We’re looking for an experienced Business Analyst to build the entire AML & Compliance framework from scratch in Colombia — from defining the risk-based approach to implementing operational practices. You’ll shape how our bank operates within the local regulatory landscape and ensure that global best practices are embedded in every process.
You’ll be responsible for launching a full AML & Compliance function in a new market and ensuring it operates seamlessly across teams and systems.
Challenges that await you
Conducting a gap analysis of Colombian regulatory requirements and designing the entire compliance architecture — policies, procedures, and control points.
Building end-to-end AML processes: sanctions and PEP screening, transaction monitoring, case management, and suspicious activity reporting.
Selecting and integrating third-party tools for screening, monitoring, and case management; defining data and system requirements and ensuring technical integration.
Establishing internal control processes and governance (RACI), setting KPIs, and implementing regular reporting and audits.
Collaborating with Legal, Risk, Product, Data/Engineering, and Operations to align on compliance goals and ensure audit readiness.
Designing scalable workflows that balance regulatory rigor with product agility and customer experience.
Managing discovery, writing BRDs/PRDs, user stories, and acceptance criteria; supporting development, UAT, and releases.
Leading the adaptation of global compliance frameworks to fit the Colombian market, while creating reusable templates for future LATAM expansions.
What makes you a great fit
4+ years of experience in business analysis or product management within fintech or banking.
Strong background in AML & Compliance: RBA, KYC/CDD, sanctions & PEP screening, transaction monitoring, suspicious activity reporting, internal audits.
Proven ability to gather and document requirements (BRDs, user stories, use cases) and design business processes (BPMN 2.0, UML).
Experience in launching or localizing compliance frameworks in new jurisdictions is a strong plus.
Proficiency in roadmapping, prioritization, and backlog management (RICE / WSJF / MoSCoW).
Confident communication and stakeholder management skills — from internal teams to external regulators.
Tools: Jira, Confluence, Miro; basic SQL or spreadsheet skills for data validation.
Fluent English and readiness to work in a Spanish-speaking environment.
Analytical mindset, attention to detail, and the ability to translate complex regulatory requirements into executable processes.
Our ways of working
Innovative Spirit: A commitment to creativity and groundbreaking solutions.
