position overview:

- build, implement, and oversee the company’s compliance framework across internal operations, client relationships, and third-party partnerships (e.g. Sap).
- this role is critical as the company scales and requires a hands-on builder who can establish compliance from the ground up, ensuring alignment with general standards while addressing latam-specific regulatory risks.
- the compliance manager will act as a central control function, working cross-functionally with hr, legal, finance, sales, and external partners to ensure ethical, regulatory, and contractual compliance.

responsibilities:

compliance program design and governance

- design and implement a comprehensive compliance framework (policies, procedures, controls).
- establish a risk-based compliance program, prioritizing high-risk jurisdictions (latam).
- develop and maintain: code of conduct, anti-bribery & anti-corruption (abac) policies, aml/kyc policies, third-party risk management framework
- create a compliance governance structure (reporting lines, escalation protocols).
- report regularly to senior management on compliance risks.

internal compliance (hr and operations)

- partner with hr to ensure compliance with:
- labor laws across latam jurisdictions
- employee onboarding/offboarding controls
- background checks and conflict of interest disclosures
- implement and monitor:
- ethics hotline/whistleblower mechanisms
- internal investigations processes
- develop and roll out mandatory compliance trainings (e.g., abac, data privacy).
- ensure compliance with internal policies across all departments.

client compliance (kyc/cdd)

- design and manage know your customer (kyc) and customer due diligence (cdd)



processes:
- client onboarding risk assessments
- ubo identification and verification
- sanctions and pep screening
- define risk tiers and enhanced due diligence (edd) procedures.
- work with sales and finance to embed compliance into the commercial lifecycle.
- maintain audit-ready documentation for all client due diligence processes.

third-party and partner compliance

- implement a third-party risk management (tprm) program covering: vendors, consultants, and strategic partners.
- conduct due diligence on third parties:
- integrity checks
- sanctions screening
- contractual compliance clauses

ensure partners adhere to:

- company compliance standards
- applicable anti-corruption and data protection laws
- monitor ongoing third-party risks and performance

regulatory compliance (latam focus)

- monitor and interpret regulatory requirements across latam.
- ensure compliance with:
- anti-corruption laws
- data privacy regulations
- aml frameworks where applicable.

monitoring, audits, and continuous improvement

- develop and execute a compliance monitoring plan.
- conduct periodic internal audits and risk assessments.
- track and report compliance kpis, such as: % of employees trained, kyc completion rates, third-party risk assessments completed
- drive remediation plans and continuous improvement initiatives.

qualifications:

- bachelor’s degree in law.
- 10 years of experience in compliance, legal, audit, or risk management.
- strong experience in: kyc/aml frameworks, anti-corruption compliance, third-party risk management
- experience working in or with latam jurisdictions is required.
- fluency in english, spanish, and portuguese

📌 Trilingual compliance manager (spanish, english, portuguese) (México)
🏢 H&Co
📍 México