Open to opportunities

Sandra Garcia Acosta

@sandragarciaacosta

Message

Bilingual compliance executive; I build enterprise consumer-protection programs that scale with speed.

United States

Message

What I'm looking for

I’m looking to lead enterprise compliance and consumer protection—partnering with CEOs and General Counsel to build scalable UDAAP/Fair Lending/FCRA programs, strengthen privacy governance, and deliver confident regulator-ready execution through clear KPIs.

I’m a strategic compliance executive with 12+ years of experience building and scaling enterprise compliance programs across consumer financial services, credit reporting, and fintech environments. I turn regulatory change into clear, actionable guidance that protects consumers and enables business growth.

I serve as a trusted primary regulatory liaison to CFPB, FTC, state attorneys general, and state banking regulators, translating supervisory expectations into practical operating rhythms for teams and leadership. My work spans UDAAP, Fair Lending (ECOA/Reg B), FCRA, CROA, and state consumer financial laws—grounded in strong risk assessment and compliance testing.

In current leadership, I architect compliance programs from scratch in heavily regulated settings and oversee the full consumer product lifecycle. I lead privacy governance (CCPA/GDPR), manage data subject requests, oversee vendor data flow mapping, run marketing and product reviews, and ensure complaint management includes root-cause analysis, regulatory response, and executive trend reporting.

I’m results-driven by design: I achieved SOC 2 Type 2 certification with zero findings for three consecutive years and led PCI DSS Level 1 v4.0.1 compliance in partnership with the CTO. I also design AI-enabled compliance workflows and executive KPI/KRI dashboards, while building and mentoring high-performing compliance teams grounded in ethical accountability and consumer protection.

Experience

Work history, roles, and key accomplishments

Current

Director of Compliance

Current

ConsumerDirect, Inc.

Jan 2022 - Present (4 years 5 months)

Architected an enterprise compliance program from scratch in regulated consumer financial services and credit reporting, serving as primary regulatory liaison to examiners and regulators. Led SOC 2 Type 2 certification (zero findings for 3 consecutive years) and PCI DSS Level 1 v4.0.1 compliance while overseeing UDAAP/CROA testing, privacy (CCPA/GDPR) governance, marketing/product reviews, and com

UDAAP PCI DSS FCRA CROA Compliance Testing Privacy Governance Complaint Management Compliance Testing

Quality Assurance & Compliance Manager

TaxRise, Inc.

Jan 2021 - Jan 2022 (1 year)

Led compliance and QA across 10+ departments by developing scalable SOPs, conducting internal audits, and managing escalations to help prevent litigation. Earned Employee of the Quarter and Best Manager recognition.

Quality Assurance Compliance Auditing SOP Development Escalation Management Internal Controls Cross Department Governance Executive Reporting

Compliance Officer

TaxRise, Inc.

Jan 2020 - Jan 2021 (1 year)

Supported executive compliance strategy by auditing workflows, drafting policies, and liaising with regulators. Promoted in under 12 months and received an MVP award.

Compliance Strategy Risk Assessment Escalation Support

Summons Administrator

Americor Financial

Jan 2019 - Jan 2020 (1 year)

Managed confidential legal documentation and coordinated with external law firms on consumer debt summons processes. Supported accurate case handling and compliance through careful document coordination.

Consumer Debt Summons Process Confidentiality Process Management

Legal Defense Attorney

Experian Colombia S.A.

Jan 2014 - Jan 2017 (3 years)

Represented Experian Colombia in consumer protection, data privacy, and fraud matters before regulatory bodies and courts, resolving 250+ consumer claims and 25+ lawsuits. Drafted regulatory responses and legal pleadings while supporting fraud/AML investigations and internal compliance documentation.

Data Privacy Compliance Documentation AML Support