakeholders and cross-functional partners. 

• High comfort level working in a fast-moving, evolving environment, with the confidence to prioritize, push back constructively and define process where needed. 

• Experience messaging about AI and using AI tools in your work (for research, content, analysis or experimentation). 

It would be great if you had these too, but we’ll support you if you don’t 

• Experience in governance, risk and compliance (GRC) or adjacent risk/compliance markets. 

• Background marketing to Boards of Directors, General Counsel or other senior legal and risk leaders. 

• Familiarity with product marketing frameworks (e.g., SiriusDecisions, Pragmatic / Practical Marketing) and analyst relations or working with industry reports. 

• Experience building integrated campaigns in partnership with Demand Generation, Field Marketing and Sales. 

• Comfort presenting to customers, at events and in virtual / in-person sessions, including tailoring your narrative for different audiences. 

Associate, Research & Delivery 

Role Summary:

Associates will learn to utilize a wide range of research tools, including Exiger’s industry-leading AI-software, DDIQ, to gather risk and compliance intelligence on individual and company research subjects. Associates will then analyze the data and develop a narrative report, receiving feedback and ongoing training from colleagues with subject matter expertise.

This is a full-time, fully remotely-assigned opportunity.

Please submit your resume to be considered for our Associate, Research & Delivery role!

What You'll Do:

• Create and determine contents of reports using a combination of web-based compliance tools, open-source resources, client-provided information, and Exiger’s case management system.
• Write clear, concise, and thoroughly researched reports for clients using a variety of public records, databases, and other web-based sources and tools.
• Utilize judgement and best practices to complete research, writing, and editing of cases of different products, scopes, jurisdictions, and complexity.
• Determine and escalate identified risk factors to case manager.
• Successfully manage case lifecycle, personal workload, and pipeline.
• Communicate effectively with others both verbally and in writing.
• Collaborate and work within a multi-national team to achieve desired outcomes.

What You Need:

• Strong analytical and research skills. 
• Solid communication (written and verbal) and organizational skills.
• Ability to deliver high quality work in a fast-paced, high volume environment with strict deadlines.
• Team player with high level of initiative and a proactive approach to work.
• Ability to work effectively in a team as well as independently; takes ownership of tasks and follows up to ensure that they are successfully brought to completion.
• Ability to utilize technology to solve problems.

Professional Experience Required

• 1-2 years of professional experience.
• Proficient written and verbal English/Portuguese language skills.
• Strong commitment to continuous improvement and learning, with an openness to receiving feedback and training.
• Keen interest in the compliance, risk management, and financial services sectors as well as regulations, supply chain, and current events. 

Why You’ll Love Working at Exiger:

• Discretionary Time Off for all employees, with no maximum limits on time off
• Industry leading health, vision, and dental benefits
• Competitive compensation package
• 16 weeks of fully paid parental leave
• Flexible, hybrid approach to working from home and in the office where applicable
• Focus on wellness and employee health through stipends and dedicated wellness programming
• Purposeful career development programs with reimbursement provided for educational certifications

#LI-Hybrid

This posting is for a newly created role; artificial intelligence tools may be used to support candidate screening and evaluation; the expected base salary range for this position is 45,000 – 60,000 CAD annually, depending on qualifications.

Location: Toronto, Vancouver

Work Environment: Hybrid 

Associate, Research & Delivery 

Associates will learn to utilize a wide range of research tools, including Exiger’s industry-leading AI-software, DDIQ, to gather risk and compliance intelligence on individual and company research subjects. Associates will then analyze the data and develop a narrative report, receiving feedback and ongoing training from colleagues with subject matter expertise.

What You'll Do:

• Create and determine contents of reports using a combination of web-based compliance tools, open-source resources, client-provided information, and Exiger’s case management system.
• Write clear, concise, and thoroughly researched reports for clients using a variety of public records, databases, and other web-based sources and tools.
• Utilize judgement and best practices to complete research, writing, and editing of cases of different products, scopes, jurisdictions, and complexity.
• Determine and escalate identified risk factors to case manager.
• Successfully manage case lifecycle, personal workload, and pipeline.
• Communicate effectively with others both verbally and in writing.
• Collaborate and work within a multi-national team to achieve desired outcomes.

