Sr. GRC Analyst, Regulatory ComplianceBenevity is a global enterprise SaaS platform at the intersection of social impact and fintech, powering corporate giving, volunteering, and grants programs for nearly 1,000 enterprise clients and enabling billions in charitable capital to reach nonprofits and communities worldwide. That unique combination of financial services and social mission creates a compliance profile that is anything but ordinary. The Sr. GRC Analyst will own, among other things, the governance layer of Benevity's AML compliance program, including the policy framework, risk-based assessments , and training architecture translating regulatory obligations into documented, operational controls capable of withstanding regulatory scrutiny.
Reporting to the Sr. Manager, GRC and working in close partnership with other internal teams, you will author and maintain Benevity's AML program documentation, lead the program effectiveness review, build and deliver the annual compliance training curriculum, and own the company's FINTRAC compliance governance structure and examination readiness posture. You will serve as the second-line interface with our Fraud and Finance teams on operational AML matters and keep a watchful eye on cross-border regulatory developments, including BSA, Fintrac and FinCEN, ensuring the business is never caught off guard by a shifting regulatory horizon.
What you'll do:AML Compliance Program Governance- Own Benevity's AML compliance program as the second-line governance function, maintaining the policy framework, risk-based assessment methodology, and program documentation in alignment with PCMLTFA requirements.
- Lead the biennial program effectiveness review as required under PCMLTFA s.9.6, coordinating with internal stakeholders to assess and evidence program adequacy.
- Maintain MSB registration standing and support the CCO operating cadence in partnership with the General Counsel.
- Manage the AML compliance documentation suite, ensuring currency and consistency across the document suite, including being audit-ready at all times.
FINTRAC Regulatory Engagement & Examination Readiness- Own Benevity's FINTRAC examination readiness posture, maintaining a continuous state of preparedness that withstands regulatory scrutiny.
- Coordinate remediation evidence development and closure in partnership with our Fraud and Finance teams, ensuring all examination findings are addressed with documented, defensible evidence packages.
- Develop and maintain an examination response strategy, including communication and escalation protocols for regulatory engagement events.
- Serve as a primary coordination point for FINTRAC inquiries, supported by internal and external AML counsel as appropriate.
Policy Authoring & Risk-Based Methodology- Author and maintain core AML compliance program documents, including the AML/ATF policy, risk-based approach methodology, and supporting procedures, ensuring alignment with regulatory expectations and Benevity's operational realities.
- Conduct and document risk-based assessments of Benevity's ML/TF exposure, incorporating product, client, geographic, and delivery channel risk factors.
- Develop supporting procedures for elevated-risk client and product scenarios in coordination with our Fraud and Finance teams and Legal.
- Ensure documentation reflects the current state of operations and remains actionable rather than aspirational.
Compliance Training Design & Delivery- Design, build, and deliver Benevity's annual AML compliance training program, calibrated by role and function to reflect actual risk exposure.
- Maintain training completion records and reporting to support examination readiness and demonstrate regulatory compliance.
- Develop targeted content for functions with elevated AML exposure, including client operations, finance, and onboarding.
- Assess training effectiveness and iterate on curriculum to reflect regulatory developments and lessons learned from operational events.
Regulatory Horizon Scanning & Advisory- Monitor and synthesize regulatory developments across FINTRAC, FinCEN, BSA, OFAC,, providing timely horizon scanning outputs to GRC leadership and the General Counsel.
- Track regulatory guidance, enforcement trends, and examination priorities that affect Benevity's business model, client base, and charitable disbursement operations.
- Advise the business on the compliance implications of product changes, new market entry, and client onboarding scenarios, translating regulatory risk into actionable guidance.
Tooling, Automation & Advisory- Leverage AI tools and automation as a force multiplier, accelerating policy gap analysis, regulatory monitoring, evidence packaging, and training development to scale program output without scaling headcount.
- Maintain compliance program documentation and workflow tracking in OneTrust, ensuring the GRC toolset reflects the current state of the AML program.
- Contribute to Benevity's broader GRC program as a subject matter expert, supporting cross-functional audits, control testing, and regulatory filings as needed.
- Provide internal advisory support to Legal, Finance, and People on compliance program governance matters, including policy acknowledgment, training requirements, and incident escalation.
What you'll bring:- 5+ years in AML compliance or financial crime risk management, ideally within a fintech, payments, or financial services environment.
- Deep working knowledge of PCMLTFA, FINTRAC regulatory requirements, and the AML compliance examination process.
- Demonstrated experience authoring AML compliance program documentation, including policy, risk-based assessments, procedures, and training curricula, that meets regulatory standards and holds up under examination.
- Familiarity with BSA, FinCEN, and OFAC frameworks and their applicability in a cross-border, multi-jurisdiction context.
- Experience preparing for or supporting regulatory examinations, with the ability to organize evidence and coordinate stakeholders under deadline pressure.
- Strong writing and communication skills, with the ability to produce compliance documentation that is clear, precise, and defensible.
- Comfort working across organizational boundaries, particularly with operational teams and Legal, where the lines between program governance and execution need to stay well-defined.
- A demonstrated interest and track record in leveraging AI and automation as a force multiplier, streamlining compliance operations, accelerating routine workflows, and expanding program capacity without proportional headcount growth.
- Familiarity with GRC tooling such as OneTrust is an asset.
- CAMS, CGSS, or equivalent AML professional certification is preferred.
