Xoxoday - Risk & Compliance Officer

About Us:

We are a fast-growing digital marketplace, connecting users with top brands for gifting, rewards, and loyalty.

As we scale, ensuring platform integrity, regulatory compliance, and fraud resilience is critical.

We're looking for a hands-on Risk and Compliance Officer to help us build a secure, trusted, and compliant ecosystem.

Role Overview:

As our Risk and Compliance Officer (RCO), you will lead our efforts to prevent fraud, ensure regulatory compliance (e.g., data protection, payment regulations), manage operational risk, and uphold brand and partner standards.

Youll work cross-functionally with product, operations, engineering, legal, and customer support to identify and mitigate risks across the business.

Key Responsibilities:

- Develop and maintain a risk register and mitigation framework.

- Identify key risks across fraud, payments, supply chain, legal exposure, and customer abuse.

- Collaborate with fraud analysts, product teams, and vendors to implement controls.

- Ensure compliance with relevant laws and regulations (e.g., AML, GDPR, PCI-DSS, KYC as applicable).

- Lead audits or compliance assessments with partners, banks, and regulators.

- Review and enforce internal policies around data security, vendor management, user verification, and transaction monitoring.

- Oversee fraud detection rules and strategy in collaboration with fraud operations.

- Manage escalation of high-risk transactions, chargebacks, and disputes.

- Create and maintain policies covering refund, dispute, onboarding, payout, and access controls.

- Respond to brand partner or payment provider due diligence requests.

- Serve as the point of contact for legal teams and regulators if needed.

Requirements:

Experience & Background:

- 5+ years of experience in risk management, compliance, or fraud operations (marketplace, fintech, payments, or e-commerce preferred).

- Strong understanding of digital fraud types: refund abuse, gift card fraud, BEC, identity fraud.

- Familiarity with regulatory standards such as GDPR, PCI-DSS, AML/KYC (depending on jurisdiction).

- Experience with fraud tools (e.g., SEON, Sift, Stripe Radar) or rule-based detection systems.

Skills:

- Analytical and detail-oriented; able to audit systems, write policies, and track metrics.

- Strong written and verbal communication skills; able to interact with legal, technical, and customer teams.

- High integrity and discretion; able to handle sensitive data and incidents.

Bonus: Experience working with law enforcement or industry groups on fraud mitigation.

KPIs Youll Influence:

- Fraud rate (as % of transactions).

- Chargeback ratio.

- Dispute resolution time.

- Compliance audit score / readiness.

- Incident response time.