Risk & Compliance Officer

About the role

This role focuses on regulatory and risk management for Confirmo's UAE operations. The primary responsibility is to manage the ongoing VARA licensing process, serving as the main contact point with the authority on licensing and governance. This includes handling regulatory correspondence and reporting obligations, as well as monitoring developments in the UAE virtual assets landscape. The position requires a deep understanding of VARA regulations and experience in navigating these frameworks.

A key part of the work involves developing and maintaining the entity's risk register and implementing the Group's risk appetite framework locally. The officer will conduct regular risk assessments and lead operational resilience planning. This ensures the company adheres to risk management standards and can advise senior leadership on potential compliance risks. The role also supports due diligence for new clients and partners.

Success in this position means ensuring the UAE entity achieves and maintains its VARA license, effectively manages its risk profile, and stays compliant with evolving regulations. The officer will be instrumental in building and maintaining robust enterprise risk management frameworks. This requires a proactive approach to regulatory changes and strong analytical skills to identify and mitigate risks.

The salary for this full-time remote position ranges from $100,000 to $221,500 USD.

Skills that matter here

• VARA regulations: This role requires a deep understanding of these regulations to manage licensing, act as a liaison, and ensure ongoing compliance in the UAE virtual assets sector.
• enterprise risk management frameworks: The officer will be responsible for building or maintaining these frameworks, including developing risk registers and implementing risk appetite policies.
• MiCA: Experience with MiCA compliance is an advantage, indicating a broader understanding of crypto-asset regulations beyond the UAE.
• FATF Travel Rule compliance: Familiarity with this compliance standard is beneficial, showing an understanding of international anti-money laundering requirements in virtual assets.
• UAE data protection requirements (PDPL): An understanding of these requirements is necessary to ensure data handling practices comply with local privacy laws.
• operational resilience and business continuity frameworks: The role involves leading planning in these areas to ensure the entity can withstand disruptions and maintain operations.

Who this role suits

• Someone with at least five years of compliance or risk management experience, including a minimum of two years in virtual assets, fintech, or payments.
• A professional who has experience with UAE regulatory frameworks and has previously acted as a regulatory liaison with UAE authorities.
• An individual who can build and maintain enterprise risk management frameworks and conduct regular risk assessments.
• A candidate with strong analytical and problem-solving skills, capable of advising senior leadership on compliance risks.

From the employer

• Manage the ongoing VARA licensing process through to approval.
• Act as the primary point of contact with VARA on licensing and governance matters.
• Maintain ongoing regulatory correspondence and reporting obligations.
• Monitor regulatory developments in the UAE virtual assets landscape.
• Develop and maintain the entity's risk register.
• Implement and monitor the Group's risk appetite framework locally.
• Conduct regular risk assessments.
• Lead operational resilience planning.
• Advise senior leadership on compliance risks.
• Support due diligence processes for new clients and partners.

• Minimum 5 years of compliance and/or risk management experience.
• At least 2 years in a virtual assets, fintech, or payments environment.
• Experience with UAE regulatory frameworks, particularly VARA regulations.
• Hands-on experience building or maintaining enterprise risk management frameworks.
• Prior experience as a regulatory liaison with UAE authorities is preferred.
• Experience with MiCA, FATF Travel Rule compliance is an advantage.
• Deep understanding of VARA regulations.
• Understanding of UAE data protection requirements (PDPL).
• Familiarity with operational resilience and business continuity frameworks.
• Strong analytical and problem-solving skills.