Team Lead — Compliance Monitoring, Assurance & Testing (CMAT)

Responsibilities

• Compliance Monitoring & Testing Programme

• Own and maintain a risk-based annual Compliance Monitoring & Assurance Plan (CMAP), refreshed on risk assessment outcomes, FSRA thematic reviews, and changes in regulatory posture.

• Design and execute control testing across AML/CFT, sanctions, market abuse, client-asset safeguarding, complaint handling, outsourcing, and technology/cyber governance.

• Apply full-cycle assurance methodology: scoping → walkthroughs → sampling → testing → root-cause analysis → findings rating → remediation tracking → closure validation.

• Deliver thematic deep-dives aligned to FSRA supervisory priorities (e.g., transaction monitoring effectiveness, Travel Rule compliance, EDD for high-risk clients, market abuse surveillance).

Regulatory Alignment (FSRA)

• Ensure monitoring activities map to the FSRA AML/CFT Rulebook, Conduct of Business (COBS), General (GEN), Prudential (PRU), and Virtual Asset framework obligations.

• Support the Compliance Officer and MLRO in demonstrating effective oversight under FSRA's risk-based supervision model.

• Maintain evidence trails that satisfy FSRA information requests, on-site inspections, and thematic reviews.

• Monitor regulatory change (FSRA consultations, ADGM notices, UAE Federal Decree-Law 20/2018 and its Executive Regulations, MoE/EO AML guidance) and reflect updates in the plan.

Findings, Reporting & Escalation

• Produce clear, board-ready assurance reports with quantified findings, severity ratings, and management action plans.

• Operate a robust issue-management and remediation-tracking framework with escalation protocols for overdue or high-risk items.

• Present monitoring results to Risk Committees, Compliance Committees, and where required the Board/Audit Committee.

• Liaise with Internal Audit and external auditors to ensure complementary (non-duplicative) coverage.

AML/CFT & Financial Crime Assurance

• Test the effectiveness of CDD/EDD, KYC onboarding, periodic review, PEP/sanctions screening, transaction monitoring, and SAR/STR escalation processes.

• Assess suspicious activity identification and reporting effectiveness, including FIU-UAE submission quality.

• Verify Targeted Financial Sanctions (TFS) and asset-freeze controls.

Leadership & Team Management

• Build, mentor, and lead a high-performing assurance team — setting testing standards, quality review, and coaching.

• Foster a culture of challenge, professional scepticism, and integrity, consistent with SMCR conduct expectations.

• Manage resource allocation against the CMAP and ensure delivery within agreed SLAs.

Governance & Continuous Improvement

• Maintain CMAT policies, methodologies, and documentation to an auditable standard.

• Drive automation and data analytics to strengthen monitoring coverage and efficiency.

• Embed lessons learned into first- and second-line processes and training.

Requirements

• Essential

• 7–10+ years in compliance, assurance, internal audit, or regulatory supervision within financial services, fintech, preferably within crypto/VASP environments.

• 3+ years leading teams or workstreams in a second-line or audit function.

• Strong working knowledge of ADGM FSRA rulebooks and the UAE AML/CFT landscape; comparable MAS, HKMA, FCA, or DIFC/DFSA experience will be considered.

• Proven track record designing and executing risk-based compliance monitoring/testing programmes.

• Depth in AML/CFT, sanctions, and financial-crime control testing.

• Excellent written and verbal English; strong report-writing and stakeholder-presentation skills.

Desirable

• CAMS, CGSS, CRMA, CIA, ACCA/ACA, ICA, or equivalent certification

• Prior experience in a regulated crypto/VASP or high-growth fintech.

• Data analytics, SQL, or audit-automation tooling skills.

• Arabic language proficiency (advantageous, not required).