Sr Risk and Compliance Manager

Powering the world’s payments ecosystem

ACI powers the payments ecosystem – globally, and you power ACI.  You’ll innovate, collaborate, and grow – in an energetic technology culture with decades of proven success.  ACIers – in all roles and levels – are truly your colleagues and many are your friends. Our size and reach allow you to see the global impact of your work. You are visible, your talents are valued, and you are empowered to shape the future of payments.

Global Technology & Innovation (GTI) | Senior Individual Contributor

Role focus: A technically oriented First Line of Defense leader who translates risk and regulatory requirements into engineered controls, automated compliance capabilities, and measurable risk reduction.

Job Summary:

The Senior Risk & Compliance senior individual contributor responsible for designing, enabling, and continuously improving GTI’s First Line of Defense risk and compliance capabilities.

This role combines risk and regulatory expertise with a technical, engineering-oriented approach to governance, risk, and compliance (GRC), translating regulatory requirements, policies, risks, and control obligations into scalable processes, control requirements, automated workflows, monitoring, and measurable outcomes.

The role works directly with Product, Engineering, Operations, Security, Enterprise Risk Management, Compliance, Legal, and Internal Audit to integrate risk and compliance requirements into technology processes and platforms rather than relying primarily on manual governance activities.

The successful candidate will be equally comfortable evaluating risk, challenging control design, analyzing data, defining technical requirements, and partnering with operations teams to automate evidence, controls, testing, monitoring, and reporting wherever practical. The position operates through technical expertise, independent judgment, and influence.

Job Responsibilities:

•  Own and lead the Risk Framework while engineering scalable controls, automated workflows, monitoring, and measurable risk reduction. 

• Lead risk assessments, issue management, remediation, risk acceptance, operational loss analysis, and control effectiveness assessments. 

• Translate regulatory, policy, risk, and compliance requirements into practical business, technology, control, evidence, and monitoring requirements. 

• Design, test, challenge, and continuously improve preventive and detective controls, replacing manual controls with automated controls where practical. Automate control execution, evidence collection, testing, monitoring, exception management, reporting, and compliance checks. 

• Partner with business, Product, Engineering, Operations, Security, Compliance, Legal, ERM, and Internal Audit to embed risk and compliance into technology and business processes.

• Identify emerging operational, technology, security, privacy, regulatory, compliance, and resilience risks and drive appropriate remediation. 

• Use data, KPIs, KRIs, dashboards, and control-health measures to improve risk visibility, reporting, and decision-making. 

• Lead risk-based testing and validate that remediation and implemented solutions sufficiently address identified risks. 

• Evaluate governance processes for simplification, standardization, improvement, or automation. 

• Provide senior risk and compliance advisory support while directly challenging control design and influencing technology and business decisions. 

• Support executive and Board reporting while reducing reliance on manually prepared governance reporting. 

• Operate as a senior individual contributor and trusted risk SME, using technical expertise, independent judgment, influence, and cross-functional leadership.

Required Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Engineering, Risk Management, Compliance, Business, or a related field, or equivalent experience.

• 10+ years of experience across technology risk, GRC, cybersecurity, compliance, audit, engineering, or related disciplines.

• Strong experience with risk and control assessments, control mapping, control testing, and remediation.

• Experience translating regulatory or policy requirements into technology and control requirements.

• Demonstrated experience automating governance, risk, security, or compliance processes.

• Strong understanding of technology systems, software development, cloud environments, and operational processes.

• Ability to analyze data and use it to identify risk, control gaps, and compliance exceptions.

• Ability to work directly with engineers, architects, product teams, security professionals, and executives.

• Demonstrated ability to operate independently as a senior subject-matter expert.

Preferred Qualifications

• Experience implementing or supporting GRC automation, compliance automation, or continuous control monitoring.

• Experience with workflow automation, APIs, data analytics, or similar integration concepts.

• Familiarity with cloud and DevOps operating models.

• Experience with compliance and control frameworks and crosswalks.

• Experience with PCI, SWIFT, ISO, DORA, or comparable regulatory and industry requirements.

• Experience with AI-enabled governance or automation capabilities.

• Experience establishing automated KPIs, KRIs, and control-health reporting.

• CRISC, CISA, CISM, CISSP, PCI ISA, or comparable certification.

Core Competencies

• Ability to design and continuously improve processes
• Strong communication skills across all organizational levels
• Ability to influence and challenge stakeholders effectively
• Skilled in prioritization, decision-making, and conflict resolution
• Experience presenting to senior leadership and boards
• Capacity to operate effectively in ambiguous environments and drive clarity

Work Environment

• Hybrid office-based role
• Majority of time spent working on a computer
• Minimal travel requirement (less than 10%)

 Applicants must be currently authorized to work in the United States on a full-time basis. This position does not offer sponsorship for employment visa status or work permit now or in the future.

In return for your expertise, we offer opportunities for growth, career development, and a competitive compensation and benefits package—all within an innovative and collaborative work environment.

Are you ready to help us transform the payments ecosystem? To learn more about ACI Worldwide, visit our web site at www.aciworldwide.com Job ID (Requisition #19624)

ACI Worldwide is an AA/EEO employer in the United States, which includes providing equal opportunity for protected veterans and individuals with disabilities, and an EEO employer globally.

Important Notice About Recruitment Scams
Job seekers should be aware of ongoing recruitment scams where individuals or organizations impersonate legitimate companies to offer fake job opportunities. These scams often involve requests for personal information, payments, or interviews through unofficial channels. Please be cautious and verify any communications claiming to be from our company (www.aciworldwide.com / @aciworldwide.com). The ACI Worldwide recruitment team will always follow official channels and will never request payment.

#LI-LF1

#LI-Hybrid