Reporting Officer (AML/Regulatory) — with Internal Audit Function
Company: Windsor First Bulgaria Limited EOOD (acwires group)
Location: Sofia, Druzhba 2 (near metro) | Type: Full-time
Role summary
This role is independent from day-to-day compliance execution. You will own regulatory/AML reporting and run an internal audit program to test whether compliance and operations are working as designed. You are the control verifier: evidence, reporting quality, audit findings, and board-level visibility.
Key responsibilities — Reporting Officer
Own AML/CTF regulatory reporting workflows: suspicious activity escalation governance, filing coordination (where applicable), and periodic compliance reporting packs.
Maintain regulatory reporting calendar and evidence library for supervisory requests/exams (FSC/KFN and other relevant authorities).
Ensure recordkeeping and audit trails meet required retention and retrieval standards (KYC files, Travel Rule records, monitoring cases).
Produce structured management/board reporting: key risk indicators, compliance incidents, remediation status, and emerging risk notes.
Key responsibilities — Internal Audit (in-role)
Build a lightweight internal audit plan (quarterly/bi-annual) covering: onboarding files, sanctions screening, monitoring/alerts, Travel Rule adherence, vendor controls, and governance processes.
Execute testing (sampling, walkthroughs, control effectiveness checks), document findings, rate severity, and track remediation to closure.
Maintain independence: audit findings go to senior management/board with clear recommendations and deadlines.
Support external audits/exams by ensuring audit readiness and evidence quality.
Requirements
5–10+ years in AML compliance, regulatory reporting, audit, or risk (financial services/fintech preferred).
Practical experience running audits/testing or second-line assurance.
Strong writing skills: clear reports, evidence discipline, and escalation judgement.
English required; Bulgarian strongly preferred.
Nice to have
Experience liaising with regulators/examiners; crypto/VASP/CASP exposure; ICA/CAMS or audit certifications.
Location: Sofia, Druzhba 2 (near metro) | Type: Full-time
Role summary
This role is independent from day-to-day compliance execution. You will own regulatory/AML reporting and run an internal audit program to test whether compliance and operations are working as designed. You are the control verifier: evidence, reporting quality, audit findings, and board-level visibility.
Key responsibilities — Reporting Officer
Own AML/CTF regulatory reporting workflows: suspicious activity escalation governance, filing coordination (where applicable), and periodic compliance reporting packs.
Maintain regulatory reporting calendar and evidence library for supervisory requests/exams (FSC/KFN and other relevant authorities).
Ensure recordkeeping and audit trails meet required retention and retrieval standards (KYC files, Travel Rule records, monitoring cases).
Produce structured management/board reporting: key risk indicators, compliance incidents, remediation status, and emerging risk notes.
Key responsibilities — Internal Audit (in-role)
Build a lightweight internal audit plan (quarterly/bi-annual) covering: onboarding files, sanctions screening, monitoring/alerts, Travel Rule adherence, vendor controls, and governance processes.
Execute testing (sampling, walkthroughs, control effectiveness checks), document findings, rate severity, and track remediation to closure.
Maintain independence: audit findings go to senior management/board with clear recommendations and deadlines.
Support external audits/exams by ensuring audit readiness and evidence quality.
Requirements
5–10+ years in AML compliance, regulatory reporting, audit, or risk (financial services/fintech preferred).
Practical experience running audits/testing or second-line assurance.
Strong writing skills: clear reports, evidence discipline, and escalation judgement.
English required; Bulgarian strongly preferred.
Nice to have
Experience liaising with regulators/examiners; crypto/VASP/CASP exposure; ICA/CAMS or audit certifications.
