Fintech Business Analyst AML & GRC

About Solidrange

Solidrange is a cybersecurity company based in Riyadh, specializing in developing modern platforms to address cybersecurity and enterprise Governance, Risk, and Compliance (GRC) challenges. The company aims to transform the GRC technology landscape by helping organizations modernize practices and reduce operational overhead. Its mission focuses on reducing human-driven cybersecurity risks, simplifying compliance and risk management, and facilitating business continuity.

The Role: Fintech Business Analyst AML & GRC

Solidrange is seeking a Fintech Business Analyst with expertise in Anti-Money Laundering (AML) and the regulatory environments of Saudi Arabia’s Capital Market Authority (CMA) and Saudi Central Bank (SAMA). This full-time role, based in Riyadh, requires 5-10 years of experience and focuses on product development rather than operational customer onboarding. The analyst will support the design and enhancement of fintech products by translating AML/CFT obligations, user needs, and market requirements into product specifications.

Key Responsibilities

• Elicit, analyze, document, and prioritize business and regulatory requirements for fintech AML and GRC capabilities.
• Translate Saudi CMA and SAMA AML/CFT rules, regulations, circulars, and supervisory expectations into business rules, controls, workflows, and acceptance criteria.
• Analyze AML-related product journeys and capabilities, including configurable KYC/CDD, enhanced due diligence, beneficial ownership, sanctions and PEP screening, transaction monitoring, and regulatory reporting, to define functional requirements and product improvements.
• Facilitate workshops with Compliance, MLRO, Risk, Operations, Product, Engineering, Information Security, Internal Audit, and other stakeholders.
• Develop business requirement documents, process maps, user stories, use cases, data requirements, functional specifications, and test scenarios.
• Support AML risk assessments, control mapping, issue management, remediation tracking, regulatory change assessments, and evidence maintenance within the GRC platform.
• Define and validate data fields, risk-rating logic, customer segmentation, alert scenarios, thresholds, workflow rules, dashboards, and management information requirements.
• Coordinate user acceptance testing, defect triage, requirements traceability, release readiness, and post-implementation validation for AML and compliance features.
• Identify product, control, data, integration, and user-experience gaps; assess their impact and recommend practical fintech product enhancements.
• Maintain clear documentation and support audit, assurance, and regulatory examinations.

Required Qualifications

• Bachelor’s degree in Business Administration, Finance, Information Systems, Computer Science, Cybersecurity, or a related field.
• Demonstrable experience as a Business Analyst or Product Analyst in a fintech, capital markets, investment, payments, RegTech, or other regulated financial services environment.
• Strong AML/CFT domain experience sufficient to shape fintech product capabilities across configurable KYC/CDD, enhanced due diligence, beneficial ownership, sanctions and PEP screening, transaction monitoring, alert investigation, case management, and suspicious activity escalation.
• Mandatory experience working with Saudi CMA and SAMA requirements in a regulated institution, fintech, capital markets business, banking or payments environment, or implementation serving CMA- or SAMA-regulated clients.
• Proven ability to interpret Saudi AML/CFT obligations and applicable CMA and SAMA requirements and translate them into business rules, controls, workflows, data requirements, functional specifications, user stories, acceptance criteria, and traceability matrices.
• Practical GRC exposure within the AML domain, including risk and control mapping, regulatory change assessment, issue management, remediation tracking, control testing, audit evidence, and management reporting.
• Experience supporting UAT, defect management, workflow validation, and cross-functional delivery with compliance, product, engineering, operations, and data teams.
• Strong analytical, documentation, communication, and stakeholder-management skills; professional proficiency in English is required, with Arabic an advantage.
• Ability to work on-site in Riyadh and collaborate closely with Compliance, MLRO, Risk, Product, Technology, and Operations teams.

Preferred Qualifications

• Experience supporting product development in a CMA- or SAMA-regulated fintech, investment platform, bank, payments business, or RegTech/AML solution provider.
• Exposure to Saudi AML/CFT regulatory examinations, compliance monitoring, risk assessments, suspicious transaction reporting processes, or remediation programs.
• Familiarity with AML transaction-monitoring, screening, KYC, case-management, data-analytics, ticketing, or GRC platforms.
• Knowledge of API-driven fintech ecosystems, digital identity and verification services, data lineage, rules engines, configurable workflows, and system integrations.
• Relevant certifications such as ACAMS, ICA, CBAP, ECBA, or a recognized GRC, risk, or compliance qualification are advantageous.

Role Focus

The primary focus of this position is business analysis and product development for fintech AML and GRC capabilities within CMA- and SAMA-regulated contexts. The role connects regulatory obligations and user needs with product discovery, requirements, data, controls, integrations, workflows, testing, release readiness, and continuous product improvement. This is a product- and technology-oriented position that supports the design of customer-onboarding and AML features, but does not involve executing customer onboarding, alert investigations, case handling, or other operational AML activities.