Overview

Description: Company DescriptionWe are a technology-driven company. We built our business with the purpose of empowering people and improving their organizations, one payment at a time. We started our journey by providing smart and simple payment processing tools and products but haven't stopped there. We are backed by a team of world-class experts and the best technology talent, and we are committed to helping more new businesses get started, increase the revenues of our customers, and bridge the gap between online merchants and payment solutions. Our mission is to give companies the tools they need to change the future of their business.Job SummaryPayarc is seeking an experienced General Counsel - Risk and Compliance to serve as the company's senior legal authority and trusted advisor to executive leadership. This role is responsible for all legal, regulatory compliance, and risk management functions across the organization. The General Counsel will lead efforts related to PCI DSS compliance, SOC 2 Type II readiness, high-risk merchant program governance, and regulatory oversight within the fintech and payment processing industry. The ideal candidate combines deep legal expertise with a practical, business-forward mindset and thrives in a fast-paced, high-growth environment. This role reports directly to the CEO and is a key member of Payarc's executive leadership team. Requirements: Legal Leadership & Corporate GovernanceServe as the primary legal advisor to the CEO, President, and executive leadership team on all legal, regulatory, and compliance matters.Draft, review, and negotiate a wide variety of contracts including partner agreements, ISV and ISO agreements, vendor contracts, SaaS agreements, and employment-related documents.Manage all corporate governance activities including entity maintenance, board documentation, and corporate records.Oversee and manage outside counsel relationships and legal spend across litigation, regulatory, and transactional matters.Support M&A activities, due diligence, and any capital-related transactions as needed.Regulatory Compliance & Risk ManagementLead and manage all compliance obligations across PCI DSS, SOC 2 Type II, AML, KYC, OFAC, and applicable state and federal financial regulations.Serve as the company's primary point of accountability for regulatory examinations, audits, and inquiries from card brands (Visa, Mastercard, Discover, Amex), sponsor banks, and regulatory bodies.Develop and maintain a comprehensive compliance framework, including policies, procedures, controls, and internal audit functions.Monitor evolving regulations applicable to payment processing, merchant acquiring, and fintech, and proactively implement necessary compliance updates.Partner with the Risk Operations, Underwriting, and Finance teams to manage high-risk merchant programs and ensure appropriate legal safeguards are in place.Oversee response strategies for chargebacks, fraud-related legal matters, and sponsor bank compliance requirements.Data Privacy & Information Security LegalOversee compliance with data privacy laws including GDPR, CCPA, and other applicable state privacy regulations.Partner with the VP of Information Security to ensure legal alignment on data handling, breach response, and cybersecurity governance.Draft and maintain privacy policies, data processing agreements, and vendor data security addenda.Litigation & Dispute ManagementManage all litigation, regulatory proceedings, and dispute resolution activities, including coordination with outside counsel.Assess legal risk across business operations and develop proactive strategies to minimize exposure.Serve as a decision-maker on escalated merchant, partner, and agent disputes with legal implications.Other duties as assigned.Skills / CompetenciesDeep knowledge of payment processing regulatory frameworks including PCI DSS, card brand rules, and sponsor bank compliance requirements.Strong understanding of fintech, merchant acquiring, an