Financial Services
Active

Andrea Elliott

Chief Risk, Compliance, and Ethics Executive | Responsible & Resilient AI | Payments & Fintech

About Me

Leader of global risk, regulatory, and governance programs across payments, fintech, SaaS, and cloud-native platforms with unique combination of corporate compliance, law firm, and judicial experience. Architect of enterprise-scale risk and AI governance frameworks aligned to CFPB, NIST, ISO, and global regulatory standards. I believe the strongest organizations embed governance, risk, and compliance into everyday operations, innovation, and growth. When companies treat these areas as parallel or separate workstreams, it creates friction and blind spots. Integrated risk, however, becomes the structural support that empowers a business to move faster, scale responsibly, and avoid costly, preventable failures. From leading global risk and compliance functions, to driving enterprise transformation in fintechs, I build unified governance models, modernized ERM frameworks, and guide organizations through consent orders, regulatory scrutiny, and high growth expansion. I advise Boards and C suites through their most consequential decisions, ensuring that risk is understood as a lever for competitive advantage, not a constraint. My goal is simple: to drive organizational resilience, ethics, and scalability in a manner that protect the enterprise while enabling it to move boldly toward its future.

Jurisdiction

United States

Experience

Seniority LevelExecutive
Years of Experience10-15 years
Current StatusActive
Founder & Managing PartnerEMG Advisory Partners
2024 - Present

Advising organizations on risk, compliance, AI, governance, and ethics. Focused on helping leaders translate principles into operational frameworks as AI capabilities evolve. Engaged in research, writing, and industry events related to responsible AI and national security.

Chief Compliance OfficerACI Worldwide
2024 - 2025

Built and scaled 40+ member global risk and compliance organization. Replaced ineffective program with unified enterprise operating model and embedded risk ownership across Legal, Sales, Product, and Technology. Implemented modern governance and GRC infrastructure that delivered measurable transparency into key risks, consent orders, and regulatory obligations while providing deep expertise across AI governance, regulatory directives, KRIs, and enterprise training.  Promoted to architect and lead unified global Risk and Compliance function, building enterprise operating model by consolidating previously siloed ERM, regulatory compliance, data privacy, cybersecurity, business continuity, 3rd-party risk, industry scheme compliance, and customer assurance into 1 strategic, integrated program, framework, and team.  Delivered 3-year strategic roadmap driving cultural transformation and embedding risk accountability across global operations, producing measurable improvement in audit performance and marked elevation in control maturity.  Led consent-order (CFPB and State AGs) success end-to-end by cultivating trust and partnership with regulators and Board, driving swift, consistent compliance performance, negotiating favorable terms, designing compliance plan, executing all remediation within 24 months of 5-year orders with 0 violations / reportable incidents, and converting remaining 3 years to steady-state maintenance.  Advised board and executive Leadership on risk-aligned growth strategies, accelerating market expansion while preserving full regulatory compliance and strengthening long term enterprise resilience.  Developed company AI Governance Framework, Policy, and enforced execution, embedding ethical, transparent, and regulatory-compliant practices across all AI initiatives. o Aligned governance controls with NIST AI Risk Management Framework and global standards (e.g., EU AI Act, ISO/IEC 42001), implementing robust risk assessment protocols, bias detection mechanisms, and lifecycle monitoring. o Established audit-ready controls and training programs, reducing compliance risk and positioning organization as leader in responsible AI.  Led global ethics program, instilling culture of uncompromising integrity and enforcing zero-tolerance standards that fortified organizational accountability, elevated employee engagement, and deepened client trust.

Head of Enterprise RiskACI Worldwide
2024 - 2024

Led end-to-end transformation of ERM framework (“ERM 2.0”) and redefined governance, processes, policies, standards, controls, resourcing, and technology to establish modern, enterprise-wide risk capability aligned with strategic objectives and risk appetite.  Architected and deployed unified governance model that cascaded across Compliance, Cybersecurity, Business Continuity, 3rd- and 4th-Party Risk, and Data Privacy, integrating these functions with first-line processes and elevating enterprise accountability.  Advised product and business leaders through ERM Product Change Oversight process, ensuring new products, strategic initiatives, and material changes were aligned with enterprise strategy, risk appetite, and long-term value creation.  Drove continuous improvement and control enhancement by developing forward-looking risk strategies that improved organizational resilience, operational discipline, and enterprise decision-making.

