Regulatory Compliance Specialist

About the role

You will own the end-to-end design and execution of Addi CF's compliance monitoring framework, driving control testing and regulatory engagement with a focus on structural resilience. You will lead the interpretation of evolving financial regulations and translate them into actionable controls that protect the business and ensure adherence. In this capacity, you will serve as the primary technical contact for SFC interactions, maintaining alignment between regulatory expectations and internal processes. You will build and sustain an ethics and conduct risk program that operates independently of any single individual or business cycle. Your work will ensure that compliance functions remain continuous and reliable, even during periods of transition or absence within leadership. You will own the integrity of compliance evidence, making the organization perpetually audit-ready without last-minute effort. Ultimately, you will safeguard Addi's license to operate and its reputation by institutionalizing a proactive, rather than reactive, approach to regulatory risk.

Key facts

What you'll do

• Own and execute the recurring Phase 0 monitoring and control testing plan across active risk management systems (SARLAFT, SAC), delivering periodic reports with zero delays against the approved schedule.
• Independently own and manage low-to-medium complexity SFC requirements registered in SIRI, ensuring 100% of responses are delivered within regulatory deadlines.
• Lead regulatory tracking and normative matrix updates, ensuring 100% of relevant new regulations are incorporated before their effective date.
• Build and maintain a verifiable, audit-ready compliance evidence repository (PETCD, controls, SFC correspondence), ensuring it is inspection-ready at any point in time.
• Lead the implementation of the conduct risk pillar once the corresponding SFC circular comes into force, ensuring full compliance from day one.
• Interpret Circular Básica Jurídica requirements and embed them into operational controls and documentation to prevent non-compliance.
• Coordinate with internal stakeholders to close regulatory gaps and remediate findings from supervisory observations or audits.
• Define and monitor key risk indicators (KRIs) to provide early warning of potential compliance failures or regulatory breaches.
• Own the maintenance of the risk matrix, ensuring accurate identification, assessment, and monitoring of risks across products and processes.
• Serve as the technical owner for compliance documentation, ensuring that policies, procedures, and registers are current and aligned with regulatory expectations.
• Partner with Legal and Risk teams to escalate material issues and coordinate timely remediation actions.
• Ensure continuity of compliance operations by maintaining detailed work instructions and standardized deliverables.

Requirements

• Demonstrate proven experience in regulatory risk management systems, specifically with SARLAFT, SARO, SARC, SARL, or SARM within a SFC-supervised entity.
• Bring 2-4 years of specific experience in operational, legal, or compliance risk at a bank, compañía de financiamiento, or regulated fintech.
• Show working knowledge of the Circular Básica Jurídica and risk matrix logic, including identification, assessment, control, and monitoring processes.
• Exhibit a risk-first legal mindset, identifying legal and regulatory risk before it materializes and designing mitigation strategies accordingly.
• Approach every decision from a risk management perspective rather than a purely business advisory one.
• Flag product or process implications, such as SARLAFT exposure, during the design phase and propose appropriate control frameworks.
• Design, execute, and deliver risk controls, tests, and regulatory reports without requiring ongoing operational supervision.
• Hold and defend technical positions with the regulator independently, avoiding reliance on management to rewrite responses.
• Manage the full lifecycle of SFC requirements in SIRI, from intake through submission, including during periods of management transition or absence.
• Maintain strong documentary rigor and professional discretion in all regulatory interactions and internal communications.

Nice to have

There are no preferred items listed in the SOURCE for Nice to have qualifications.

Practical notes

The role is based in Colombia and requires full-time engagement. No information regarding compensation, hours of work, travel requirements, visa sponsorship, or application deadlines is provided in the SOURCE material.