Compliance and Risk Officer

• This is a fully remote role

About Ceffu

Ceffu is a leading institutional-grade digital asset custody platform, offering secure, compliant, and scalable solutions for enterprises, hedge funds, and financial institutions. Our mission is to provide cutting-edge security and infrastructure to support the seamless integration of blockchain technology into institutional finance.https://www.ceffu.com/about-us

Job Summary

Ceffu is seeking an experienced Risk & Compliance Officer to support our growing footprint in Bhutan's Gelephu Mindfulness City (GMC).

This critical role ensures full compliance with anti-money laundering and counter-financing of terrorism (AML/CFT) laws in accordance with regulations issued by the Gelephu Financial Services Authority (GFSO), the Financial Intelligence Unit (FIU) of Bhutan, and other relevant GMC bodies overseeing Virtual Asset Service Providers (VASPs) and institutional custodians.

In addition to the MLRO and compliance functions, this role is responsible for the identification, assessment, monitoring, and reporting of all material risks—including operational, financial, compliance, strategic, affecting the business. This position plays a pivotal role in maintaining a robust risk management framework within a rapidly evolving international special administrative region.

Key Responsibilities

1) Compliance & MLRO Obligations:

• Act as the officially appointed Compliance Officer & Money Laundering Reporting Officer (MLRO) for Ceffu's GMC entity.
• Maintain a direct reporting line to the Board of Directors or its designated compliance committee, in full alignment with GMC regulatory expectations.
• Ensure the effective implementation and oversight of the company's AML/CFT compliance program, including Customer Due Diligence (CDD), Enhanced Due Diligence (EDD) for institutional clients, transaction monitoring, and Suspicious Transaction Reporting (STR).
• Monitor and ensure adherence to applicable GMC laws, royal decrees, GFSO mandates, and global FATF guidance relevant to digital asset custody and VASP operations.
• File STRs/SARs with the relevant Financial Intelligence Unit and coordinate all responses to official regulatory info or document requests.
• Lead the Compliance Monitoring Program and document compliance training programs for local staff to ensure high regulatory awareness and operational alignment.
• Maintain complete, accurate compliance documentation and audit trails for regulatory inspections.
• Serve as the primary point of contact and liaison officer with GFSO, local regulatory bodies, and financial intelligence authorities.

2) Risk Management:

• Identify, measure, and assess all relevant operational, financial, legal/compliance, IT systems, and strategic risks across local business activities.
• Develop and maintain risk management frameworks, policies, and risk assessment tools tailored to digital asset custody and institutional crypto services.
• Monitor risk exposures on an ongoing basis to identify emerging threats, counterpart risk, or operational vulnerabilities.
• Collaborate cross-functionally with internal stakeholders to enforce effective control metrics.
• Establish appropriate risk mitigation strategies and coordinate with internal stakeholders for execution.

Requirements

• Minimum 6 years of experience in AML/CFT compliance, financial crime, or legal/regulatory roles coupled with 5+ years of experience in risk management within the financial services industry.
• Strong understanding of AML/CFT regulations, global FATF standards, and the regulatory environment governing digital assets.
• Proven experience handling suspicious activity monitoring, institutional client onboarding, and direct regulatory filings.
• Strong knowledge of enterprise risk management principles (e.g., ISO 31000, COSO) and the ability to evaluate risks associated with IT infrastructure, hot/cold wallet custody systems, and blockchain interactions.
• High ethical standards, sound analytical judgment, and effective cross-functional leadership skills.
• Professional fluency in written and spoken English

Preferred Qualifications

• Certified AML professional (e.g., CAMS, ICA International Diploma, or equivalent).
• Prior experience serving as an officially recognized MLRO or Compliance Liaison Officer with a financial regulator or VASP.
• Practical knowledge of blockchain transaction monitoring and analytics tools (e.g., Chainalysis, Elliptic, TRM Labs).
• Experience navigating fast-paced, multi-jurisdictional fintech or crypto-custody environments.