OnePay
OnePay
OnePay is a U.S.-based fintech company building consumer banking and payment experiences through partner banks and financial providers. Its app brings together checking and savings accounts, early paycheck access, high-yield savings, credit building, secured and rewards cards, investing, cryptocurrency trading, a digital wallet, pay-later options, and free tax filing. OnePay works with partners including Coastal Community Bank, Lead Bank, and Synchrony for services such as banking, card issuance, lending, and asset custody; OnePay itself is not a bank.

Head of Compliance and Risk at OnePay – Malta (Hybrid)

Lead compliance and enterprise risk for OnePay’s Malta Payment Institution and crypto-asset operations. Oversee MFSA, PSD2, AML/CFT, MiCA, DORA, and related regulatory obligations.

Description

  • Engage with regulators and support responses to queries, information requests, and licensing conditions
  • Maintain ongoing compliance with authorization requirements, governance standards, internal controls, and compliance frameworks
  • Build, implement, and maintain compliance frameworks, policies, and procedures
  • Establish compliance monitoring plans and internal control processes
  • Ensure policies cover PSD2, AML/CFT, MiCA, and anticipated PSD3 requirements
  • Advise senior management on regulatory compliance matters
  • Interpret applicable regulations and track developments across Malta and the EU
  • Oversee product compliance and governance frameworks
  • Evaluate crypto-asset service risks, including custody, trading, market abuse, volatility, and technology vulnerabilities
  • Oversee client-fund safeguarding and coordinate annual audits
  • Manage custody and private-key governance risks
  • Address statutory complaints
  • Identify, evaluate, and mitigate compliance, operational, financial, liquidity, fraud, IT and cybersecurity, and crypto-asset risks
  • Lead enterprise-wide risk assessments, scenario analysis, and stress testing
  • Create and maintain enterprise and functional risk registers
  • Develop and maintain DORA compliance and ICT risk-management practices
  • Conduct compliance monitoring reviews and present findings to senior management
  • Track the timely remediation of identified issues
  • Prepare compliance and risk reports for the Board and relevant committees
  • Monitor MiCA market-abuse requirements and complete SMAR reporting
  • Monitor risk exposures and compliance with risk appetite
  • Escalate material risks and incidents
  • Support compliance training and foster a culture of compliance and ethical conduct
  • Work with legal, product, operations, and technology teams to embed compliance by design
  • Provide compliance input on onboarding, safeguarding arrangements, and payment flows

Requirements

  • Demonstrated compliance experience in financial services, fintech, or payments
  • Experience supporting regulatory licensing, ideally for a Payment Institution or comparable regulated entity
  • Strong knowledge of EU regulatory frameworks, including PSD2, AML/CFT, MiCA, and PSD3
  • Experience with crypto-assets and knowledge of MiCA are highly desirable
  • Strong grounding in enterprise risk management principles and regulatory expectations
  • Ability to evaluate complex and emerging risks, particularly in fintech and crypto environments
  • Excellent analytical, problem-solving, and decision-making abilities
  • Strong communication and stakeholder-management skills
  • Bachelor’s degree in Law, Finance, Business, or a related discipline
  • Professional certification such as ICA, CAMS, or an equivalent is advantageous
  • Must be based in Malta
  • Must be able to work without sponsorship; sponsorship is not currently available

Benefits

  • OnePay is an equal-opportunity employer that hires on merit without discrimination based on gender, race, religion, or background
  • Sponsorship is not currently available

Related Jobs