Senior Compliance Manager / Principal Officer (PO)

As Senior Compliance Manager and Principal Officer at tothemoon technologies pvt Ltd, you will be appointed and registered with FIU-IND under the PMLA and serve as the exchange's Money Laundering Reporting Officer (MLRO). You will be a management-level officer exclusively responsible for compliance with Chapter IV of the PMLA, working full-time and exclusively for the company based in India. This role shapes compliance across a VDA (Virtual Digital Asset) service provider under FIU-IND's AML and CFT Guidelines for Reporting Entities Providing Services Related to VDAs, updated 8 January 2026.

What you'll do

• Ensure full compliance with the PMLA, the PML (Maintenance of Records) Rules 2005, and FIU-IND's AML/CFT/CPF guidelines for VDA service providers, acting as the primary point of contact with FIU-IND for registration, FINGate/FINnet filings, notices, information requests and inspections.
• Own the AML/CFT/CPF Policy, KYC Policy, client risk classification framework and supporting SOPs, and obtain Board approval for them.
• Track regulatory changes from FIU-IND, the Ministry of Finance, CBDT, RBI, CERT-In and law enforcement advisories, and implement them within set timelines.
• Implement sanctions and asset-freezing obligations under UN Security Council lists, Section 51A of the UAPA and Section 12A of the WMD Act.
• Handle law enforcement requests, account freeze and unfreeze orders, and cybercrime referrals within required timelines.
• Support FIU-IND registration and renewal readiness, including live demonstrations of KYC, monitoring, blockchain analytics, Travel Rule and screening systems.
• Own the alert governance framework: rule design, thresholds, risk scoring, alert disposition and documented reasons for both reporting and non-reporting decisions.
• Lead investigations into unusual activity such as structuring, layering, rapid in-out flows, mule accounts, P2P and OTC abuse, and third-party funding.
• Identify potential market abuse, including wash trading, spoofing, pump-and-dump schemes and coordinated trading across accounts.
• Oversee on-chain monitoring with tools such as Chainalysis, TRM Labs or Elliptic, so the origin and destination of VDAs can be traced.
• Manage wallet screening, unhosted wallet risk assessment and EDD, and block exposure to mixers, tumblers and anonymity-enhancing tokens.
• Run Travel Rule compliance so originator and beneficiary data is transmitted in real time, not after the fact.
• Conduct surprise checks and periodic reviews of alert queues and monitoring data to find gaps.
• Oversee KYC, CDD, EDD, beneficial ownership checks, PEP screening and adverse media screening for individual and corporate clients.
• Ensure onboarding controls meet current FIU-IND standards, including liveness-checked selfies, geo-location and IP capture, OTP verification of mobile and email, and penny-drop bank verification.
• Run the Board-approved client risk classification, reviewed at least every six months, with CDD refreshed half-yearly for high-risk clients and annually for others.
• Manage high-risk customer reviews, account restrictions, exits and escalations.
• Conduct the enterprise ML/TF/PF risk assessment at least once a year and before launching new products, tokens or delivery channels.
• Ensure records are kept for the periods required under the PMLA, with tamper-proof audit trails for verification events, timestamps and authentication logs.
• Prepare and file Suspicious Transaction Reports (STRs) without undue delay and within prescribed timelines, with documented grounds for suspicion.
• File the monthly report to FIU-IND and any other reports prescribed under the PMLA and PML Rules, including cash transaction reports where applicable.
• Coordinate the annual independent audit of AML/CFT/CPF controls, the CERT-In empanelled cybersecurity audit, and internal and statutory audits as they relate to AML.
• Maintain investigation files, compliance documentation and audit trails that stand up to regulatory inspection.
• Track regulatory and audit observations through to closure with owners, deadlines and corrective action plans.
• Build and lead the KYC, AML, transaction monitoring and compliance operations teams, including hiring, training and performance management.
• Present AML/CFT reviews to the Board preferably quarterly, and an annual report on programme effectiveness, STR summaries, policy changes and FIU-IND advisories.
• Build compliance dashboards and MIS on alert volumes, ageing, STRs, high-risk clients, screening hits and audit actions.
• Run AML/CFT training for all staff at onboarding and at least yearly, with role-specific training for operations, support and tech.
• Embed compliance controls across spot trading, futures and derivatives, OTC, INR and crypto deposits and withdrawals, token listings and any new VDA services.
• Work with technology, operations, finance, legal and business teams so new features are reviewed for ML/TF risk before launch.
• Take part in all high-level decisions that assess ML/TF/PF risk in products, services and delivery channels, with adequate staff and resources.

What you bring

• Minimum 5-7 years of relevant, hands-on AML/CFT and PMLA compliance experience in a regulated financial institution.
• Practical experience in transaction monitoring, STR investigations, KYC/CDD/EDD, and sanctions and PEP screening.
• Direct experience of FIU-IND reporting, including drafting and filing STRs on FINnet/FINGate.
• Sound working knowledge of the PMLA, PML Rules, FIU-IND guidelines for VDA service providers, UAPA and WMD Act sanctions obligations, and FATF standards.
• Experience handling regulatory inspections, audits or law enforcement requests.
• Experience leading or supervising a KYC, AML or compliance team.
• Graduate degree in law, commerce, finance or a related field.
• Based in India and able to work full-time and exclusively for tothemoon technologies pvt Ltd, with no concurrent engagement elsewhere.
• Clean regulatory and professional record, with no adverse findings related to financial crime.
• Sound, independent judgement and the integrity to escalate or decline business on compliance grounds.
• Clear written communication for regulators, the Board and investigation files.
• Analytical skill with transaction and on-chain data; comfort with SQL or Excel-based analysis is an advantage.
• Ability to work with engineering and product teams to turn regulations into system controls.

Nice to have

• Prior Principal Officer, Deputy PO or MLRO experience at a VDA exchange, bank, NBFC, payment aggregator or stockbroker.
• Hands-on use of blockchain analytics tools such as Chainalysis, TRM Labs or Elliptic.
• Working knowledge of Travel Rule solutions, unhosted wallet controls and crypto-specific typologies.
• Experience with market surveillance for trading platforms, including derivatives.
• Certifications such as CAMS, CAMS-FCI, CCAS, ICA diplomas or IIBF AML/KYC certification.
• Professional qualification such as LLB, CA, CS or MBA.
• Experience building compliance programmes, SOPs and MIS from scratch in a fast-growing company.
• Familiarity with global VASP regimes such as the UAE (VARA), EU (MiCA) or FATF peer guidance.

About tothemoon technologies pvt Ltd

tothemoon technologies pvt Ltd is a VDA service provider regulated under FIU-IND's AML and CFT Guidelines for Reporting Entities Providing Services Related to VDAs. The Principal Officer role works closely with the Designated Director, who holds overall responsibility for PMLA compliance at Board level, but these are distinct positions.