Regulatory Compliance Specialist (Lawyer)

About this role

ABOUT ADDI

We are a leading financial platform, building the future of payments, shopping, and banking—a world where consumers and merchants can transact effortlessly, grow together and where we create abundance and generate pride in them. Today, we serve over 2 million customers and partner with more than 20,000 merchants, making Addi Colombia’s fastest-growing marketplace.

We provide banking solutions (deposits, payments, unsecured credit) and commerce services (e-commerce, marketing) using state-of-the-art technology, bridging the financial gap for millions and redefining how people experience financial freedom. As the country’s leading Buy Now, Pay Later provider, we have secured regulatory approval to operate as a bank, unlocking even greater opportunities for our customers. In the past year, we have also achieved profitability, reinforcing the strength of our business model and our ability to scale sustainably.

Our mission has earned the trust of world-class investors, including Andreessen Horowitz, Architect Capital, GIC, Goldman Sachs, Greycroft, Monashees, Notable Capital, Quona Capital, Union Square Ventures, Victory Park Capital, and more, who back our vision for the future. With their support, we are not just growing—we are transforming Latin America’s financial ecosystem and shaping the next generation to shop, pay, and bank in Colombia.

But what truly sets us apart is how we build. We are a conscious company, driven by deep experience in scaling technology, services and products, and we live by our values https://co.addi.com/trabaja-con-nosotros#:~:text=%E2%80%A2%20We%20are%20owners,dentro%20del%20equipo. every day.

ABOUT THE ROLE

This is where you come in. Below, you’ll find what this role is all about—the impact you’ll drive, the challenges you’ll tackle, and what it takes to thrive at Addi. If you’re ready to be part of something big, keep reading.

WHAT’S THE MISSION YOU’LL DRIVE

Own the design, execution, and institutional development of Addi CF's compliance monitoring framework — leading control testing, SFC regulatory engagement, normative analysis, and the ethics program — ensuring the compliance function and its roles are built, maintained, and operated with full structural resilience, independent of any single person.

WHAT YOU WILL DO

- Own and execute the recurring Phase 0 monitoring and control testing plan across active risk management systems (SARLAFT, SAC), delivering periodic reports with zero delays against the approved schedule. Failure to sustain this cadence creates a critical single point of failure in the compliance function and directly exposes Addi CF to regulatory risk.

- Independently own and manage low-to-medium complexity SFC requirements registered in SIRI, ensuring 100% of responses are delivered within regulatory deadlines — including during periods of management absence or transition.

- Lead regulatory tracking and normative matrix updates, ensuring 100% of relevant new regulations are incorporated before their effective date — positioning Addi CF ahead of the regulatory curve rather than reactive to it.

- Build and maintain a verifiable, audit-ready compliance evidence repository (PETCD, controls, SFC correspondence), ensuring it is inspection-ready at any point in time — with no dependency on manual preparation ahead of each review.

- Lead the implementation of the conduct risk pillar once the corresponding SFC circular comes into force, ensuring Addi CF is fully compliant from the regulation's day-one effective date.

WHAT WE’RE LOOKING FOR

Proven experience in regulatory risk management systems

- Hands-on work with SARLAFT, SARO, SARC, SARL, SARM, or equivalent within a SFC-supervised entity — not in adjacent roles that touch risk tangentially.

- 2–4 years of specific experience in operational, legal, or compliance risk at a bank, compañía de financiamiento, or regulated fintech.

- Working knowledge of the Circular Básica Jurídica and risk matrix logic (identification, assessment, control, monitoring).

Demonstrates a risk-first legal mindset

- Lawyer or equivalent with legal training who identifies legal/regulatory risk before it materializes and designs mitigation strategies — not just interprets norms.

- Approaches every decision from a risk management lens, not a business advisory one.

- Flags product or process implications (e.g., SARLAFT exposure) during design, not after launch, and proposes the control framework to address them.

Track record of autonomous execution in compliance environments

- Designs, runs, and delivers risk controls, tests, and regulatory reports without ongoing operational supervision.

- Holds and defends technical positions with the regulator without requiring management rewrite.

- Manages SFC requirements in SIRI from intake to submission independently — including during periods of management absence or transition.

Possesses strong documentary rigor and professional discretion

- Translates risk findings into verifiable procedures and traceable evidence with zero ambiguity.

- Handles sensitive information (ethics hotline, conflicts of interest) with sound judgment and full confidentiality.

- Maintains compliance evidence repositories (PETCD, controls, SFC correspondence) in audit-ready state at all times — no last-minute preparation sprints.

Has solid expertise in regulated financial or high-growth fintech environments

- Formal certifications in risk or compliance (e.g., CAMS, CRCP, or equivalent).

- Prior experience at a regulated fintech, neobank, or high-growth startup where regulatory rigor and execution speed coexist.

Experienced in AI-assisted regulatory workflows

- Comfortable operating in AI-assisted tools (Asana, Notion, or equivalent) to manage regulatory processes efficiently.

- Uses automation for tasks like SIRI triage or normative tracking, reducing reliance on manual processes..

WHY JOIN US?

- Work on a problem that…