Top Compliance Analyst Jobs in Boston, MA

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.

Reviews marketing and customer-facing materials for regulatory compliance, performs monitoring and control testing, handles KYB/KYC and transaction-monitoring escalations, supports enhanced due diligence, maintains compliance records, assists with audits and examinations, partners with internal teams, and tracks employee compliance training.

Serves as the subject matter expert for individual disability insurance product compliance and supports supplemental health products. Monitors and interprets federal and state regulations, assesses risks, performs compliance testing, develops policies and guidance, supports product filings, and advises cross-functional teams. The role also assists with audits and regulatory examinations, develops training materials, reviews customer-facing materials, and participates in industry activities.

Conduct import entry audits, review CBP documentation, manage Post Summary Corrections, validate duty payments, monitor customs broker performance, and support HTS classification accuracy. Analyze import data to identify compliance risks and duty savings opportunities while building dashboards, reports, calculators, and automation. Collaborate with Finance, Transportation, Merchandising, customs brokers, and other teams to improve customs processes, documentation, data integrity, and global trade compliance.

Develops compliance analytics for AML, sanctions, and consumer compliance programs. Builds data pipelines, dashboards, scorecards, automated reporting, and data quality processes using dbt, GitLab, Python, SQL, Tableau, and Snowflake. Translates regulatory requirements into actionable insights, risk indicators, and metrics while communicating findings to senior management and regulatory stakeholders.

Supports the healthcare compliance program through complex monitoring, audits, risk assessments, investigations, remediation, hotline management, exclusion screening, policy development, education, reporting, and regulatory inquiry support. The role prepares compliance dashboards and documentation, maintains audit-ready records, manages conflicts of interest procedures, and recommends controls and corrective actions while partnering with cross-functional stakeholders.

Monitor and resolve pre- and post-trade compliance alerts, maintain trading rules in the order management system, and analyze trade and position data using SQL. Automate compliance workflows with code and AI tools, maintain restricted securities lists, support MNPI processes, track regulatory developments, and assist with filings, audits, system upgrades, and compliance projects.

Monitors mutual fund investment compliance, reviews Charles River alerts, researches breaches, tests tax and regulatory requirements, and documents compliance activities. Supports prospectus and SAI guideline reviews, sub-adviser and service provider oversight, SEC and IRS compliance testing, regulatory filings, Board reporting, due diligence, and compliance projects. Communicates compliance guidance to sub-advisers and collaborates with internal partners under senior team supervision.

Executes and helps build the IT risk and compliance program, including contract and security questionnaire reviews, control evidence collection, gap remediation, vendor risk assessments, privacy and data retention operations, policy maintenance, risk reporting, business continuity, incident response, security awareness training, audits, access reviews, and control testing.

Supports IT procurement, purchasing, vendor management, third-party risk, privacy, compliance, audit readiness, and governance activities. Responsibilities include RFPs and vendor evaluation, purchase orders and invoice reconciliation, vendor due diligence, contract compliance, policy administration, remediation tracking, business continuity and disaster recovery governance, privacy documentation, reporting, and process improvement. The role also provides guidance to less experienced team members and partners with IT Security, Legal, Privacy, Finance, auditors, vendors, and business teams.

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Monitors U.S. and Canadian payroll compliance, regulations, tax filings, audits, controls, and employee pay accuracy. Investigates exceptions, manages corrective actions, supports SOX and regulatory audits, and coordinates payroll compliance for acquisitions and new entities. Maintains procedures, governance documentation, dashboards, and reporting while partnering with Legal, Finance, HR, vendors, and leadership to improve controls, reduce risk, and support payroll technology and transformation initiatives.

Conducts cybersecurity risk assessments, compliance reviews, audits, continuous monitoring, and remediation tracking for a federal government client. Develops security policies and compliance documentation, supports VA audit activities, coordinates corrective actions, analyzes findings, and provides prioritized risk mitigation recommendations. Collaborates with technical teams, program leaders, government stakeholders, and auditors to strengthen cybersecurity compliance and support risk-based decisions.

Supports investment teams by monitoring transactions and holdings for compliance with client guidelines and regulatory requirements. Reviews investment management agreements, evaluates client guidelines, maintains the Sentinel monitoring system, provides real-time pre-trade support, resolves post-trade exceptions, and collaborates with relationship, product management, and portfolio management teams.

Supports compliance, fraud, sanctions, complaints, and dispute programs; analyzes client activity to identify risks; improves compliance workflows and tooling; collaborates with Product, Engineering, Client Services, and Finance; conducts client outreach; supports audits, examinations, investigations, and regulatory inquiries; and reports compliance trends to leadership.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Conduct CDD and EDD reviews for LATAM-related customers, investigate cross-border transactions and potential money laundering or sanctions evasion, assess OFAC exposure, review ownership and source-of-funds information, disposition screening alerts, prepare UAR escalations, and support onboarding, monitoring, risk methodology, and compliance process improvements.

Serves as the IAM compliance subject matter expert, developing governance frameworks, assessing access-control compliance, guiding remediation, and supporting application teams. Maintains compliance data, reporting, documentation, and support materials while promoting IAM best practices and regulatory adherence. Collaborates with security, infrastructure, and application teams to operationalize policies, manage risks, and improve IAM solutions across cloud and enterprise environments.

Conduct independent QA reviews of AML and financial crime investigations, including transaction monitoring, sanctions screening, EDD, and name screening. Evaluate decisions, documentation, regulatory adherence, and risk-based outcomes; identify defects and provide feedback. Analyze quality trends, prepare reports and dashboards, facilitate calibration sessions, support coaching and remediation, and recommend improvements to QA frameworks, workflows, scorecards, and controls. Participate in AML projects, UAT, process validation, and AI-enabled quality initiatives.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

Reviews mortgage loan packages, underwriting documentation, data, and fees for regulatory compliance, accuracy, completeness, and salability. Captures and audits loan information, identifies discrepancies and exceptions, researches rebuttals, runs system validations, documents findings, and coordinates with internal teams to resolve issues and meet review timelines.

Conduct KYC reviews, restricted-party screening, export-control and sanctions compliance reviews, sales opportunity assessments, and end-user due diligence. Maintain compliance records, databases, reports, dashboards, and authorization tracking. Review transactions under EAR and ITAR requirements, identify risks, resolve screening matches, support audits and training, and collaborate with Legal, Sales Operations, Finance, Procurement, and other teams while escalating higher-risk matters.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.