Compliance and Risk Officer – Digital Assets / Crypto

About the role

Ceffu, an institutional-grade digital asset custody platform serving enterprises, hedge funds and financial institutions, is looking for an experienced Compliance and Risk Officer. The role ensures full compliance with AML/CFT rules under MASAK and other Turkish authorities, and covers the identification, assessment, monitoring and reporting of operational, financial, compliance, strategic and IT risks. It is based in Istanbul and requires a Turkish citizen.

Key responsibilities

• Act as the officially appointed MASAK Compliance Officer and report directly to the Executive Board or its designated members.
• Oversight of the AML/CFT programme, including customer due diligence, transaction monitoring and suspicious transaction reporting (STR).
• Maintain compliance with Turkish laws and MASAK regulations for CASPs, and liaise with MASAK, the Central Bank of Turkey and other regulators.
• Develop and maintain a risk management framework and policies, and build risk assessment tools suited to a crypto asset service provider.
• File STRs with MASAK, coordinate responses to regulator requests, and prepare regular risk reports for senior management, internal audit and regulators.
• Lead compliance training, keep accurate compliance records, and work with Compliance, IT Security, Internal Audit and Operations.

Required profile

• Turkish citizen based in Istanbul; valid MASAK Compliance Officer license and registration.
• Bachelor's degree in law, finance, economics, business administration or a related field.
• Minimum 6 years in AML/CFT, financial crime or regulatory roles, plus 5+ years in risk management within MASAK-regulated financial services.
• Proven experience in suspicious transaction monitoring, regulatory filings and risk reporting to senior stakeholders.
• Fluent Turkish and strong written and spoken English.
• Preferred: CAMS/ICA certification, prior MASAK liaison experience, and knowledge of blockchain analysis tools such as Chainalysis or TRM Labs.

Required skills

• Deep knowledge of Turkish AML legislation, MASAK and SPK regulations and international digital asset compliance standards.
• Risk management frameworks such as ISO 31000 and COSO.
• Ability to assess IT system, cybersecurity, digital asset and blockchain risks.