OpenFX is building cross-border payment infrastructure to move money as freely as data, with a focus on highly regulated environments in Europe. We are scaling rapidly and supporting a team with experience at leading financial and tech firms. We are seeking a hands-on Compliance Program Manager to convert regulatory requirements into verifiable, production-ready controls and to guide auditors through evidence and remediation. This senior role collaborates closely with Legal, Compliance, Risk, and Engineering to embed compliance into the platform rather than bolting it on after the fact. The position is based in Amsterdam, Netherlands (EU/EEA).

Key responsibilities: - Own audit-ready security controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements. - Design, implement, and maintain technical and operational controls across AWS, Kubernetes, and application layers; ensure controls are actually enforced, not just documented. - Be the technical counterpart to Legal, Compliance & Risk: translate regulatory language into concrete security mechanisms; monitor new regulations and assess technical impact; decide what is acceptable for compliance. - Run audits: own preparation, evidence collection, walkthroughs, and remediation tracking; build repeatable, automated evidence pipelines. - Embed compliance into the platform: work with engineering to design secure-by-default systems; ensure logging, access controls, encryption, monitoring, and change management meet regulatory expectations. - Automate compliance wherever possible: build tooling to continuously validat

OpenFX is building cross-border payment infrastructure to move money as freely as data, with a focus on highly regulated environments in Europe. We are scaling rapidly and supporting a team with experience at leading financial and tech firms. We are seeking a hands-on Compliance Program Manager to convert regulatory requirements into verifiable, production-ready controls and to guide auditors through evidence and remediation. This senior role collaborates closely with Legal, Compliance, Risk, and Engineering to embed compliance into the platform rather than bolting it on after the fact. The position is based in Amsterdam, Netherlands (EU/EEA).

Key responsibilities: - Own audit-ready security controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements. - Design, implement, and maintain technical and operational controls across AWS, Kubernetes, and application layers; ensure controls are actually enforced, not just documented. - Be the technical counterpart to Legal, Compliance & Risk: translate regulatory language into concrete security mechanisms; monitor new regulations and assess technical impact; decide what is acceptable for compliance. - Run audits: own preparation, evidence collection, walkthroughs, and remediation tracking; build repeatable, automated evidence pipelines. - Embed compliance into the platform: work with engineering to design secure-by-default systems; ensure logging, access controls, encryption, monitoring, and change management meet regulatory expectations. - Automate compliance wherever possible: build tooling to continuously validat