Compliance and Risk Management Specialist

About Aptia

Aptia is a new force in the employee benefits and pensions administration services, on a mission to change the world of administration for the better.

In an underserved market, with huge potential for growth, Aptia serves 1,100 clients in the US and UK markets and will be supported by shared services in India and Portugal - helping more than seven million people live healthier and happier lives.

And we are expanding. Aptia Group is not only fuelled by our investors' backing but also by our commitment to foster the growth and success of our people. At Aptia, we're investing heavily in learning and development, paving unique career paths for our colleagues.

Specialist. Responsive. Thoughtful. These aren't just words; they are the backbone of our business. Our team embodies our values daily, to surpass client expectations, evolve constantly and nurture genuine relationships for the long-term.

If you want to join a sector that never stands still, in a company culture that is agile and that will invest in your career development, we could have your perfect next role.

Job requirements

The US Risk & Compliance Specialist will play a crucial role in ensuring our organization operates in accordance with all relevant laws, regulations and internal policies.

What you will be doing:

General Compliance activities

• Monitor compliance with all relevant laws, regulations and internal policies. Keep up-to-date with changes in regulations and industry best practices.
• Assist in maintaining and managing a conflicts of interest register.
• Provide guidance and training to employees on Compliance matters.
• Investigate and address any Compliance violations or concerns.
• Collaborate with other departments to ensure compliance with cross-functional requirements.
• Develop and implement required country (US) and role-specific training plans.

Privacy activities

• Guide the US business and supporting functions to complete required Records of Processing Activities (RoPA) and/or updates to existing RoPAs. Train colleagues on RoPA responsibilities as necessary.  Act as a SME for US RoPAs.
• Guide the US business and supporting functions on requirements for Privacy Impact Assessments (PIAs).  Ensure projects and processes are supported by DPIAs, and act as a gatekeeper for privacy-related change initiatives. 
• Regularly review and refine standard risks and controls for data protection processes.
• Monitor data protection KPIs/KRIs.
• Maintain Data Retention & Destruction Schedule for core applications.

Risk Management activities

• Work with the 2nd Line of Defense (2LOD) in the review and distribution of Compliance policies, procedures and guidelines across the Business.
• Execute Risk and Control Self Assessments (RCSAs)
• Regularly review and refine risk management KPIs/KRIs and reporting frequency.
• Assist in maintaining and managing the conflicts of interest register.

Financial Crime activities

• Serve as the main point of contact for colleagues within the Business for financial crime related advice.
• Work with the 2nd Line of Defense (2LOD) in the review and distribution of financial crime policies, procedures and guidelines across the Business.
• Conduct risk assessments to identify potential financial crime risks and vulnerabilities as necessary.
• Monitor and investigate suspicious financial crime activities, transactions and customer behaviors.
• Investigate and address any financial crime compliance violations or concerns.
• Coordinates with internal stakeholders to ensure compliance with relevant financial crime laws and regulations.
• Design and deliver targeted financial crime prevention training programs for employees.
• Carry out Sanctions checks as required; review alerts to discount potential matches and escalate to the 2LOD when required.

What we are looking for:

• Minimum of 3 years in compliance, preferably in the health administration industry.
• Experience in conducting risk assessments and developing risk mitigation strategies.
• Experience in devising role-specific training plans.
• Health administration/insurance industry experience.
• Strong project management skills.
• Ability to work under pressure and to manage sensitive and confidential information.
• Excellent verbal and written communication skills, with strong attention to detail.
• Excellent analytical and investigative skills.
• Strong organizational and problem-solving skills.
• Ability to communicate complex concepts and findings to both technical and non-technical stakeholders.
• Proven track record of w