Top Compliance Analyst Jobs in Boston, MA

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Leads NinjaOne’s FedRAMP High and Moderate compliance program, including authorization, continuous monitoring, audits, control testing, POA&M management, vulnerability remediation, documentation, and assessor coordination. Partners with engineering and federal stakeholders to implement controls, maintain evidence, manage cloud security dependencies, track regulatory changes, and automate compliance workflows. Provides FedRAMP subject matter expertise to internal teams, customers, and prospects while improving audit efficiency and evidence quality.

Leads Rubrik’s commercial security audit and certification portfolio, managing audit calendars, external auditors, evidence collection, control mapping, findings remediation, certification lifecycle activities, and leadership reporting. Partners with InfoSec, IT, Legal, Engineering, and Risk Management to maintain continuous audit readiness across SOC, ISO, CSA STAR, TISAX, HITRUST, and HIPAA frameworks. Uses Jira-based dashboards, GRC tooling, AI, and automation to streamline audit workflows and support customer security inquiries.

Reviews trade surveillance reports, identifies and escalates compliance exceptions, monitors employee access and communications, supports regulatory inquiries and audits, analyzes compliance data, develops Excel reporting, and contributes to automation and AI-driven compliance initiatives. The role also provides administrative and project support to the compliance department.

The HR Compliance Analyst supports the HR compliance governance program by monitoring regulatory developments, coordinating implementation activities, maintaining compliance inventories and documentation, tracking risks and obligations, preparing dashboards and reports, and supporting audits and regulatory reviews. The role partners with Legal and multiple HR functions, manages compliance vendors, maintains policies and tools, coordinates training and action items, and identifies process improvement and automation opportunities.

Owns policy and SOP governance, compliance reviews, audit-ready documentation, incident and complaint reviews, corporate risk tracking, corrective actions, and compliance process improvements. Partners with business teams and the Chief Compliance Officer to identify gaps, escalate risks, maintain controls, and develop tools, templates, and guidance. The role requires strong communication, regulated-industry experience, and proficiency with AI productivity and workflow automation tools.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Coordinates 340B Drug Pricing Program compliance across WVU Medicine entities. Performs audits of pharmacies, patient and provider eligibility, purchasing, claims, software mappings, and split-billing processes. Analyzes utilization, savings, exceptions, and discrepancies; maintains 340B software and charge-code mappings; validates data and reporting; supports covered entities and pharmacy leadership; and identifies risks involving duplicate discounts, diversion, contract compliance, and billing accuracy.

Supports compliance operations through regulatory reviews, monitoring, testing, investigations, control-gap remediation, audits, reporting, policy updates, and customer due diligence. Manages vendor compliance intake, questionnaires, policy version control, training coordination, and AI governance documentation. Partners with Legal and Security while monitoring developments in financial services, tax, privacy, and regulatory requirements.

Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.

Reviews marketing and customer-facing materials for regulatory compliance, performs monitoring and control testing, handles KYB/KYC and transaction-monitoring escalations, supports enhanced due diligence, maintains compliance records, assists with audits and examinations, partners with internal teams, and tracks employee compliance training.

Conduct import entry audits, review CBP documentation, manage Post Summary Corrections, validate duty payments, monitor customs broker performance, and support HTS classification accuracy. Analyze import data to identify compliance risks and duty savings opportunities while building dashboards, reports, calculators, and automation. Collaborate with Finance, Transportation, Merchandising, customs brokers, and other teams to improve customs processes, documentation, data integrity, and global trade compliance.

Supports the healthcare compliance program through complex monitoring, audits, risk assessments, investigations, remediation, hotline management, exclusion screening, policy development, education, reporting, and regulatory inquiry support. The role prepares compliance dashboards and documentation, maintains audit-ready records, manages conflicts of interest procedures, and recommends controls and corrective actions while partnering with cross-functional stakeholders.

Monitor and resolve pre- and post-trade compliance alerts, maintain trading rules in the order management system, and analyze trade and position data using SQL. Automate compliance workflows with code and AI tools, maintain restricted securities lists, support MNPI processes, track regulatory developments, and assist with filings, audits, system upgrades, and compliance projects.

Monitors mutual fund investment compliance, reviews Charles River alerts, researches breaches, tests tax and regulatory requirements, and documents compliance activities. Supports prospectus and SAI guideline reviews, sub-adviser and service provider oversight, SEC and IRS compliance testing, regulatory filings, Board reporting, due diligence, and compliance projects. Communicates compliance guidance to sub-advisers and collaborates with internal partners under senior team supervision.

Executes and helps build the IT risk and compliance program, including contract and security questionnaire reviews, control evidence collection, gap remediation, vendor risk assessments, privacy and data retention operations, policy maintenance, risk reporting, business continuity, incident response, security awareness training, audits, access reviews, and control testing.

Supports IT procurement, purchasing, vendor management, third-party risk, privacy, compliance, audit readiness, and governance activities. Responsibilities include RFPs and vendor evaluation, purchase orders and invoice reconciliation, vendor due diligence, contract compliance, policy administration, remediation tracking, business continuity and disaster recovery governance, privacy documentation, reporting, and process improvement. The role also provides guidance to less experienced team members and partners with IT Security, Legal, Privacy, Finance, auditors, vendors, and business teams.

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Monitors U.S. and Canadian payroll compliance, regulations, tax filings, audits, controls, and employee pay accuracy. Investigates exceptions, manages corrective actions, supports SOX and regulatory audits, and coordinates payroll compliance for acquisitions and new entities. Maintains procedures, governance documentation, dashboards, and reporting while partnering with Legal, Finance, HR, vendors, and leadership to improve controls, reduce risk, and support payroll technology and transformation initiatives.

Conducts cybersecurity risk assessments, compliance reviews, audits, continuous monitoring, and remediation tracking for a federal government client. Develops security policies and compliance documentation, supports VA audit activities, coordinates corrective actions, analyzes findings, and provides prioritized risk mitigation recommendations. Collaborates with technical teams, program leaders, government stakeholders, and auditors to strengthen cybersecurity compliance and support risk-based decisions.

Supports investment teams by monitoring transactions and holdings for compliance with client guidelines and regulatory requirements. Reviews investment management agreements, evaluates client guidelines, maintains the Sentinel monitoring system, provides real-time pre-trade support, resolves post-trade exceptions, and collaborates with relationship, product management, and portfolio management teams.

Investigates suspicious account activity and transaction patterns under BSA and AML requirements. Conducts enhanced due diligence, analyzes transaction data, prepares SARs and CTRs, collaborates with AML and fraud teams, and recommends workflow or monitoring improvements. The role requires strong investigative writing, analytical judgment, confidentiality, and proficiency with Excel and AML monitoring systems.

Supports Pharmacy Benefit Manager licensing and regulatory reporting by coordinating filings through SERFF, NIPR, and state portals; monitoring compliance requirements; researching regulatory and legal issues; maintaining records; supporting audits; communicating with regulators; and advising cross-functional partners. The role manages multiple regulatory projects and deadlines while ensuring accurate, timely compliance activities.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.