Team Lead — Compliance Monitoring, Assurance & Testing (CMAT)

Responsibilities

Compliance Monitoring & Testing Programme

- Own and maintain a risk-based annual Compliance Monitoring & Assurance Plan (CMAP) , refreshed on risk assessment outcomes, FSRA thematic reviews, and changes in regulatory posture.

- Design and execute control testing across AML/CFT, sanctions, market abuse, client-asset safeguarding, complaint handling, outsourcing, and technology/cyber governance.

- Apply full-cycle assurance methodology : scoping → walkthroughs → sampling → testing → root-cause analysis → findings rating → remediation tracking → closure validation.

- Deliver thematic deep-dives aligned to FSRA supervisory priorities (e.g., transaction monitoring effectiveness, Travel Rule compliance, EDD for high-risk clients, market abuse surveillance).

Regulatory Alignment (FSRA)

- Ensure monitoring activities map to the FSRA AML/CFT Rulebook, Conduct of Business (COBS), General (GEN), Prudential (PRU), and Virtual Asset framework obligations.

- Support the Compliance Officer and MLRO in demonstrating effective oversight under FSRA's risk-based supervision model.

- Maintain evidence trails that satisfy FSRA information requests, on-site inspections, and thematic reviews .

- Monitor regulatory change (FSRA consultations, ADGM notices, UAE Federal Decree-Law 20/2018 and its Executive Regulations, MoE/EO AML guidance) and reflect updates in the plan.

Findings, Reporting & Escalation

- Produce clear, board-ready assurance reports with quantified findings, severity ratings, and management action plans.

- Operate a robust issue-management and remediation-tracking framework with escalation protocols for overdue or high-risk items.

- Present monitoring results to Risk Committees, Compliance Committees, and where required the Board/Audit Committee .

- Liaise with Internal Audit and external auditors to ensure complementary (non-duplicative) coverage.

AML/CFT & Financial Crime Assurance

- Test the effectiveness of CDD/EDD, KYC onboarding, periodic review, PEP/sanctions screening, transaction monitoring, and SAR/STR escalation processes.

- Assess suspicious activity identification and reporting effectiveness, including FIU-UAE submission quality.

- Verify Targeted Financial Sanctions (TFS) and asset-freeze controls.

Leadership & Team Management

- Build, mentor, and lead a high-performing assurance team — setting testing standards, quality review, and coaching.

- Foster a culture of challenge, professional scepticism, and integrity , consistent with SMCR conduct expectations.

- Manage resource allocation against the CMAP and ensure delivery within agreed SLAs.

Governance & Continuous Improvement

- Maintain CMAT policies, methodologies, and documentation to an auditable standard.

- Drive automation and data analytics to strengthen monitoring coverage and efficiency.

- Embed lessons learned into first- and second-line processes and training.

Requirements

Essential

- 7–10+ years in compliance, assurance, internal audit, or regulatory supervision within financial services, fintech, preferably within crypto/VASP environments.

- 3+ years leading teams or workstreams in a second-line or audit function .

- Strong working knowledge of ADGM FSRA rulebooks and the UAE AML/CFT landscape; comparable MAS, HKMA, FCA, or DIFC/DFSA experience will be considered.

- Proven track record designing and executing risk-based compliance monitoring/testing programmes .

- Depth in AML/CFT, sanctions, and financial-crime control testing .

- Excellent written and verbal English; strong report-writing and stakeholder-presentation skills.

Desirable

- CAMS, CGSS, CRMA, CIA, ACCA/ACA, ICA, or equivalent certification

- Prior experience in a regulated crypto/VASP or high-growth fintech.

- Data analytics, SQL, or audit-automation tooling skills.

- Arabic language proficiency (advantageous, not required).