What You'll Need:

• Strong analytical and research skills. 
• Solid communication (written and verbal) and organizational skills.
• Ability to deliver high quality work in a fast-paced, high volume environment with strict deadlines.
• Team player with high level of initiative and a proactive approach to work.
• Ability to work effectively in a team as well as independently; takes ownership of tasks and follows up to ensure that they are successfully brought to completion.
• Ability to utilize technology to solve problems.

Professional Experience Required:

• 1-2 years of professional experience.
• Proficient written and verbal English/Spanish language skills are preferred
• Strong commitment to continuous improvement and learning, with an openness to receiving feedback and training.
• Keen interest in the compliance, risk management, and financial services sectors as well as regulations, supply chain, and current events. 

#LI-Hybrid

As Tipalti continues to dominate the global finance automation space, we are seeking a visionary Director of KYC and Compliance Onboarding. This is a pivotal leadership role designed to transform our compliance operations from a defensive function into a strategic engine for global growth.

Reporting to the VP of Customer Onboarding, you will lead the evolution of our onboarding architecture to support our next phase of hyper-growth. You are a customer-centric leader who believes that rigorous compliance and a frictionless user experience are not mutually exclusive. Your mission is to build a "best-in-class" KYC process that is recognized by our customers and partners as the most seamless in the fintech industry.

Responsibilities

• Strategic Vision & Roadmap: Own the vision for Tipalti’s KYC/KYB future. You will design a "painless" onboarding journey that eliminates traditional compliance bottlenecks while maintaining ironclad regulatory integrity.
• Operational Standardization: Drive absolute consistency across our global team of KYC analysts. You will design and enforce a Global Standard Operating Procedure (SOP) that ensures uniform decision-making, quality, and speed, regardless of the analyst’s location.
• Customer-Centric Compliance: Champion the customer at every stage of the compliance lifecycle. You will constantly iterate on the "Customer Journey" to reduce friction, simplify documentation requests, and improve transparency.
• Cross-Departmental Collaboration: Act as a high-impact partner to Sales, Onboarding Management, Product, and Legal. You will bridge the gap between commercial urgency and regulatory requirements, ensuring all teams are aligned on a unified "Go-Live" strategy.
• Tech Strategy & Execution: Lead the evaluation, selection, and high-velocity implementation of advanced RegTech tools (Id verification, Registries, Data sources, risk-scoring engine etc). You will move beyond "tools as a service" to "tools as a solution," ensuring deep integration into our existing ecosystems.
• AI & Automation Leadership: Spearhead the transition to an "Always-On" monitoring environment. Use AI to automate identity verification and business entity checks, significantly reducing "Time-to-Green" for our customers.
• Quality Assurance Framework: Implement a robust QA and feedback loop to identify variances in analyst performance and drive continuous improvement through training and process refinement.
• Performance Analytics: Establish executive-level KPIs focusing on onboarding velocity, customer satisfaction (CSAT) during compliance, and automated pass rates.

Requirements

• Customer-First Mindset: A proven track record of designing compliance processes with the end-user in mind. You don't just "enforce" policy; you solve for the customer experience.
• Process Engineering Mastery: Exceptional ability to take complex, fragmented workflows and turn them into scalable, standardized global processes.
• Visionary Leadership: The ability to articulate a clear "North Star" for what modern, automated KYC should look like in a multi-billion dollar fintech.
• Exceptional Execution: 12+ years in Compliance or FinCrime, with a demonstrable history of successfully deploying large-scale technical solutions and third-party integrations (like Trulioo, Alloy, etc.).
• Technology & Innovation: Demonstrated experience implementing automation tools to enhance and drive customer experience. Must possess a Technology-first/AI-first mindset when approaching compliance and KYC workflows.
• Cross-Functional Influence: The ability to navigate complex internal organizations, gaining buy-in from Sales and Operations to drive compliance initiatives forward.
• Global Regulatory Mastery: Deep knowledge of international AML/KYC standards (US, UK, EU, etc.).
• Certifications: CAMS or CFE certification is desired.

