Compliance Operations Specialist

Hi, We're AffiniPay!
AffiniPay is a leading fintech company, based out of Austin, Texas. As the market leader in professional services payments and practice management software, AffiniPay's tech products serve legal, accounting, architectural, engineering and construction firms. AffiniPay has been recognized as one of Inc. 5000's fastest growing companies in the U.S. for 13 years in a row, and as a result, our teams continue to grow as well!
The Compliance Operations Specialist will play a key role in supporting AffiniPay's compliance and privacy operations, ensuring adherence to regulatory frameworks, privacy laws, and industry best practices. This position will focus on maintaining AffiniPay's compliance posture across products like LawPay, CASEpeer, Docketwise, and Woodpecker by aligning internal processes with PCI DSS, SOC 2, HIPAA, CCPA, CPRA, and other privacy laws.
This role will work cross-functionally with Legal, Product, IT Ops, and Sales teams to embed compliance requirements into business processes and ensure customer data protection. The Compliance Operations Specialist will also oversee risk management activities, audit preparation, and privacy program initiatives to support AffiniPay business goals.
What You'll Do

• Ensure adherence to key regulatory frameworks, including PCI DSS, SOC 2, HIPAA, and privacy laws like CCPA and CPRA.
• Collaborate with internal teams to prepare for and support audits, including PCI DSS, SOC 2, and other assessments.
• Manage compliance obligations related to secure file transfers, customer data handling, and industry-specific guidelines (e.g., ACH for digital payments, Bar association rules for legal service products).

• Manage and respond to Data Subject Access Requests (DSARs) and other privacy-related inquiries in collaboration with Legal.
• Administer privacy tools (e.g., DataGrail) to oversee consent management, data classification, and privacy workflows.
• Work closely with Legal to maintain compliance with privacy laws, ensuring all contractual obligations regarding data privacy are met.

• Maintain and update the Risk Register, tracking compliance risks and coordinating timely mitigation with internal teams.
• Conduct regular risk assessments, including Third-Party Risk Management (TPRM) and internal evaluations.
• Align risk management findings with regulatory requirements, implementing improvements to support business operations.

• Serve as the primary compliance contact for Legal, Product, IT Ops, and Sales teams, ensuring alignment with compliance objectives.
• Collaborate with Product and Engineering teams to embed compliance and privacy requirements into workflows, particularly during new product development cycles.
• Partner with internal teams to promote a culture of compliance and awareness through training and enablement.

About You

• 3+ years of experience in compliance management, privacy operations, or a related regulatory role.
• Familiarity with regulatory frameworks such as PCI DSS, SOC 2, HIPAA, and privacy laws like CCPA and CPRA.
• Hands-on experience with compliance tools (e.g., DataGrail, Vanta) and risk management processes.
• Proven ability to manage and track compliance obligations, including audit preparation and evidence collection.
• Strong understanding of privacy principles and processes for handling DSARs, consent management, and data classification.
• Strong knowledge of regulatory compliance frameworks and data privacy principles.
• Ability to collaborate cross-functionally and communicate effectively with both technical and non-technical stakeholders.
• Experience managing risk assessment processes and maintaining compliance-related documentation.
• Excellent organizational skills and attention to detail, ensuring readiness for audits and regulatory requirements.
• Strong problem-solving and analytical skills, with the ability to implement practical solutions.
• This position is preferred to sit in Austin, Texas.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Privacy Professional (CIPP)
• Payment Card Industry Professional (PCIP)
• Certified Information Systems Auditor (CISA) or equivalent.

Our Story
Founded in 2005, AffiniPay's mission is to build technology products that helps professionals focus on the work they love. As the leader in the professional payments industry, AffiniPay's products serve legal, accounting, architectural, engineering and construction firms. Our portfolio of software solutions include MyCase (Legal Practice Management Software), CASEpeer (Practice Management for Personal Injury Firms), Docketwise (Immigration & Case Management Software), and Woodpecker (Legal Document Automation). Our portfolio of payment solutions include LawPay (Legal), AffiniPay for Associations (Associations), CPACharge (Accounting Professionals), and ClientPay (Architect, Engineer, and Construction). AffiniPay's products serve over one hundred thousand users, and we are noted as one of the fastest growing tech companies in Austin, Texas. We are constantly looking for talent to join our team to continue playing a key part in unlocking our potential.
Diversity, Equity & Inclusion at AffiniPay
At AffiniPay, we recognize that innovation occurs with a strong team of people who are diverse in background, personality, talent and ideas. Experience comes in many forms and ensuring a diverse and inclusive workplace where we continue to learn from each other is an integral part of our culture. We are committed to creating a welcoming and transparent environment for all that embraces those differences through education, equal access to opportunities and information, inclusionary programs, and community outreach.
Benefits that Benefit You!
As a people first culture, we believe it is important that our teammates are happy, healthy, and productive. In order to best support that, AffiniPay provides award-winning benefits that can make a difference in your life - right now and for the future.

• All employees receive fully covered medical, dental and vision coverage - Choose from our 2 available health plans based on what fits you and/or your family!
• Have some fur babies? - We offer them insurance too!
• RELAX and enjoy your time away with our flexible paid time off policy!
• We will help you plan for your future - 401K, or RRSP if in Canada, with a company match
• Competitive compensation packages that include mid-year and end-of-year bonuses and equity options for all full-time employees
• Health Wellness Program that includes nutrition consultations, mental health apps, and access to discounted memberships
• Have plans to grow your family? - Parental resources, including 16 weeks of paid time off for primary caregivers
• Professional development opportunities including mentorships, leadership programs and our AffiniPayU courses
• We believe it is important to give back with our Matching Gift Program and organized activities focused on donations, volunteerism and supporting the local communities throughout the country
• D&I initiatives provide educational opportunities regarding multicultural issues, tolerance, and celebrating diversity among our entire staff
• An incredible, in-office experience at our headquarters in Austin and San Diego including free lunch delivery, a fully stocked kitchen, and some "sweet" surprises for those afternoon pick-me-ups

Security Advisory
Our hiring teams at AffiniPay are dedicated to recruiting top talent that share our passion for serving the professional services industry through innovative financial technology. As such, our Talent Acquisition Team only follows legitimate hiring practices. We will always communicate with our candidates using emails with the AffiniPay domain and will never ask for sensitive/personal data during the application process. All interviews take place over phone call, Zoom/Google Meet or in person. All offers are communicated verbally by our Talent Acquisition Specialists with a written offer letter as a follow up.