Compliance Technology & Data Officer

About Tuma

Tuma is a regulated international payments company building the future of cross-border money movement across Africa and beyond.

Operating under regulated entities in the UK and Tanzania, Tuma provides remittance, payment gateway, merchant acquiring, SoftPOS, wallet, API and settlement infrastructure for individuals, businesses and financial institutions.

We're looking for someone who understands that modern compliance is powered by technology and data - not spreadsheets.

Role Overview

This is not a traditional compliance role.

You will work at the intersection of Compliance, Risk, Data and Engineering to build automated compliance operations, improve fraud detection, optimise onboarding journeys and support regulatory compliance across our ecosystem.

You will work closely with Product, Engineering and Operations to configure, automate and continuously improve our compliance infrastructure.

Key Responsibilities

Compliance Operations

Customer Onboarding & Due Diligence: Manage individual and corporate onboarding workflows, ensuring strict adherence to established risk tolerances.

• KYC & KYB: Verify individual identities and unmask complex corporate structures to identify Ultimate Beneficial Owners (UBOs).

• Enhanced Due Diligence (EDD): Conduct deep-dive background reviews on high-risk accounts, assessing source of wealth and business legitimacy.

Risk & Alert Screening: Perform continuous monitoring to protect the ecosystem from illicit fund flows.

• Investigations: Clear or escalate automated AML alerts triggered by unusual transaction patterns or velocity anomalies.

• Watchlists: Screen entities against global sanctions, PEP (Politically Exposed Persons), and adverse media databases.

Reporting & Governance:

• SAR/STR Preparation: Investigate, draft, and compile suspicious activity and transaction reports for submission to financial intelligence units.

• Audit Readiness: Maintain clean, detailed compliance documentation to support routine regulatory reporting and independent audits.

Training & Regulatory Intelligence

• Regulatory Scanning: Actively monitor industry news, financial intelligence units, and global regulatory bodies for updates on AML/CFT regulations, emerging typologies, and compliance best practices.

• Knowledge Cascading: Distill complex regulatory changes and industry updates into clear, actionable insights for the wider business, ensuring operational teams understand how shifts impact daily tasks.

• Internal Training Delivery: Assist in the development and delivery of periodic in-house AML/CFT training sessions for existing staff and new hires.

• Training Record Architecture: Own the maintenance of the compliance training log, meticulously tracking session dates, agendas, materials, and employee attendance to guarantee audit readiness.

Compliance Technology

Stakeholder & Vendor Management: Act as the primary internal point of contact for compliance infrastructure, managing relationships with external technology vendors and critical business partners to ensure uptime, cost-efficiency, and strict SLA compliance.

Continuous Improvement & Evaluation: Proactively scout, evaluate, and business-case new compliance technologies, automation features, and industry tools to optimize operational speed and lower overall false-positive rates.

Rule Development & System Optimization: Own the design, configuration, and fine-tuning of the platform's risk logic across all onboarding and transaction monitoring systems:

• Fraud & AML Rules: Develop, test, and deploy targeted rules within platforms like SEON and Onfido to detect identity fraud, account takeovers, and laundering typologies before they impact the business.

• Velocity & Device Intelligence Rules: Configure real-time behavioral parameters based on transaction frequency (velocity triggers) and technical hardware footprints (device fingerprinting, proxy/VPN detection) to catch automated or coordinated attacks.

• Customer Risk Scoring: Build and maintain dynamic risk-scoring models that evaluate a user's country of origin, occupation, expected volume, and behavior to automatically bucket them into Low, Medium, or High risk tiers.

• Merchant & Transaction Monitoring Rules: Calibrate rulesets within transaction monitoring systems (TMS) to spot unusual transaction patterns, while establishing merchant monitoring protocols to ensure corporate partners operate within agreed volume thresholds and risk profiles.