Why Join Us?

• Lead the Industry: You will be at the forefront of the "Resilience Era" of compliance, building systems that stop mistakes before they happen.
• Scale Fearlessly: We are a late-stage, well-funded powerhouse where your work directly impacts our ability to onboard enterprise-grade clients.
• Impact: At Tipalti, compliance is the department that makes "yes" possible for our customers globally.

The anticipated base pay rate for this position is 161,500-231,000 USD annually. 

Bonus: Target bonus is 15% of base salary. Bonus entitlement is based on a combination of organizational results, individual performance, and relative contribution, as assessed by Tipalti in its sole discretion, to be formalized and communicated to you following your start date.

Expected Total Compensation: 185,725 - 265,650 USD annually (includes base salary plus target bonus).

The compensation information, above, reflects our reasonable expectation for this role based on several factors, including current market conditions. Final compensation will be determined through individual assessment of experience, skills, qualifications, and other job-relevant factors. Actual offers may vary within or, only in exceptional circumstances, outside the stated range based on the candidate's unique qualifications and our comprehensive evaluation process. We are committed to equitable compensation practices in compliance with applicable employment laws.

As Tipalti continues to dominate the global finance automation space, we are seeking a visionary Director of KYC and Compliance Onboarding. This is a pivotal leadership role designed to transform our compliance operations from a defensive function into a strategic engine for global growth.

Reporting to the VP of Customer Onboarding, you will lead the evolution of our onboarding architecture to support our next phase of hyper-growth. You are a customer-centric leader who believes that rigorous compliance and a frictionless user experience are not mutually exclusive. Your mission is to build a "best-in-class" KYC process that is recognized by our customers and partners as the most seamless in the fintech industry.

Responsibilities

• Strategic Vision & Roadmap: Own the vision for Tipalti’s KYC/KYB future. You will design a "painless" onboarding journey that eliminates traditional compliance bottlenecks while maintaining ironclad regulatory integrity.
• Operational Standardization: Drive absolute consistency across our global team of KYC analysts. You will design and enforce a Global Standard Operating Procedure (SOP) that ensures uniform decision-making, quality, and speed, regardless of the analyst’s location.
• Customer-Centric Compliance: Champion the customer at every stage of the compliance lifecycle. You will constantly iterate on the "Customer Journey" to reduce friction, simplify documentation requests, and improve transparency.
• Cross-Departmental Collaboration: Act as a high-impact partner to Sales, Onboarding Management, Product, and Legal. You will bridge the gap between commercial urgency and regulatory requirements, ensuring all teams are aligned on a unified "Go-Live" strategy.
• Tech Strategy & Execution: Lead the evaluation, selection, and high-velocity implementation of advanced RegTech tools (Id verification, Registries, Data sources, risk-scoring engine etc). You will move beyond "tools as a service" to "tools as a solution," ensuring deep integration into our existing ecosystems.
• AI & Automation Leadership: Spearhead the transition to an "Always-On" monitoring environment. Use AI to automate identity verification and business entity checks, significantly reducing "Time-to-Green" for our customers.
• Quality Assurance Framework: Implement a robust QA and feedback loop to identify variances in analyst performance and drive continuous improvement through training and process refinement.
• Performance Analytics: Establish executive-level KPIs focusing on onboarding velocity, customer satisfaction (CSAT) during compliance, and automated pass rates.

