Internal Control Officer

Tags: Web3 Jobs • Web3 Compliance Jobs • Cryptocurrency Aml Jobs • Web3 Policy Jobs • Blockchain Operations Jobs • Blockchain Remote Jobs • Web3 Web3 Jobs

About Bitstack

It all started with an idea in 2021. Initially built to democratize Bitcoin in France, Bitstack has gone from a simple product that invests spare change in bitcoin, to a crypto-native bank bringing a better way to save, spend, and grow money to our 300K+ users. We want to rebuild finance from the ground up to empower people to achieve financial freedom by participating in a more open and inclusive financial system. We’re a small, ambitious team of operators. We believe in moving fast, sweating the details, and creating products people truly love. At Bitstack, you’ll have the opportunity to shape not just our products, but the culture and practices of our entire organization. Bitstack is backed by YC, leading VCs like 13books Capital, Stillmark, Serena, and many more. We are building a product our users love and we are just getting started!

The role

Bitstack is a licensed CASP under MiCA and an AMF-registered entity. Our compliance framework isn't a checkbox, it's a competitive advantage.

As we grow, we need someone to make sure our AML/CFT controls are airtight, evolving, and battle-tested.

You'll work directly with our Head of Risk & Compliance to run our 2nd-level control program and be the person who connects the dots between risk, operations, and regulators.

What You’ll Be Doing

• Running our 2nd-level control programDesign and execute permanent controls that verify our AML/CFT framework is working in practice. You'll oversee how 1st-line teams carry out their own controls, document findings, identify gaps, and push remediation plans all the way to closure.

• Keeping our risk mapping sharpWork alongside the Head of Risk & Compliance to maintain and update our AML/CFT risk mapping annually : covering clients, products, distribution channels and geographies. You'll also map risks tied to our key partners and vendors, including Xpollens and our custodians.

• Owning regulatory deliverablesBe the person who produces solid, well-documented inputs for AMF, ACPR and TRACFIN. You'll contribute to internal risk committees, prepare KPIs and KRIs, and support reporting to senior leadership and the supervisory body.

• Collaborating across the businessPartner closely with operational teams (LoD1) to strengthen controls at every level. Compliance here isn't siloed, you'll be a real cross-functional player.

• Building compliance cultureCo-develop AML/CFT training modules, run sessions for the whole company, and help new joiners get up to speed on our internal control framework from day one.

What We’re Looking For

• 4-6 years of experience in AML/CFT compliance, internal control, or risk ideally within a bank, EMI, crypto/fintech, or regulatory body ;

• Solid hands-on knowledge of the AML/CFT framework: risk mapping, permanent controls, suspicious transaction reporting ;

• Familiarity with the French regulatory landscape (AMF, ACPR, TRACFIN) and MiCA is a strong plus ;

• Experience operating in a 2nd line of defense role, with exposu…