Skip to content
← Back to job listings

Chief Compliance Officer

infinit · Luxembourg

Compliance & ContractsExecutive LevelExternal listingfull-time4 days ago

About The Role

What about us?

Launched in 2023, INFINIT is a fast-growing fintech scale-up operating in multiple countries across Europe and Americas.

At INFINIT we are on a mission to reshape the future of SMEs with AI at the forefront. Our all-in-one operating system has banking at its core, and empowers small business owners and their teams to seamlessly manage and optimize every aspect of their business with AI agents.

By focussing on specific industries, INFINIT delivers tailored, high-value solutions, while building innovative AI products to further unlock significant growth opportunities for our customers. INFINIT operates globally, with ambitions to further expand its footprint to redefine the fintech landscape for SMEs worldwide.

Join us on the INFINIT journey as we revolutionise the SME economy and drive meaningful impact through innovation 🚀

The Role

As the Chief Information Security Officer at INFINIT, you will be the single point of contact for the Board and the CSSF on all ICT, security and operational resilience matters for our CSSF-licensed Payment Institution in Luxembourg. In a rapidly evolving regulatory environment like DORA, CSSF Circular 25/880 and PSD3 in progress, you will design and build a robust, proportionate IT and security governance framework from the ground up, suited to our size and risk profile.

The Group has a clear ambition to expand its services across Europe. As we will passport our licence and establish operations in new EU jurisdictions, this role will carry responsibilities beyond the CSSF perimeter including engagement with local regulators and compliance with jurisdiction-specific ICT and security requirements.

You will also operate within the Group’s existing infrastructure and technology team, coordinating closely with the Group IT function while building the PI’s own regulated governance framework.

In accordance with DORA and CSSF Circular 25/880, this role requires the formal designation of the appointee as the entity’s ICT Risk Management responsible before the CSSF. The incumbent must be able to represent the entity during on-site and remote supervisory reviews conducted by the CSSF.

What do we want to achieve together?

Regulatory Compliance

  • Ensure full compliance with Luxembourg and EU regulatory requirements applicable to payment institutions
  • Implement and maintain compliance policies, procedures and the compliance monitoring plan
  • Lead all regulatory reporting and manage supervisory interactions with the CSSF
  • Translate regulatory developments (PSD3, AMLR, DORA, GDPR) into concrete operational implementation
  • Act as the institution's Authorised Manager (dirigeant agréé) with the CSSF where required

AML/CFT Oversight

  • Oversee the AML/CFT framework in accordance with Luxembourg law and CSSF Regulations
  • Supervise KYC/KYB processes and transaction monitoring
  • Manage suspicious transaction reporting (STRs) to the competent authorities
  • Conduct annual AML risk assessments and lead staff training programmes

Compliance Governance

  • Build and maintain the compliance function as a second line of defence
  • Prepare regular compliance reporting to the Executive Committee and Board
  • Oversee outsourcing governance from a compliance perspective
  • Manage relationships with external auditors, legal counsel and regulators

What do you need to be successful in this role?

  • Minimum 8–10 years of experience in compliance within a regulated financial institution (payment institution, e-money institution, bank or regulated fintech)
  • Proven experience interacting directly with the CSSF and holding or being eligible for an Authorised Manager mandate
  • Strong knowledge of the Luxembourg regulatory framework: Law of 10 November 2009 (PSD2), Law of 12 November 2004 (AML/CFT), CSSF Circulars 12/552, 22/806 and 20/750, 26-906
  • Solid grasp of the European framework: PSD2/PSD3, EBA Guidelines (Internal Governance, ML/TF Risk Factors), DORA and GDPR
  • Experience in licence applications or regulatory remediation is a strong plus
  • Ability to build and operate a compliance function independently in a scaling environment
  • Excellent communication skills and ability to engage with Board-level stakeholders
  • Fluent English required; French considered a strong asset

What will you find working at INFINIT?

  • Competitive Salary and Equity : We offer highly competitive salaries and a stake in our success with share options because we're building this together.
  • Diverse and Inclusive Team : Join a dynamic and international team in excess of 8 nationalities. You'll have the chance to work with experienced professionals from around the world, fostering a rich learning environment.
  • Inspiring Mission : We are dedicated to revolutionizing business financing and making a positive impact on the European economy. Your work at INFINIT will have a lasting effect on businesses and communities.
  • Health and Well-being: Your health matters to us. You will have access to top-quality Medical & Mental Health Insurance.
  • Quality Time Together : We foster a sense of community with annual gatherings and bi-weekly office team gatherings. You're more than welcome to join us for quality time.
  • Personal Time Off : Enjoy flexibility with your personal time off.
  • Flexibility and Ownership : We trust our team and we are goal-oriented. Enjoy the flexibility of hybrid working 3 days a week in our Luxembourg office and 2 days at home.

This is an external listing. JobSpring does not represent or verify the employer. Report this listing