Compliance Head & MLRO, Indonesia

Job description

## **Who We Are** At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: *We Before Me*, *Do the Right Thing*, and *Get Things Done*. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. ## **About the Opportunity** We are looking for an experienced, commercially aware, and regulatory-savvy compliance professional to join us as Head of Compliance and Money Laundering Reporting Officer (MLRO). The role will be instrumental in building the compliance programme from the ground up, and embedding a culture of compliance across the organisation. Broader team management responsibilities will be added in due course for regulatory strategy, operational execution, and governance. ## **What You’ll Be Doing** ### Regulatory Engagement - Serve as the primary point of contact with relevant regulatory bodies. - Ensure the organisation meets all applicable governance requirements, including fit and proper obligations for Approved and Designated Persons. - Monitor and interpret regulatory developments relevant to virtual assets, and advise senior management and the Board accordingly. ### Compliance Programme Development & Management - Design, implement, and maintain a comprehensive compliance framework aligned with local requirements, FATF recommendations, and international best practice for virtual asset service providers (VASPs). - Develop, review, and update all internal policies and procedures covering AML/CFT, KYC, customer due diligence (CDD), enhanced due diligence (EDD), transaction monitoring, sanctions screening, data protection, cybersecurity compliance, and safeguarding of client assets. - Establish and oversee the compliance monitoring programme, including periodic testing, gap analysis, and reporting to senior management and the Board. - Prepare and present regular compliance reports to the Board and relevant committees, including on regulatory changes, compliance breaches, and remediation progress. - Ensure compliance considerations are integrated into new product design and operations from the inception phase by driving solutions that balance commercial outcomes and innovation, while maintaining a robust compliance posture using a clear risk-based approach. - Review technical documentation, user journeys, and product flows to ensure compliance risks are addressed; provide clear, actionable and solution-focused advice during the product lifecycle. - Build and scale compliance policies governing advertising, social media campaigns, influencer partnerships, and product launches. - Partner with Legal, Product, and Marketing teams to operationalize a timely review process for client-facing assets and go-to-market materials. ### AML/CFT & MLRO Duties - Act as the designated MLRO, with full statutory responsibility for overseeing the organisation's AML/CFT framework. - Receive, review, and assess all internal Suspicious Transaction Reports (STRs) from staff, and make informed decisions on whether to file external disclosures with competent local authorities. - Oversee and continuously improve the transaction monitoring programme, with support from global compliance and product functions. - Ensure robust sanctions screening against all applicable lists, including OFAC, UK OFSI, UN, EU, and applicable local sanctions designations. - Oversee customer risk scoring, risk-based KYC/CDD processes, and enhanced due diligence for high-risk customers, politically exposed persons (PEPs), and customers from high-risk jurisdictions. ### Governance & Culture - Act as a key member of the senior leadership team, providing compliance input on new products, services, partnerships, and business initiatives. - Champion a strong compliance culture across the organisation through training, communications, and leadership by example. - Design and deliver AML/CFT and compliance training programmes for all staff, ensuring completion records are maintained. - Ensure that the organisation's compliance obligations are adequately resourced, and advise the Board on staffing, systems, and budget requirements. - Establish and maintain a compliance manual, risk register and oversee the escalation and resolution of compliance incidents and breaches. ### Reporting & Recordkeeping - Prepare and submit all required regulatory reports and notifications to relevant authorities within stipulated deadlines. - Ensure that all compliance records, SAR documentation, KYC files, and transaction monitoring records are maintained in accordance with applicable retention requirements. - Support and facilitate any inspections, supervisory visits, or regulatory examinations. ## **What We Look For In You** - ### Qualifications - Bachelor's degree in Law, Finance, Business, or a related field. A postgraduate qualification is advantageous. - Professional certification in compliance or AML is strongly preferred (e.g. CAMS, ICA Certificate/Diploma in AML or Compliance, CFE, or equivalent). ### Experience - Minimum of 8 years of experience in compliance, AML, or financial crime prevention, with at least 3 years in a senior or leadership compliance role. - Demonstrated in-house experience working within virtual asset service providers (VASPs), cryptocurrency exchanges, fintech firms, or regulated financial institutions. - Prior experience as an MLRO or Deputy MLRO is highly desirable. - Experience engaging directly with financial regulators and the financial intelligence unit - Hands-on experience building compliance programmes from the ground up in a start-up or scaling environment is a significant advantage. - Familiarity with the regional regulatory framework and requirements is strongly preferred. ### Knowledge & Skills - Deep understanding of FATF Recommendations and their application to virtual asset service providers, including the Travel Rule (FATF Recommendation 16) - Strong knowledge of crypto-specific AML typologies. - Proficiency with blockchain analytics and transaction monitoring tools (e.g. Chainalysis, Elliptic, TRM Labs, or equivalent). - Excellent written and verbal communication skills in English and Bahasa Indonesia. - Strong analytical and investigative skills, with the ability to identify and articulate complex risk scenarios clearly. - Demonstrated ability to engage constructively with regulators, external auditors, and law enforcement. - High degree of personal integrity and sound professional judgment. ## **Nice to Haves** - - Experience in cryptocurrency or blockchain compliance programs. - Experience working in a multi-national financial institution setting. - Familiarity with compliance technology and analytics tools. - Prior exposure to multi-jurisdictional compliance oversight. - In-depth knowledge of crypto products, including spot trading, derivatives, staking, lending/borrowing, DeFi, and stablecoins. ## Additional Notes This role will be subject to fit and proper assessment as part of the licensing process. Candidates must be prepared to undergo background checks, provide regulatory questionnaires, CVs, references, and proof of relevant qualifications. Prior enforcement history, regulatory sanctions, or unexplained gaps in professional record may affect eligibility. ## **Perks & Benefits** - Competitive total compensation package - L&D programs and Education subsidy for employees' growth and development - Various team building programs and company event - More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. **If in doubt, please apply directly through our official careers website.** Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's [Candidate Privacy Notice](https://www.okx.com/en-eu/help/okx-candidate-privacy-notice).