Senior Compliance Manager

Backbase — Senior Compliance Manager, Amsterdam - Compliance

Located in Amsterdam, our EMEA HQ offices are a stone’s throw away from the beautiful NEMO Science Museum, and the Amsterdam Central train station. Famous for its breathtaking architecture, canals, and over 881,000 bikes, Amsterdam is a city that’s easy to fall in love with.

As an IT Governance, Risk and Compliance (GRC) Manager, you enable Backbase in conducting its business in full compliance with all relevant national and international laws and regulations. This also includes professional standards, accepted business practices, internal policy standards and IT Security frameworks such as SOC2, ISO27001 and PCI-DSS etc. requirements. You will focus strategically on setting up and driving our AI Governance frameworks.

A key part of the role is to embed Compliance into the way Backbase builds and sells its products, working closely with Product, Engineering and Sales to translate regulatory requirements into pragmatic product guardrails, design principles and customer-facing positions. The role is expected to balance regulatory rigor with commercial and product realities, enabling innovation rather than operating primarily as a control or approval function.

In addition, you will help shape an AI-native Compliance function, identifying where AI and automation can materially improve the speed, quality and scalability of compliance activities. This includes redesigning workflows, introducing AI-supported controls and monitoring, and reducing manual effort while maintaining appropriate human oversight and accountability.

There is both an ethical component and a pragmatic approach to compliance that this role requires to help the organization manage risk and build trust with our Customers. The Senior IT GRC Manager must possess a strong understanding of the fast-paced FinTech environment, paired with the professional presence to lead customer-facing trust and security conversations. This is an exciting role that allows for growth and development in the area of Compliance. You will play a pivotal part in developing this role and influencing a culture of AI Compliance across Backbase. You will report directly to the VP Legal & Compliance and assume day-to-day management of a wide range of Compliance activities and implementation initiatives.

What you'll do

Functional/ Technical Skills

• Support design, implementation and strategic management of IT Controls & Compliance Frameworks for an international organisation, taking ownership of AI Governance frameworks (e.g. NIST AI RMF, EU AI Act, ISO 42001).
• Act as a strategic compliance partner to Sales and as a senior client-facing compliance representative, engaging directly with clients and prospects on regulatory, AI governance, security and compliance matters and helping navigate these topics throughout complex enterprise sales cycles.
• Ensure compliance with the industry best security practices within SaaS environments.
• Manage and coordinate customer and independent third-party attestations as part of the contractual obligations and certification requirements.
• Support Third-Party Risk assessments and regular assurance program
• Prior experience working with GRC tools and platforms
• Ability to analyse and translate laws, regulations and technical requirements into commercially focussed business processes
• Ability to execute and report status on Risk Assessment and Risk Mitigation Program metrics.
• Proficient at maintaining policies and procedures as part of the Policy Governance Framework and coordinating that with other departments.
• Drive the development of an AI-native Compliance operating model, proactively identifying opportunities to use AI, agents and automation across activities such as regulatory monitoring, control testing, evidence gathering, policy management, risk assessments, customer questionnaires and compliance reporting.

Business, product and industry knowledge

• Ability to integrate in an Agile/Scrum working environment to drive teams.
• Knowledge of multiple security and privacy frameworks, Third-party risk, outsourcing and banking regulations, etc.
• Knowledge of Secure-SDLC tooling and design
• Knowledge of modern cloud technologies (AWS, Azure) and risks associated with Software-as-a-Service model.
• Knowledge of Open Banking / PSD2 is an added advantage
• Knowledge of the requirements of ethics & compliance programs in international business
• Strong understanding of how enterprise software products are designed, developed, released and commercialised, with the ability to integrate compliance considerations into product roadmaps and development processes without unnecessarily slowing innovation.
• Ability to understand the commercial context of customer requirements and distinguish between genuine regulatory requirements, customer risk preferences and contractual asks, allowing Backbase to take informed and proportionate positions.

Complexity & Problem Solving

• Proven ability to lead tactical compliance setup and operations
• SME with the ability to give concise and to-the-point compliance advice
• Proactive & analytical program management approach.
• Able to distinguish between areas requiring strict controls and areas where a more proportionate, principles-based approach is appropriate.
• A builder mindset: capable not only of operating existing compliance processes, but of challenging and redesigning them through technology, automation and AI.

Collaborations and Interactions

• Establish strong working relationships with Product, Engineering, Security, Legal and Sales, acting as an embedded business partner rather than a downstream compliance reviewer.
• Build credibility with senior internal stakeholders and customers by combining regulatory expertise with an understanding of Backbase's products, technology and commercial model.

Who you are

• Minimum of 8 years of relevant working experience in the practical implementation of Compliance programs in an international environment, with practical experience or strong working knowledge in AI Governance frameworks.
• Experience supporting enterprise Sales or customer-facing compliance discussions, ideally with regulated financial institutions.
• Evidence of an AI-first / automation mindset: you actively look for ways to simplify, automate or redesign compliance processes rather than scaling through additional manual effort.
• Commercially minded and comfortable making risk-based judgments rather than defaulting to a purely restrictive interpretation of compliance requirements.
• Bachelor’s degree required; - Academic degree desired in the area of IT Security, Risk Management, Cyber Security, Information Security.
• Fluent English - written and spoken required (mandatory)
• Senior professional certifications desired (e.g. CISM, CRISC, CISSP, or AI certifications like IAPP AIGP) or willingness to obtain them.
• Experience with managing in a functional way (not hierarchical)
• Ability to work with the latest tech stack (Latest Azure Services, Grafana, Elastic Cloud, Open Source tooling, Dependency Track, Trivy etc. - Security Tools)

Key benefits

You own what you ship

Real ownership means real responsibility. From day one, you set the pace, make the decisions, and see your work land where it matters. You drive the outcomes, you celebrate the wins.

The work is the standard

We built something that didn't exist before - an AI-native Banking OS where humans and AI agents work side by side, at scale, inside real banks. We raise the bar because we've seen what's possible when you don't settle.

Ambition without ego

You'll work with people who've shipped things most thought couldn't be done. Direct, down-to-earth, no egos. The kind of team where the best idea wins and everyone's genuinely glad when it does.

Real AI, running in real banks

We're not waiting for AI to be ready. It already is - running inside banks, serving customers, solving problems that matter, out in the real world today.

Grow while you build

Annual learning budget, global exposure, and work that moves you forward. Your growth and our mission go hand in hand.

17 offices. One mission.

Hybrid model, no micromanagement, offices across the world. The mission is clear. Where you do your best work is up to you.

Wellness that goes the distance

Real support built for the long game. We invest in the people who build the product, not just the product.