Top Compliance Analyst Jobs in Boston, MA

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Lead and enhance Circle's IT SOX compliance program by evaluating ITGCs, automated and IT-dependent controls, documenting SOX-ready materials, coordinating testing and remediations, liaising with IT, Security, Finance and auditors, and driving control design for system implementations and new product launches.

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.

The Lead Analyst, Product Compliance ensures compliance in product lifecycle, conducts risk assessments, collaborates with teams, and develops compliance processes for Circle's Payments product.

Perform annual compliance testing and prepare Form 5500 and related schedules for defined benefit and contribution plans. Respond to audit inquiries, calculate required minimum distributions/contributions, prepare Form 5330, and complete ERISA requests and special projects while coordinating with clients and internal teams to ensure IRS/DOL compliance.

Perform daily post-trade compliance testing using automated monitoring systems, investigate breaches, communicate with stakeholders, document compliance determinations, validate data, support reporting and UAT, and help implement rules and process improvements for investment portfolios.

Support development, implementation, and monitoring of compliance policies and procedures for an SEC-registered RIA. Assist with regulatory filings, conduct compliance reviews and testing, manage compliance platforms (personal trading, gifts, outside activities), maintain side-letter platform, support onboarding/offboarding, assist with JSOX/internal audit requests, deliver firmwide training, monitor regulatory developments, and perform ad hoc compliance research/projects.

Execute internal audits and SOX engagements across the global organization. Assess design and operating effectiveness of controls, identify findings and remediation plans, perform walkthroughs, review third-party arrangements, and support external audits and ad-hoc assignments.

Lead SOC 2 Type II compliance and audit activities, manage data privacy (GDPR, CCPA/CPRA, EU AI Act), run vendor risk lifecycle, respond to customer security questionnaires/RFPs, and collaborate with cross-functional teams to mature GRC and privacy programs across the organization.

Lead assessment and management of ITGCs and cloud security controls; support customer due diligence, contract reviews, and compliance questionnaires; partner with Security, Engineering, Product, and Legal; support external audits and certifications (SOC, ISO, FedRAMP); perform risk assessments, document controls, and drive remediation to maintain regulatory and contractual compliance.

Support design, implementation, and operation of Affirm Bank's BSA/AML and compliance technology. Build and test transaction-monitoring rules, case-management workflows, dashboards, and controls; analyze alerts and control performance; maintain documentation; coordinate across Compliance, Product, Engineering, Data, and vendors to ensure audit-ready, scalable compliance systems.

Perform second-line quality control of the banks AML/CFT program, review suspicious activity reports, file CTRs, support FinCEN 314(a)/(b) reviews, assist audits and regulatory exams, and recommend compliance enhancements.

Build and own end-to-end compliance data pipelines and models (case, alert, entity, transaction, risk features). Ensure data quality, monitoring, lineage, and audit-ready documentation. Partner with Compliance and engineering to close upstream gaps, improve detection signal quality, and implement measurement frameworks and reporting for control effectiveness.

Manage onboarding, appointment, and termination of insurance producers to ensure regulatory and internal compliance. Process state filings, collect documentation, maintain producer records and databases, generate reports, coordinate with internal teams, finance, legal, and external partners, monitor regulatory changes, and improve onboarding and appointment processes.

The Compliance Analyst reviews contractual obligations, manages distributions post-closing, liaises with clients and internal teams, and ensures compliance and accuracy in fund distribution processes.

The SCA and DBA Compliance Analyst ensures compliance with the Service Contract Act and Davis-Bacon Act, managing regulatory adherence, conducting audits, and collaborating with various departments to uphold organizational integrity.

Review and approve retail advertising and communications for compliance with federal/state insurance rules, FINRA and SEC regulations. Research and draft guidance, respond to regulator inquiries, manage SME review processes, maintain compliance materials, and communicate regulatory impacts to business units.

Lead and operationalize compliance activities for Medicare Advantage supplemental benefits: maintain policies, manage training and hotline investigations, perform monitoring and audit support, advise cross-functional teams, prepare client attestations, analyze conflicts of interest, and drive continuous improvement of the compliance program.

Support and execute compliance program activities for Medicare Advantage supplemental fitness benefits. Perform policy and annual program reviews, manage compliance training and hotline investigations, conduct monitoring and exclusions screening, respond to client attestations and audits, analyze conflicts of interest, support RFP/commercial requests, and collaborate with Product, Technology, Security, and Marketing to ensure regulatory and privacy compliance.

Ensure Tilt's products, processes, and customer interactions comply with regulations. Manage complaints, perform UDAAP risk mapping and state regulatory research, test AI chatbot workflows, support audits, and drive process improvements through automation and data analysis.

Operate and scale legal, privacy, compliance, and export-control workflows. Manage e2Open and denied-party screening, privacy artifacts (DPAs, SCCs), customer diligence, audits, and cross-functional intake to accelerate enterprise transactions and maintain audit readiness.

Review and approve retail advertising and communication for compliance with federal/state insurance and securities laws (FINRA/SEC), manage regulatory correspondence, coordinate subject-matter reviewers, track records, maintain compliance materials, and respond to regulator, customer, and producer inquiries.

Process participant-level retirement plan data, scrub and upload records, interpret plan documents, calculate complex employer contributions, reconcile nondiscrimination testing and reporting, ensure IRS compliance (RMDs, loan delinquency), and coordinate with Compliance & Government Reporting and Client Service teams.

The Compliance Analyst will implement and manage Spellbook's US compliance program, working with various teams to ensure regulatory adherence and audit-readiness across sectors such as government and healthcare.