Requirements

• Customer-First Mindset: A proven track record of designing compliance processes with the end-user in mind. You don't just "enforce" policy; you solve for the customer experience.
• Process Engineering Mastery: Exceptional ability to take complex, fragmented workflows and turn them into scalable, standardized global processes.
• Visionary Leadership: The ability to articulate a clear "North Star" for what modern, automated KYC should look like in a multi-billion dollar fintech.
• Exceptional Execution: 12+ years in Compliance or FinCrime, with a demonstrable history of successfully deploying large-scale technical solutions and third-party integrations (like Trulioo, Alloy, etc.).
• Technology & Innovation: Demonstrated experience implementing automation tools to enhance and drive customer experience. Must possess a Technology-first/AI-first mindset when approaching compliance and KYC workflows.
• Cross-Functional Influence: The ability to navigate complex internal organizations, gaining buy-in from Sales and Operations to drive compliance initiatives forward.
• Global Regulatory Mastery: Deep knowledge of international AML/KYC standards (US, UK, EU, etc.).
• Certifications: CAMS or CFE certification is desired.

Why Join Us?

• Lead the Industry: You will be at the forefront of the "Resilience Era" of compliance, building systems that stop mistakes before they happen.
• Scale Fearlessly: We are a late-stage, well-funded powerhouse where your work directly impacts our ability to onboard enterprise-grade clients.
• Impact: At Tipalti, compliance is the department that makes "yes" possible for our customers globally.

Base Salary Range: $138,600 - $198,000 CAD annually.

Bonus: Target bonus is 15% of base salary. Bonus entitlement is based on a combination of organizational results, individual performance, and relative contribution, as assessed by Tipalti in its sole discretion, to be formalized and communicated to you following your start date.

Expected Total Compensation: $156,400 - $227,700 CAD annually (includes base salary plus target bonus).

The compensation information, above, reflects our reasonable expectation for this role based on several factors, including current market conditions. Final compensation will be determined through individual assessment of experience, skills, qualifications, and other job-relevant factors. Actual offers may vary within or, only in exceptional circumstances, outside the stated range based on the candidate's unique qualifications and our comprehensive evaluation process. We are committed to equitable compensation practices in compliance with applicable employment laws

As Tipalti continues to dominate the global finance automation space, we are seeking a visionary Director of KYC and Compliance Onboarding. This is a pivotal leadership role designed to transform our compliance operations from a defensive function into a strategic engine for global growth.

Reporting to the VP of Customer Onboarding, you will lead the evolution of our onboarding architecture to support our next phase of hyper-growth. You are a customer-centric leader who believes that rigorous compliance and a frictionless user experience are not mutually exclusive. Your mission is to build a "best-in-class" KYC process that is recognized by our customers and partners as the most seamless in the fintech industry.

Responsibilities

• Strategic Vision & Roadmap: Own the vision for Tipalti’s KYC/KYB future. You will design a "painless" onboarding journey that eliminates traditional compliance bottlenecks while maintaining ironclad regulatory integrity.
• Operational Standardization: Drive absolute consistency across our global team of KYC analysts. You will design and enforce a Global Standard Operating Procedure (SOP) that ensures uniform decision-making, quality, and speed, regardless of the analyst’s location.
• Customer-Centric Compliance: Champion the customer at every stage of the compliance lifecycle. You will constantly iterate on the "Customer Journey" to reduce friction, simplify documentation requests, and improve transparency.
• Cross-Departmental Collaboration: Act as a high-impact partner to Sales, Onboarding Management, Product, and Legal. You will bridge the gap between commercial urgency and regulatory requirements, ensuring all teams are aligned on a unified "Go-Live" strategy.
• Tech Strategy & Execution: Lead the evaluation, selection, and high-velocity implementation of advanced RegTech tools (Id verification, Registries, Data sources, risk-scoring engine etc). You will move beyond "tools as a service" to "tools as a solution," ensuring deep integration into our existing ecosystems.
• AI & Automation Leadership: Spearhead the transition to an "Always-On" monitoring environment. Use AI to automate identity verification and business entity checks, significantly reducing "Time-to-Green" for our customers.
• Quality Assurance Framework: Implement a robust QA and feedback loop to identify variances in analyst performance and drive continuous improvement through training and process refinement.
• Performance Analytics: Establish executive-level KPIs focusing on onboarding velocity, customer satisfaction (CSAT) during compliance, and automated pass rates.

