Compliance Manager

Remote · Remote possible

Job description

Hi, We’re AffiniPay! 

AffiniPay is a leading fintech company, based out of Austin, Texas. As the market leader in professional services payments and practice management software, AffiniPay’s tech products serve legal, accounting, architectural, engineering and construction firms. AffiniPay has been recognized as one of Inc. 5000’s fastest growing companies in the U.S. for 11 years in a row, and as a result, our teams continue to grow as well! 

We are seeking a highly skilled and experienced Compliance Manager to join our team. In this role, you will be responsible for developing, implementing, and maintaining our organization's compliance programs, focusing on privacy and industry-specific regulations such as PCI, SOC2, and HIPAA. You will play a crucial role in ensuring our company's adherence to legal and regulatory requirements while promoting a culture of compliance. The ideal candidate will possess a deep understanding of compliance best practices, strong analytical skills, and the ability to communicate effectively with stakeholders at all levels of the organization.

What You’ll Do

  • Develop and Implement Compliance Policies: Design, implement, and enforce policies and procedures to ensure compliance with privacy and industry regulations, protecting the confidentiality, integrity, and availability of sensitive information.
  • Risk Assessment and Management: Conduct regular risk assessments to identify potential vulnerabilities and threats to the organization's compliance posture. Develop strategies to mitigate risks and ensure regulatory compliance.
  • Regulatory Compliance Management: Stay up-to-date with relevant privacy and industry-specific regulations, such as PCI, SOC2, HIPAA, GDPR, and CCPA/CPRA. Develop and maintain a compliance roadmap and ensure adherence to it.
  • Compliance Training and Awareness: Develop and deliver compliance training programs for employees to promote a culture of compliance and security consciousness throughout the organization.
  • Vendor Compliance Management: Evaluate and manage third-party vendors and service providers to ensure they meet our compliance standards. Conduct due diligence assessments and monitor vendor compliance.
  • Incident Response: Partner with the VP and Manager of Information Security on the response to compliance-related incidents, including investigating breaches, coordinating with relevant stakeholders, and implementing corrective actions to prevent future incidents, ensuring compliance with regulatory reporting requirements.
  • Privacy Impact Assessments (PIAs): Conduct PIAs for new projects, systems, or processes to assess and mitigate privacy risks. Work closely with cross-functional teams to integrate privacy considerations into project planning and development.
  • Data Governance: Develop and maintain data governance frameworks, including data classification, retention policies, and data access controls, to ensure the appropriate handling of sensitive information in compliance with applicable regulations.
  • Security Audits and Assessments: Coordinate and participate in internal and external security audits and assessments. Collaborate with auditors and assessors to address findings and implement remediation measures to maintain compliance.

Qualifications:

  • Bachelor's degree in Information Security, Computer Science, or equivalent experience. Advanced degree or relevant certifications (e.g., CIPP, CISSP, CISA) preferred.
  • Minimum of 3 years of experience in compliance roles, preferably in the financial industry with SaaS exposure.
  • Understanding of compliance principles, standards, and best practices.
  • Proficiency in conducting risk assessments, developing policies and procedures, and managing compliance efforts.
  • Excellent communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels of the organization.
  • Strong analytical and problem-solving abilities, with a keen attention to detail.
  • Experience with compliance and security technologies and tools, such as SIEM, DLP, encryption, and access controls.
  • Ability to work independently and collaboratively in a fast-paced environment, with a commitment to continuous learning and improvement.

Additional Information:

The base pay range for this position is between $$115,000-$135,000 USD annually. The salary range for performing this role outside of the US / Austin / California may differ.  AffiniPay is committed to offering competitive, fair and commensurate compensation and has provided an estimated pay range for this role. Actual compensation may vary based on job-related knowledge, skills, experience and education.

Our Story

Founded in 2005, AffiniPay’s mission is to build technology products that helps professionals focus on the work they love. As the leader in the professional payments industry, AffiniPay’s products serve legal, accounting, architectural, engineering and construction firms. Our portfolio of software solutions include MyCase (Legal Practice Management Software), CASEpeer (Practice Management for Personal Injury Firms), Docketwise (Immigration & Case Management Software), (Soluno (Legal Accounting), and Woodpecker (Legal Document Automation). Our portfolio of payment solutions include LawPay (Legal), AffiniPay for Associations (Associations), CPACharge (Accounting Professionals), and ClientPay (Architect, Engineer, and Construction). AffiniPay’s products serve over one hundred thousand users, and we are noted as one of the fastest growing tech companies in Austin, Texas. We are constantly looking for talent to join our team to continue playing a key part in unlocking our potential. 

Diversity, Equity & Inclusion at AffiniPay

At AffiniPay, we recognize that innovation occurs with a strong team of people who are diverse in background, personality, talent and ideas. Experience comes in many forms and ensuring a diverse and inclusive workplace where we continue to learn from each other is an integral part of our culture. We are committed to creating a welcoming and transparent environment for all that embraces those differences through education, equal access to opportunities and information, inclusionary programs, and community outreach. 

Benefits that Benefit You! 

As a people first culture, we believe it is important that our teammates are happy, healthy, and productive.  In order to best support that, AffiniPay provides award-winning benefits that can make a difference in your life - right now and for the future.

  • All employees receive fully covered medical, dental and vision coverage - Choose from our 2 available health plans based on what fits you and/or your family!
  • Have some fur babies? - We offer them insurance too!
  • RELAX and enjoy your time away with our flexible paid time off policy! 
  • We will help you plan for your future - 401K, or RRSP if in Canada, with a company match
  • Competitive compensation packages that include mid-year and end-of-year bonuses and equity options for all full-time employees
  • Health Wellness Program that includes nutrition consultations, mental health apps, and access to discounted memberships
  • Have plans to grow your family? - Parental resources, including 16 weeks of paid time off for primary caregivers
  • Professional development opportunities including mentorships, leadership programs and our AffiniPayU courses
  • We believe it is important to give back with our Matching Gift Program and organized activities focused on donations, volunteerism and supporting the local communities throughout the country
  • D&I initiatives provide educational opportunities regarding multicultural issues, tolerance, and celebrating diversity among our entire staff
  • An incredible, in-office experience at our headquarters in Austin and San Diego including free lunch delivery, a fully stocked kitchen, and some “sweet” surprises for those afternoon pick-me-ups

Security Advisory

Our hiring teams at AffiniPay are dedicated to recruiting top talent that share our passion for serving the professional services industry through innovative financial technology.  As such, our Talent Acquisition Team only follows legitimate hiring practices.  We will always communicate with our candidates using emails with the AffiniPay domain and will never ask for sensitive/personal data during the application process.  All interviews take place over phone call, Zoom/Google Meet or in person.  All offers are communicated verbally by our Talent Acquisition Specialists with a written offer letter as a follow up.