Compliance Controls & Monitoring

About OnePay

OnePay is the consumer fintech trusted by millions of Americans to make money better.

Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast.

We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers.

We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining.

But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are:

• Ready to run

• Hungry and driven by urgency

• Exceptional at what they do, with low ego

• Comfortable operating in motion

The Role

Compliance Controls & Monitoring (C&M) is OnePay’s second line of defense, responsible for establishing and overseeing the firm's compliance control environment. Distinct from independent Compliance Testing, C&M identifies and assesses regulatory risks, evaluates controls, and drives compliant product and operational outcomes across the product lifecycle. This role requires an experienced compliance professional who can independently evaluate complex regulatory matters, recommend practical solutions, and execute compliance oversight activities in a fast-paced, evolving financial services environment.

What Makes This Role Different:

OnePay is a growing company with a broad and evolving product set, and our regulatory landscape evolves alongside it. This role sits at the center of that growth. You'll assess new and changing products, apply regulatory requirements to situations that don't always have clear precedent, and help the business find compliant paths forward. Strong partnerships with Product, Legal, and Operations is a given, and your goal is to bring a clear, well-reasoned compliance perspective to that table. The best fit is someone who is energized by that kind of work: exercising sound judgment on complex questions, communicating risk clearly and constructively, and advocating independently for the right controls.

You will:

• Regulatory Advisory & Business Partnership: Build trusted relationships across Product, Operations, Engineering, Marketing, Legal, and Compliance. Independently evaluate business practices and controls against applicable regulatory requirements, provide practical compliance guidance, and confidently challenge potential noncompliance while influencing appropriate corrective actions.

• Compliance Controls: Evaluate compliance control design and adequacy, identify gaps in regulatory coverage, and recommend and drive enhancements. Support control development, risk-to-control mapping, documentation, and maintenance of the centralized compliance control inventory within the firm's GRC platform.

• Compliance Risk Assessment: Execute and maintain compliance risk assessments across products, processes, and regulatory requirements. Evaluate inherent risk, control coverage, and residual risk; recommend appropriate mitigation; and support implementation and ongoing maintenance of compliance risk assessment processes within the firm's GRC platform.

• Execution & Continuous Improvement: Independently manage assigned compliance activities and initiatives through completion while balancing competing priorities and deadlines. Identify opportunities to improve processes, increase efficiency, and enhance operational effectiveness.

• Change Management: Assess regulatory compliance implications of new or modified products, business processes, systems, and operational changes. Partner with stakeholders to evaluate control impacts and support appropriate compliance measures throughout implementation.

You Bring

• Mid Career (5-10 Years) with progressively responsible advisory experience within banking, fintech, or consumer financial services, with strong knowledge of applicable federal and state consumer financial protection laws and regulations.

• Demonstrated ability to independently interpret regulatory requirements, provide credible challenge, and influence decisions across cross-functional stakeholders, including comfort making and defending well-reasoned judgment calls on nuanced questions and evolving regulatory guidance.

• Hands-on experience conducting compliance risk assessments, evaluating control design and effectiveness, and working with risk registers or GRC platforms.

• Strong critical thinking and communication skills, with the ability to explain regulatory risk clearly and constructively to business partners, and to advocate independently for the right controls.

• Proven ability to manage competing priorities and drive work to completion with a high degree of ownership.

• Experience in a fintech, startup, or similarly dynamic financial services environment preferred.

• CRCM, CIA or equivalent certification preferred.

What We Offer

• Competitive base salary, stock options, and health benefits from Day 1

• 401(k) plan with company match

• Remote-friendly (US), flexible time off (FTO), and opportunities for growth

• A high-growth, mission-driven, inclusive culture where your work has real impact

Standard Interview Process

Our process varies by role. Most candidates go through:

• AI-assisted initial screen

• Interview with Talent Partner

• Technical or Hiring Manager Interview

• Team Interview

• Executive Interview

• Offer!

Equal Employment Opportunity