Requirements

• Customer-First Mindset: A proven track record of designing compliance processes with the end-user in mind. You don't just "enforce" policy; you solve for the customer experience.
• Process Engineering Mastery: Exceptional ability to take complex, fragmented workflows and turn them into scalable, standardized global processes.
• Visionary Leadership: The ability to articulate a clear "North Star" for what modern, automated KYC should look like in a multi-billion dollar fintech.
• Exceptional Execution: 12+ years in Compliance or FinCrime, with a demonstrable history of successfully deploying large-scale technical solutions and third-party integrations (like Trulioo, Alloy, etc.).
• Technology & Innovation: Demonstrated experience implementing automation tools to enhance and drive customer experience. Must possess a Technology-first/AI-first mindset when approaching compliance and KYC workflows.
• Cross-Functional Influence: The ability to navigate complex internal organizations, gaining buy-in from Sales and Operations to drive compliance initiatives forward.
• Global Regulatory Mastery: Deep knowledge of international AML/KYC standards (US, UK, EU, etc.).
• Certifications: CAMS or CFE certification is desired.

Why Join Us?

• Lead the Industry: You will be at the forefront of the "Resilience Era" of compliance, building systems that stop mistakes before they happen.
• Scale Fearlessly: We are a late-stage, well-funded powerhouse where your work directly impacts our ability to onboard enterprise-grade clients.
• Impact: At Tipalti, compliance is the department that makes "yes" possible for our customers globally.

Base Salary Range: $138,600 - $198,000 CAD annually.

Bonus: Target bonus is 15% of base salary. Bonus entitlement is based on a combination of organizational results, individual performance, and relative contribution, as assessed by Tipalti in its sole discretion, to be formalized and communicated to you following your start date.

Expected Total Compensation: $156,400 - $227,700 CAD annually (includes base salary plus target bonus).

The compensation information, above, reflects our reasonable expectation for this role based on several factors, including current market conditions. Final compensation will be determined through individual assessment of experience, skills, qualifications, and other job-relevant factors. Actual offers may vary within or, only in exceptional circumstances, outside the stated range based on the candidate's unique qualifications and our comprehensive evaluation process. We are committed to equitable compensation practices in compliance with applicable employment laws

As Tipalti continues to dominate the global finance automation space, we are seeking a visionary Director of KYC and Compliance Onboarding. This is a pivotal leadership role designed to transform our compliance operations from a defensive function into a strategic engine for global growth.

Reporting to the VP of Customer Onboarding, you will lead the evolution of our onboarding architecture to support our next phase of hyper-growth. You are a customer-centric leader who believes that rigorous compliance and a frictionless user experience are not mutually exclusive. Your mission is to build a "best-in-class" KYC process that is recognized by our customers and partners as the most seamless in the fintech industry.

Responsibilities

• Strategic Vision & Roadmap: Own the vision for Tipalti’s KYC/KYB future. You will design a "painless" onboarding journey that eliminates traditional compliance bottlenecks while maintaining ironclad regulatory integrity.
• Operational Standardization: Drive absolute consistency across our global team of KYC analysts. You will design and enforce a Global Standard Operating Procedure (SOP) that ensures uniform decision-making, quality, and speed, regardless of the analyst’s location.
• Customer-Centric Compliance: Champion the customer at every stage of the compliance lifecycle. You will constantly iterate on the "Customer Journey" to reduce friction, simplify documentation requests, and improve transparency.
• Cross-Departmental Collaboration: Act as a high-impact partner to Sales, Onboarding Management, Product, and Legal. You will bridge the gap between commercial urgency and regulatory requirements, ensuring all teams are aligned on a unified "Go-Live" strategy.
• Tech Strategy & Execution: Lead the evaluation, selection, and high-velocity implementation of advanced RegTech tools (Id verification, Registries, Data sources, risk-scoring engine etc). You will move beyond "tools as a service" to "tools as a solution," ensuring deep integration into our existing ecosystems.
• AI & Automation Leadership: Spearhead the transition to an "Always-On" monitoring environment. Use AI to automate identity verification and business entity checks, significantly reducing "Time-to-Green" for our customers.
• Quality Assurance Framework: Implement a robust QA and feedback loop to identify variances in analyst performance and drive continuous improvement through training and process refinement.
• Performance Analytics: Establish executive-level KPIs focusing on onboarding velocity, customer satisfaction (CSAT) during compliance, and automated pass rates.

