Top Compliance Analyst Jobs in Boston, MA

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.

Perform second-line quality control of the banks AML/CFT program, review suspicious activity reports, file CTRs, support FinCEN 314(a)/(b) reviews, assist audits and regulatory exams, and recommend compliance enhancements.

Manage onboarding, appointment, and termination of insurance producers to ensure regulatory and internal compliance. Process state filings, collect documentation, maintain producer records and databases, generate reports, coordinate with internal teams, finance, legal, and external partners, monitor regulatory changes, and improve onboarding and appointment processes.

Support implementation and monitoring of FAR/DFARS/CAS compliance controls, assist policy and control documentation, participate in internal reviews and audit readiness, prepare government filings, produce compliance reports and dashboards, monitor regulatory updates, and collaborate with cross-functional teams.

Lead and enhance Circle's IT SOX compliance program by evaluating ITGCs, automated and IT-dependent controls, documenting SOX-ready materials, coordinating testing and remediations, liaising with IT, Security, Finance and auditors, and driving control design for system implementations and new product launches.

Review and approve retail advertising and communication for compliance with federal/state insurance and securities laws (FINRA/SEC), manage regulatory correspondence, coordinate subject-matter reviewers, track records, maintain compliance materials, and respond to regulator, customer, and producer inquiries.

Review and validate export transactions for U.S. government and company compliance; support export shipment planning, documentation, AES/ACE reporting, license management, and stakeholder guidance. Track shipments, maintain records, assist audits, and optimize transportation selections to meet contractual delivery and compliance requirements.

Process participant-level retirement plan data, scrub and upload records, interpret plan documents, calculate complex employer contributions, reconcile nondiscrimination testing and reporting, ensure IRS compliance (RMDs, loan delinquency), and coordinate with Compliance & Government Reporting and Client Service teams.

The Compliance Analyst will implement and manage Spellbook's US compliance program, working with various teams to ensure regulatory adherence and audit-readiness across sectors such as government and healthcare.

Independently review and draft responses to complex customer and regulatory complaints for bank and fintech partners, identify regulatory risks, manage case queues and SLAs, monitor open complaints daily, support regulator and audit requests, and maintain knowledge of consumer financial protection laws to ensure compliant resolutions.

The Lead Analyst, Product Compliance ensures compliance in product lifecycle, conducts risk assessments, collaborates with teams, and develops compliance processes for Circle's Payments product.

Lead customer-facing security reviews, perform risk and gap assessments, manage external audits (SOC 2, ISO, PCI, HIPAA, FedRAMP, etc.), run internal audits and security training, improve vendor risk management and compliance metrics, build/automate controls and respond to RFIs to support sales.

Serve as the RIA compliance subject matter expert partnering with business teams to review marketing, product, and member communications; manage IAR registrations, OBAs, ADV filings; build policies and procedures; handle member compliance issues; and support governance of proprietary and AI-driven tools.

Perform annual compliance testing and prepare Form 5500 and related schedules for defined benefit and contribution plans. Respond to audit inquiries, calculate required minimum distributions/contributions, prepare Form 5330, and complete ERISA requests and special projects while coordinating with clients and internal teams to ensure IRS/DOL compliance.

Support compliance monitoring, testing, and branch audits for acquired firms during integration. Conduct risk assessments, audits, and branch exams; identify trends, document workpapers, track remediation action plans, assist policy development, and report to Compliance leadership while staying current on regulatory developments.

Transform operational and financial data into actionable insights to support vaccine purchasing programs. Build dashboards and reports, monitor manufacturer contract compliance, analyze purchasing and enrollment trends, support revenue optimization and rebate/commission reporting, maintain Salesforce data integrity, and drive process improvement and automation across cross-functional teams.

Support Ethics & Compliance by performing compliance monitoring, quality assurance, internal investigations, third-party due diligence, contract compliance reviews, metrics/reporting, and documentation. Cross-train across audit, risk, and compliance functions and produce reports for senior leadership and the board.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Support development, implementation, and monitoring of compliance policies and procedures for an SEC-registered RIA. Assist with regulatory filings, conduct compliance reviews and testing, manage compliance platforms (personal trading, gifts, outside activities), maintain side-letter platform, support onboarding/offboarding, assist with JSOX/internal audit requests, deliver firmwide training, monitor regulatory developments, and perform ad hoc compliance research/projects.

Execute internal audits and SOX engagements across the global organization. Assess design and operating effectiveness of controls, identify findings and remediation plans, perform walkthroughs, review third-party arrangements, and support external audits and ad-hoc assignments.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

The Data Privacy Compliance Analyst will support the development and implementation of data privacy programs, assist privacy operations, and ensure compliance with global privacy laws.

The Senior IT Risk and Compliance Analyst manages vendor risk, ensures compliance with regulations, documents controls, and supports risk mitigation efforts across IT teams.

Lead SOC 2 Type II compliance and audit activities, manage data privacy (GDPR, CCPA/CPRA, EU AI Act), run vendor risk lifecycle, respond to customer security questionnaires/RFPs, and collaborate with cross-functional teams to mature GRC and privacy programs across the organization.