Top Compliance Analyst Jobs in Boston, MA

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.

Lead and enhance Circle's IT SOX compliance program by evaluating ITGCs, automated and IT-dependent controls, documenting SOX-ready materials, coordinating testing and remediations, liaising with IT, Security, Finance and auditors, and driving control design for system implementations and new product launches.

Perform annual compliance testing and prepare Form 5500 and related schedules for defined benefit and contribution plans. Respond to audit inquiries, calculate required minimum distributions/contributions, prepare Form 5330, and complete ERISA requests and special projects while coordinating with clients and internal teams to ensure IRS/DOL compliance.

Supports a broker-dealer compliance program by maintaining policies and procedures, assisting with representative registrations, conducting compliance testing, delivering regulatory training, monitoring regulatory developments, and responding to regulatory inquiries. The role requires broker-dealer compliance experience, familiarity with FINRA and investment adviser regulations, strong data analysis, organization, attention to detail, and communication skills.

The Lead Analyst, Product Compliance ensures compliance in product lifecycle, conducts risk assessments, collaborates with teams, and develops compliance processes for Circle's Payments product.

Perform daily post-trade compliance testing using automated monitoring systems, investigate breaches, communicate with stakeholders, document compliance determinations, validate data, support reporting and UAT, and help implement rules and process improvements for investment portfolios.

Operate and scale legal, privacy, compliance, and export-control workflows. Manage e2Open and denied-party screening, privacy artifacts (DPAs, SCCs), customer diligence, audits, and cross-functional intake to accelerate enterprise transactions and maintain audit readiness.

Transform operational and financial data into actionable insights to support vaccine purchasing programs. Build dashboards and reports, monitor manufacturer contract compliance, analyze purchasing and enrollment trends, support revenue optimization and rebate/commission reporting, maintain Salesforce data integrity, and drive process improvement and automation across cross-functional teams.

Support Ethics & Compliance by performing compliance monitoring, quality assurance, internal investigations, third-party due diligence, contract compliance reviews, metrics/reporting, and documentation. Cross-train across audit, risk, and compliance functions and produce reports for senior leadership and the board.

Execute internal audits and SOX engagements across the global organization. Assess design and operating effectiveness of controls, identify findings and remediation plans, perform walkthroughs, review third-party arrangements, and support external audits and ad-hoc assignments.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

The Senior IT Risk and Compliance Analyst manages vendor risk, ensures compliance with regulations, documents controls, and supports risk mitigation efforts across IT teams.

The Data Privacy Compliance Analyst will support the development and implementation of data privacy programs, assist privacy operations, and ensure compliance with global privacy laws.

Process participant-level retirement plan data, scrub and upload records, interpret plan documents, calculate complex employer contributions, reconcile nondiscrimination testing and reporting, ensure IRS compliance (RMDs, loan delinquency), and coordinate with Compliance & Government Reporting and Client Service teams.

Classifies defense-industry parts and products under HTS and Schedule B, documents classification rationales, and supports import/export compliance. Applies rules of origin, customs requirements, ITAR, EAR, and other agency regulations. Coordinates with engineers and stakeholders, maintains compliance records, supports audits, post-entry reviews, FTZ activities, reporting, training, and special projects. Provides expert guidance on international trade compliance and helps improve operational efficiency.

Lead SOC 2 Type II compliance and audit activities, manage data privacy (GDPR, CCPA/CPRA, EU AI Act), run vendor risk lifecycle, respond to customer security questionnaires/RFPs, and collaborate with cross-functional teams to mature GRC and privacy programs across the organization.

Lead assessment and management of ITGCs and cloud security controls; support customer due diligence, contract reviews, and compliance questionnaires; partner with Security, Engineering, Product, and Legal; support external audits and certifications (SOC, ISO, FedRAMP); perform risk assessments, document controls, and drive remediation to maintain regulatory and contractual compliance.

Support design, implementation, and operation of Affirm Bank's BSA/AML and compliance technology. Build and test transaction-monitoring rules, case-management workflows, dashboards, and controls; analyze alerts and control performance; maintain documentation; coordinate across Compliance, Product, Engineering, Data, and vendors to ensure audit-ready, scalable compliance systems.

Perform second-line quality control of the banks AML/CFT program, review suspicious activity reports, file CTRs, support FinCEN 314(a)/(b) reviews, assist audits and regulatory exams, and recommend compliance enhancements.

Build and own end-to-end compliance data pipelines and models (case, alert, entity, transaction, risk features). Ensure data quality, monitoring, lineage, and audit-ready documentation. Partner with Compliance and engineering to close upstream gaps, improve detection signal quality, and implement measurement frameworks and reporting for control effectiveness.

Manage onboarding, appointment, and termination of insurance producers to ensure regulatory and internal compliance. Process state filings, collect documentation, maintain producer records and databases, generate reports, coordinate with internal teams, finance, legal, and external partners, monitor regulatory changes, and improve onboarding and appointment processes.