About OnePay

OnePay is the consumer fintech trusted by millions of Americans to make money better.

Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast.

We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers.

We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining.

But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are:

Ready to run

Hungry and driven by urgency

Exceptional at what they do, with low ego

Comfortable operating in motion

The Role

Compliance Controls & Monitoring (C&M) is OnePay’s second line of defense, responsible for establishing and overseeing the firm's compliance control environment. Distinct from independent Compliance Testing, C&M identifies and assesses regulatory risks, evaluates controls, and drives compliant product and operational outcomes across the product lifecycle. This role requires an experienced compliance professional who can independently evaluate complex regulatory matters, recommend practical solutions, and execute compliance oversight activities in a fast-paced, evolving financial services environment.

What Makes This Role Different

OnePay is a growing company with a broad and evolving product set, and our regulatory landscape evolves alongside it. This role sits at the center of that growth. You'll assess new and changing products, apply regulatory requirements to situations that don't always have clear precedent, and help the business find compliant paths forward. Strong partnerships with Product, Legal, and Operations is a given, and your goal is to bring a clear, well-reasoned compliance perspective to that table. The best fit is someone who is energized by that kind of work: exercising sound judgment on complex questions, communicating risk clearly and constructively, and advocating independently for the right controls.

You will:

Regulatory Advisory & Business Partnership: Build trusted relationships across Product, Operations, Engineering, Marketing, Legal, and Compliance. Independently evaluate business practices and controls against applicable regulatory requirements, provide practical compliance guidance, and confidently challenge potential noncompliance while influencing appropriate corrective actions.

Compliance Controls: Evaluate compliance control design and adequacy, identify gaps in regulatory coverage, and recommend and drive enhancements. Support control development, risk-to-control mapping, documentation, and maintenance of the centralized compliance control inventory within the firm's GRC platform.

Compliance Risk Assessment: Execute and maintain compliance risk assessments across products, processes, and regulatory requirements. Evaluate inherent risk, control coverage, and residual risk; recommend appropriate mitigation; and support implementation and ongoing maintenance of compliance risk assessment processes within the firm's GRC platform.

Execution & Continuous Improvement: Independently manage assigned compliance activities and initiatives through completion while balancing competing priorities and deadlines. Identify opportunities to improve processes, increase efficiency, and enhance operational effectiveness.

Change Management: Assess regulatory compliance implications of new or modified products, business processes, systems, and operational changes. Partner with stakeholders to evaluate control impacts and support appropriate compliance measures throughout implementation.