Collection Agency Compliance Manager

Important: Regulatory Compliance Role — Not IT or Cybersecurity

This position requires deep, hands-on expertise in consumer debt collection law, CFPB regulation, and multi-state collection agency licensing. Proficiency in cybersecurity frameworks, IT governance, or infosec compliance does not satisfy the requirements of this role. Only candidates with direct ARM industry experience will be considered.

Why This Position Matters

Kompato AI is an AI-native collections agency, built to operate at national scale with compliance embedded into every layer of the technology stack. We are backed by leading institutional investors and part of a global AI group serving major financial institutions. Kompato AI only collects in jurisdictions where it holds an active, valid collection agency license. Compliance is not a checkbox here — it is a core product capability.

We are hiring a Compliance Manager who will serve as the company's Qualifying Individual (QI) — the named, personally accountable license holder across all jurisdictions where Kompato AI is licensed to operate. This is not a policy maintenance role. You will work hands-on with AI-powered compliance tools, automated monitoring, and data-driven workflows, embedding compliance directly into how the business and technology operate.

You will own the Compliance Management System and the Third-Party Risk Management program, partnering closely with Legal, Product, Operations, and Client Success in a fast-growing, high-expectation environment.

Qualifying Individual (QI) — Personal AccountabilityAs QI, your name and credentials will be formally associated with the company's active collection agency licenses. Maintaining eligibility to serve in this capacity across all licensed jurisdictions is an ongoing condition of employment.State licensing authorities require QI candidates to complete state-mandated background screening as part of the licensing process. These are requirements of the licensing authorities, not discretionary company requirements. Full details, including your rights under applicable federal and state law, will be provided at the offer stage.

What You Will Do

Multi-State Licensing & Qualifying Individual Obligations

• Serve as the named Qualifying Individual on collection agency licenses across all jurisdictions where Kompato AI is licensed to operate, including any jurisdictions added as the company's footprint expands.
• Complete state-mandated background screening required by applicable licensing authorities as part of the QI designation process.
• Submit and maintain personal credentials, documentation, and filings required by each state licensing authority on an ongoing basis.
• Manage the full license lifecycle across all active jurisdictions: new applications, renewals, amendments, and QI substitution filings.
• Monitor QI eligibility requirements across all licensed jurisdictions and proactively ensure ongoing personal and organizational compliance.
• Maintain active NMLS registration and profile compliance where required.

Compliance Management System

• Own and evolve the Compliance Management System — monitoring cadences, issue tracking, escalation workflows, and executive and board-level reporting.
• Maintain audit-ready policies, SOPs, vendor files, and documentation for internal, regulatory, client, and partner audits as a standing operational state — not a periodic preparation exercise.
• Monitor federal and state regulatory developments; assess business impact; implement policy and procedural updates on a defined review cycle.
• Design and deliver compliance training for operations, product, and client-facing teams, translating regulatory requirements into clear, practical guidance.

Third-Party Risk Management

• Lead the company's Third-Party Risk Management program: vendor due diligence, compliance risk assessments, ongoing monitoring, and documentation.
• Maintain a vendor risk register and escalation framework for elevated-risk vendor relationships.
• Conduct initial and periodic vendor reviews covering regulatory compliance posture, data handling practices, financial stability, and regulatory history.

Operational & AI-Embedded Compliance

• Embed compliance controls into AI-driven workflows and automated processes — not as a downstream review, but as a built-in component of how the technology operates.
• Review and approve AI model use cases prior to deployment; assess automated decisioning for consistency with consumer protection standards, including ECOA and UDAAP.
• Partner with Engineering to automate compliance functions: validation notice generation, opt-out enforcement, Mini-Miranda delivery, and call recording disclosures.
• Own the consumer complaint management system: intake, classification, root-cause analysis, and remediation tracking. Conduct regular UDAAP risk reviews of AI model outputs and consumer-facing communications.
• Support internal and external audits — regulatory, client, and partner.

Federal Regulatory Compliance

• FDCPA (15 U.S.C. § 1692):  Own all policies governing collector conduct, communication timing, validation notices, dispute handling, cease-and-desist protocols, and Mini-Miranda delivery.
• Regulation F (12 CFR Part 1006): Maintain and enforce the company's Reg F communication framework, including call frequency limits, electronic communication consent architecture, and model validation notice deployment.
• FCRA / FACTA: Oversee all credit reporting obligations, Metro 2 compliance, dispute handling procedures, and furnisher accuracy requirements.
• TCPA: Build and enforce a consent management framework for all outbound call and text campaigns; manage opt-out registries; coordinate with dialer operations on applicable dialing compliance requirements.
• UDAAP: Conduct regular risk reviews of collection scripts, AI model outputs, and consumer-facing communications for unfair, deceptive, or abusive practices.
• CFPB Guidance: Monitor supervisory bulletins, advisory opinions, and enforcement actions and brief leadership on material operational impacts.

What You Need To Have

Required Regulatory Fluency

The following represent working knowledge requirements — not familiarity. Candidates are expected to have direct, operational experience applying these frameworks in an ARM industry context.

FDCPA Regulation F FCRA FACTA TCPA UDAAP CFPB Exam Procedures ECOA GLBA NMLS Mini-Miranda Metro 2 State Collection Agency Licensing

REQUIRED CERTIFICATIONRMAI CCCP (Certified Compliance and Collection Professional)or demonstrated equivalent (e.g., ACA FACAI, CRCM with direct ARM experience). Candidates without this certification must provide a detailed equivalency case.

Required

• 7–10+ years of compliance experience in the ARM industry, collections, or closely related regulated financial services — with direct, hands-on experience in a licensed collection agency environment. The most recent 2 years of experience must be directly relevant to the ARM industry; candidates whose ARM experience is not current will not be considered.
• Prior experience serving as a Qualifying Individual, License Contact, or Responsible Individual on a state-issued collection agency license is strongly preferred. Candidates who have been personally named on active licenses will be prioritized.
• Willingness and eligibility to serve as QI from day one, including completing all state-mandated licensing requirements, as an ongoing condition of employment.
• Strong working knowledge of FDCPA, Regulation F, TCPA, FCRA, UDAAP, and CFPB guidance as applied operationally in a debt collection environment.
• RMAI CCCP or equivalent certification.
• Active NMLS Individual Registration or demonstrated ability to obtain one prior to start date.

Preferred

• Comfort with compliance platforms, dashboards, and automation tools in an AI-native operating environment.
• Hands-on experience designing and managing TPRM programs, including vendor monitoring and audit-ready documentation practices.
• Experience integrating compliance logic directly into technology platforms and automated workflows — not only manual review.
• Strong written and verbal communication skills — you will draft policies, train cross-functional teams, and prepare executive and board-level briefings.
• Comfort operating at pace in a high-ownership environment where compliance is a strategic, not support, function.

How To Apply

Application Instructions

Qualified candidates should submit a resume and a brief cover statement addressing: (1) your years of direct ARM industry experience and the compliance functions you owned; and (2) any prior QI