Compliance Officer (Regulatory Focus), Cryptoasset Regulation

Our client is a global fintech operating at the intersection of crypto and traditional payments. It builds products that help people and businesses buy, sell, and exchange cryptocurrency, serving millions of customers across 180+ countries. It is self-funded, with a distributed team across Europe, Ukraine and the US.

It holds a MiCA CASP authorisation and a Payment Institution (PSD2) licence in the EU, one of a small group in Europe holding both, alongside US and Canadian registrations.

This role owns the cryptoasset side of the regulatory pipeline: the UK FCA cryptoasset file, the post-authorisation implementation of the MiCA CASP licence, and the regulatory design of the TFR/Travel Rule and blockchain-analytics frameworks that sit underneath both.

You report to the Global Chief of Compliance. The core of the work is regulatory drafting and analysis: policies, risk assessments, governance documents, application narratives and responses to regulators, written independently and defensible under regulatory challenge. This is not an MLRO or transaction-monitoring role; day-to-day AML operations sit with the MLRO and the analyst team.

• The live UK FCA cryptoasset file (MLRs 2017): RFI cycles, supplementary submissions and remediation through to decision, and the transition to the incoming FSMA cryptoasset authorisation regime

• Post-authorisation implementation and evidencing of the MiCA CASP licence, including obligations and undertakings towards the national regulator

• The MiCA policy set: conflicts of interest, complaints handling, custody and client-asset segregation, market abuse detection and reporting (Art. 92), prudential safeguards, outsourcing (Art. 73), and white-paper obligations where relevant

• Regulatory design and regulator-facing documentation of the TFR/Travel Rule framework (originator/beneficiary data, self-hosted wallets, counterparty CASP due diligence) and of blockchain-analytics controls (methodology, thresholds, exposure attribution). Operation of the tooling stays with the AML team

• DORA/ICT-risk documentation for the CASP perimeter, with the ICT function

• Regulatory assessment of new cryptoassets, chains, custody arrangements and crypto counterparties

• Gap analyses, thematic reviews, remediation plans, and verification that approved controls operate in practice

• 5+ years in regulatory compliance (authorisation, licensing, policy and governance drafting), including 3+ years inside a cryptoasset business licensed or authorised by a national competent authority. Time at unregulated, registration-only or offshore operators does not count towards this requirement

• Hands-on experience of a cryptoasset authorisation framework (MiCA/CASP, UK FCA cryptoasset registration/authorisation, or a comparable VASP regime), taken through submission and regulator review

• Proven ability to author substantive regulatory documents independently: you can name what you wrote, for which regulator, and what the regulator pushed back on

• Working command of the TFR/Travel Rule in practice, not in theory

• Practical understanding of blockchain analytics and how exposure attribution is evidenced to a regulator

• Working knowledge of DORA as applied to CASPs, AMLD/FATF standards, sanctions, outsourcing and governance requirements

• Ability to navigate primary legislation and guidance independently, and to tell mandatory requirements apart from risk appetite

• Fluent professional English with excellent written drafting

• European engagement location with a minimum four-hour overlap with the European working day

• An authorisation granted on a file you drafted

• VASP-to-CASP transition experience under MiCA

• Awareness of the AMLA/AMLR transition

• Exposure to a licensed VASP/CASP regime outside the EU (e.g. Crown Dependencies, Switzerland, Singapore, Hong Kong), meaning regimes with a formal authorisation and supervisory process, not offshore or registration-only regimes

• ICA Diploma in GRC, CAMS or comparable