Requirements

• Customer-First Mindset: A proven track record of designing compliance processes with the end-user in mind. You don't just "enforce" policy; you solve for the customer experience.
• Process Engineering Mastery: Exceptional ability to take complex, fragmented workflows and turn them into scalable, standardized global processes.
• Visionary Leadership: The ability to articulate a clear "North Star" for what modern, automated KYC should look like in a multi-billion dollar fintech.
• Exceptional Execution: 12+ years in Compliance or FinCrime, with a demonstrable history of successfully deploying large-scale technical solutions and third-party integrations (like Trulioo, Alloy, etc.).
• Technology & Innovation: Demonstrated experience implementing automation tools to enhance and drive customer experience. Must possess a Technology-first/AI-first mindset when approaching compliance and KYC workflows.
• Cross-Functional Influence: The ability to navigate complex internal organizations, gaining buy-in from Sales and Operations to drive compliance initiatives forward.
• Global Regulatory Mastery: Deep knowledge of international AML/KYC standards (US, UK, EU, etc.).
• Certifications: CAMS or CFE certification is desired.

Why Join Us?

• Lead the Industry: You will be at the forefront of the "Resilience Era" of compliance, building systems that stop mistakes before they happen.
• Scale Fearlessly: We are a late-stage, well-funded powerhouse where your work directly impacts our ability to onboard enterprise-grade clients.
• Impact: At Tipalti, compliance is the department that makes "yes" possible for our customers globally.

The anticipated base pay rate for this position is 147,000-210,000 USD annually. 

Associate, Research & Delivery 

Role Summary:

Associates will learn to utilize a wide range of research tools, including Exiger’s industry-leading AI-software, DDIQ, to gather risk and compliance intelligence on individual and company research subjects. Associates will then analyze the data and develop a narrative report, receiving feedback and ongoing training from colleagues with subject matter expertise.

Please submit your resume to be considered for our Associate, Research & Delivery role!

What You'll Do:

• Create and determine contents of reports using a combination of web-based compliance tools, open-source resources, client-provided information, and Exiger’s case management system.
• Write clear, concise, and thoroughly researched reports for clients using a variety of public records, databases, and other web-based sources and tools.
• Utilize judgement and best practices to complete research, writing, and editing of cases of different products, scopes, jurisdictions, and complexity.
• Determine and escalate identified risk factors to case manager.
• Successfully manage case lifecycle, personal workload, and pipeline.
• Communicate effectively with others both verbally and in writing.
• Collaborate and work within a multi-national team to achieve desired outcomes.

What You Need:

• Strong analytical and research skills. 
• Solid communication (written and verbal) and organizational skills.
• Ability to deliver high quality work in a fast-paced, high volume environment with strict deadlines.
• Team player with high level of initiative and a proactive approach to work.
• Ability to work effectively in a team as well as independently; takes ownership of tasks and follows up to ensure that they are successfully brought to completion.
• Ability to utilize technology to solve problems.

Professional Experience Required:

• 1-2 years of professional experience.
• Proficient written and verbal English/Mandarin and other Chinese language skills.
• Strong commitment to continuous improvement and learning, with an openness to receiving feedback and training.
• Keen interest in the compliance, risk management, and financial services sectors as well as regulations, supply chain, and current events. 
  
  #LI-Hybrid

This posting is for a newly created role; artificial intelligence tools may be used to support candidate screening and evaluation; the expected base salary range for this position is 45,000 – 60,000 CAD annually, depending on qualifications.