Risk & Compliance Program Manager (Pune)

Role Summary We are looking for a highly motivated Risk & Compliance Program Manager to strengthen our risk management framework, ensure regulatory compliance, and support scalable growth across fintech, banking, and payments operations. This role will partner with cross-functional teams to operationalize risk processes, oversee compliance programs, support audits, and build governance infrastructure that aligns with business and regulatory requirements. Key Responsibilities Risk Management & Compliance - Maintain and manage the enterprise risk register. - Track risk acceptances, mitigation plans, and committee action items. - Drive issue management, corrective action plans, and control testing activities. - Ensure ongoing compliance with FinCEN, Nacha, PCI DSS, SOC 2, and other applicable regulations. - Lead Business Impact Analysis (BIA) and Business Continuity Planning (BCP) initiatives. Client Due Diligence & Access Controls - Conduct client onboarding risk assessments and due diligence reviews. - Manage client questionnaires, contractual risk reviews, and onboarding checkpoints. - Monitor ACH limits, onboarding conditions, and client-specific compliance obligations. - Standardize responses to client RFIs and due diligence requests. - Partner with Security teams to strengthen access control governance and conduct periodic access reviews. Regulatory Compliance & Policy Management - Monitor and interpret regulatory changes related to BSA/AML, Nacha, OCC, FFIEC, GLBA, and other industry requirements. - Translate regulatory requirements into actionable internal processes and controls. - Ensure policies, procedures, and communications remain aligned with regulatory and client commitments. - Support continuous improvement of compliance and governance programs. Product & Operational Risk Governance - Embed risk assessments into product development and client onboarding workflows. - Establish and maintain approval thresholds, exception management, and escalation processes. - Track risk deviations, approvals, and acceptance records. - Collaborate with Legal, Product, and Operations teams to ensure consistent risk-based decision-making. Audit & Vendor Risk Management - Lead audit preparation and readiness activities for SOC 2, PCI DSS, client audits, and compliance reviews. - Maintain centralized audit documentation and evidence repositories. - Coordinate compliance testing, remediation activities, and risk committee reporting. - Strengthen vendor risk management processes through control assessments and ongoing monitoring. Governance, Reporting & Infrastructure - Develop and maintain Key Risk Indicators (KRIs), dashboards, and executive reporting. - Prepare risk and compliance reports for leadership and board-level stakeholders. - Partner with SalesOps and Legal teams to integrate risk controls into Salesforce and contract workflows. - Design scalable, repeatable governance processes that support organizational growth. Required Qualifications - 5 to 8 years of experience in Risk, Compliance, Operations, or Governance roles within FinTech, Banking, Payments, or BaaS organizations. - Solid understanding of regulatory compliance, risk management, vendor risk, audit readiness, and access control frameworks. - Experience building and scaling risk or compliance programs across multiple business functions. - Knowledge of: - BSA/AML - FinCEN - Nacha - PCI DSS - SOC 2 - OCC - FFIEC - GLBA - Experience with tools such as: - Power BI - JIRA - ServiceNow - Salesforce - Strong analytical, organizational, and stakeholder management skills. RequirementsPreferred Skills & Attributes - Strong systems-thinking and process improvement mindset. - Ability to manage multiple priorities in a fast-paced environment. - Excellent communication and cross-functional collaboration skills. - Proactive, resourceful, and results-oriented approach. - Strong problem-solving and decision-making abilities. - High level of integrity, accountability, and professionalism. - Ability to build scalable governance frameworks and operational infrastructure. .