Regulatory Compliance Specialist (Lawyer)

What’s the mission you’ll drive

Own the design, execution, and institutional development of Addi CF's compliance monitoring framework — leading control testing, SFC regulatory engagement, normative analysis, and the ethics program — ensuring the compliance function and its roles are built, maintained, and operated with full structural resilience, independent of any single person.

What you will do

• Own and execute the recurring Phase 0 monitoring and control testing plan across active risk management systems (SARLAFT, SAC), delivering periodic reports with zero delays against the approved schedule. Failure to sustain this cadence creates a critical single point of failure in the compliance function and directly exposes Addi CF to regulatory risk.

• Independently own and manage low-to-medium complexity SFC requirements registered in SIRI, ensuring 100% of responses are delivered within regulatory deadlines — including during periods of management absence or transition.

• Lead regulatory tracking and normative matrix updates, ensuring 100% of relevant new regulations are incorporated before their effective date — positioning Addi CF ahead of the regulatory curve rather than reactive to it.

• Build and maintain a verifiable, audit-ready compliance evidence repository (PETCD, controls, SFC correspondence), ensuring it is inspection-ready at any point in time — with no dependency on manual preparation ahead of each review.

• Lead the implementation of the conduct risk pillar once the corresponding SFC circular comes into force, ensuring Addi CF is fully compliant from the regulation's day-one effective date.

What we’re looking for

Proven experience in regulatory risk management systems

• Hands-on work with SARLAFT, SARO, SARC, SARL, SARM, or equivalent within a SFC-supervised entity — not in adjacent roles that touch risk tangentially.

• 2–4 years of specific experience in operational, legal, or compliance risk at a bank, compañía de financiamiento, or regulated fintech.

• Working knowledge of the Circular Básica Jurídica and risk matrix logic (identification, assessment, control, monitoring).

Demonstrates a risk-first legal mindset

• Lawyer or equivalent with legal training who identifies legal/regulatory risk before it materializes and designs mitigation strategies — not just interprets norms.

• Approaches every decision from a risk management lens, not a business advisory one.

• Flags product or process implications (e.g., SARLAFT exposure) during design, not after launch, and proposes the control framework to address them.

Track record of autonomous execution in compliance environments

• Designs, runs, and delivers risk controls, tests, and regulatory reports without ongoing operational supervision.

• Holds and defends technical positions with the regulator without requiring management rewrite.

• Manages SFC requirements in SIRI from intake to submission independently — including during periods of management absence or transition.

Possesses strong documentary rigor and professional discretion

• Translates risk findings into verifiable procedures and traceable evidence with zero ambiguity.

• Handles sensitive information (ethics hotline, conflicts of interest) with sound judgment and full confidentiality.

• Maintains compliance evidence repositories (PETCD, controls, SFC correspondence) in audit-ready state at all times — no last-minute preparation sprints.

Has solid expertise in regulated financial or high-growth fintech environments

• Formal certifications in risk or compliance (e.g., CAMS, CRCP, or equivalent).

• Prior experience at a regulated fintech, neobank, or high-growth startup where regulatory rigor and execution speed coexist.

Experienced in AI-assisted regulatory workflows

• Comfortable operating in AI-assisted tools (Asana, Notion, or equivalent) to manage regulatory processes efficiently.

• Uses automation for tasks like SIRI triage or normative tracking, reducing reliance on manual processes..

Why join us?

• Work on a problem that truly matters – We are redefining how people shop, pay, and bank in Colombia, breaking down financial barriers and empowering millions. Your work will directly impact customers' lives by creating more accessible, seamless, and fair financial services.

• Step 1: People Interview (30 min)
  A conversation with a recruiter to get to know you, your experience, and what you're looking for. We’ll also share more about Addi, our culture, and the role.

• Step 2: Initial Interview (45 min)
  A more in-depth conversation with the hiring manager, where we explore your skills, experience, and problem-solving approach. We want to understand how you think.

• Step 3: Deep Dive Interviews (30 min)
  You'll meet future colleagues and cross-functional team members to get a feel for how we work together. We’re looking for strong contributors and cultural fits, so bring your questions, too!

• Step 4: Case Study (3-5 Days)
  You may receive a real-world challenge or case study to complete. This is a chance to showcase your expertise and how you approach key problems relevant to the role.

• Step 5: Co-Founder Interview
  If there’s a strong match, you’ll have a final conversation with our Founder to align on expectations, cultural fit and ensure mutual excitement. From there, we’ll move quickly to an offer and discuss next steps.