Senior Director - Risk & ComplianceFiserv
2021 - 2022

Owned risk and compliance oversight for multiple product lines, including Debit, Networks, ATM, Managed Solutions, and Fraud Risk. Managed and mentored team.  Built high-risk markets strategy and program enabling new business growth in verticals such as online gambling, gaming, cannabis, and cryptocurrency, unlocking new revenue pathways and creating differentiated competitive advantage while maintaining uncompromising risk and compliance rigor.  Drove enterprise-wide risk transformation by elevating key business partners into strategic risk champions grounded in trust and partnership, while leading and energizing cross-functional teams to accelerate impact and deliver sustained, high-performance results.  Increased efficacy and reach of compliance function by embedding compliance as core enabler of responsible growth and driving enterprise-wide culture of ownership and accountability.

Vice PresidentHiscox Business Insurance
2017 - 2021

Provided risk and compliance advisory and consultative services on strategic business projects to ensure new processes, procedures, platforms, and products align and achieve organization’s overall goals.  Designed and executed 3-year enterprise risk strategy, amplifying first-line accountability and shifting organization toward a more proactive, forward-looking risk posture.  Developed and presented risk analyses and recommendations to board and executive Leadership, shaping enterprise priorities, influencing strategic direction, and driving unified action on most consequential risks.  Built emerging risk process across all business units and created strategies converting early-stage risks into enterprise opportunities and competitive advantage.  Led US Covid-19 regulatory response by spearheading submissions of regulatory filings, creation of Risk and Control Registers, regulatory assessments, risk policies and dashboards, and risk and compliance training throughout enterprise.

Manager - Enterprise Risk & ComplianceAutomatic Data Processing (ADP)
2016 - 2017

Built and executed risk and compliance strategies to drive organizational transformation. Developed and executed multi-year strategic plans, built enterprise-wide frameworks, and advised senior executives and board on risk, performance, and investment decisions.  Identified disruptions to business models created by changes in regulatory environment and provided strategic direction to limit exposure and close identified gaps, fortifying enterprise resilience, safeguarding critical revenue streams, and positioning organization to anticipate and capitalize on regulatory shifts rather than react to them.  Developed enterprise dashboard measuring achievement and execution against company’s strategy, leading to simplification, innovation, and growth throughout organization.  Provided advisory services and recommendations to Audit Committee regarding 5-year audit plan and strategy, driving tighter alignment between audit priorities, enterprise risk exposure, and long-term strategic objectives.  Created and implemented risk and controls framework that was applied to each business unit across enterprise, establishing unified risk management standard and eliminating inconsistent practices across global operations.  Designed, implemented, and led Global Risk Assessment process; managed 38 auditors to conduct assessment annually, delivering enterprise-wide view of risk exposure that informed executive and board-level decision-making, elevated organizational risk maturity, and enabled more data-driven, forward-looking strategic choices.  Introduced and created risk modeling scenarios to perform root cause analyses for top enterprise risks, enabling earlier detection of systemic issues and preventing significant financial and operational exposure.

Legal AssociateBovis, Kyle, Burch, and Medlin
2013 - 2013

Gained diverse litigation experience, including insurance, surety, corporate law, contracts, medical malpractice, intellectual property, labor and employment law, and premises liability.

Law ClerkSuperior Court of Henry County
2012 - 2013

Education

Degree of Business AdministrationAuburn University
2007 - 2011
Doctorate of LawEmory University School of Law
2011 - 2014
Masters of Masters of Business Administration (MBA)University of Georgia
2014 - 2016

Skills

Core skills0
Languages1

Languages

English