Compliance Manager

About MozartoMozarto is a payment orchestration platform enabling merchants and platforms toseamlessly connect with multiple payment providers, optimise transaction routing, andmanage payments globally. As a PCI DSS Level 1 compliant infrastructure provider, Mozartomaintains the highest standards of security, regulatory compliance, and operationalresilience across its payment ecosystem.Role OverviewThe Compliance Manager leads and oversees Mozarto’s regulatory compliance framework,internal governance policies, and audit readiness. This role is responsible for establishing,creating, and maintaining robust compliance structures, ensuring strict adherence tostandards including DORA, ISO 27001, SOC 2, PCI DSS, GDPR, and AML. The ComplianceManager works cross-functionally across risk operations, security, engineering, and productteams to safeguard operational resilience and compliance integrity.Key ResponsibilitiesCompliance Leadership & Policy Governance:Policy Creation & Maintenance: Draft, structure, create, and maintain updated internalcompany policy documents, procedures, and governance frameworks.Framework Compliance: Ensure complete, ongoing company-wide compliance with keyregulatory and industry frameworks, including DORA, ISO 27001, SOC 2, PCI DSS, GDPR,and AML.Regulatory Oversight: Monitor regulatory developments, card network rules, and globalpayment requirements to proactively adapt internal controls.Audit, Certification & ControlsLead internal and external audit processes and certifications (DORA, ISO 27001, SOC 2,PCI DSS and more).Define control requirements, organise evidence gathering, and drive remediationactions to resolution.Conduct structured compliance reviews and gap analyses across payment infrastructureand workflows.Risk Management & Incident Handling:Manage compliance incident investigations, regulatory breaches, and policy violations.Partner closely with Security, Legal, and Engineering teams to coordinate incidentresponses and enforce corrective measures.Oversee vendor and third-party due diligence, monitoring ongoing compliance andoperational risk obligations.Operational Excellence & Tooling:Maintain detailed compliance knowledge bases and documentation using Jira andConfluence.Optimise compliance workflows, drive automation, and integrate compliance controlsinto product development life cycles