Top Compliance Analyst Jobs in Boston, MA

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Leads NinjaOne’s FedRAMP High and Moderate compliance program, including authorization, continuous monitoring, audits, control testing, POA&M management, vulnerability remediation, documentation, and assessor coordination. Partners with engineering and federal stakeholders to implement controls, maintain evidence, manage cloud security dependencies, track regulatory changes, and automate compliance workflows. Provides FedRAMP subject matter expertise to internal teams, customers, and prospects while improving audit efficiency and evidence quality.

Leads Rubrik’s commercial security audit and certification portfolio, managing audit calendars, external auditors, evidence collection, control mapping, findings remediation, certification lifecycle activities, and leadership reporting. Partners with InfoSec, IT, Legal, Engineering, and Risk Management to maintain continuous audit readiness across SOC, ISO, CSA STAR, TISAX, HITRUST, and HIPAA frameworks. Uses Jira-based dashboards, GRC tooling, AI, and automation to streamline audit workflows and support customer security inquiries.

Supports business intake and conflicts compliance in a law firm by tracking engagement letters and waivers, managing ethical walls, reviewing conflicts, drafting database alerts, researching legal ethics, advising attorneys, delivering training, and supporting department technology projects. The role requires legal-environment experience, familiarity with professional conduct rules, corporate law understanding, strong analytical skills, and proficiency with legal technology and office applications.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

Supports global export and import trade compliance activities, including export and customs classifications, denied-party screening, sanctions and licensing reviews, country-of-origin analysis, customs broker coordination, audits, recordkeeping, and compliance monitoring. Maintains trade compliance data in Oracle GTM, resolves trade holds, supports risk assessments and corrective actions, develops procedures, and partners with business and IT teams to improve compliance processes and automation.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Manages enterprise privacy and regulatory compliance programs across concurrent workstreams. Coordinates stakeholders, develops project plans and governance processes, supports privacy reviews and risk assessments, researches state regulations, manages regulatory filings, analyzes regulator findings, supports audits, and communicates compliance changes, performance, risks, and KPIs to leadership. The role also mentors junior analysts and helps implement compliant business procedures and products in a health insurance environment.

Supports insurance product compliance by researching state regulations, preparing and submitting policy and product filings, responding to regulatory inquiries, and coordinating approved changes with underwriting, claims, marketing, and technology teams. Contributes to compliance programs, procedures, training, risk management, and regulatory change implementation.

Coordinates 340B Drug Pricing Program compliance across the health system by conducting audits, reviewing eligibility and purchasing data, monitoring contract pharmacy activity, maintaining split-billing software, validating charge-code mappings, preparing reports, and identifying risks, discrepancies, duplicate discounts, diversion, and claim-processing issues. The role supports pharmacy, finance, and administrative leadership through data analysis, compliance assessments, reporting, and program optimization.

Reviews retail advertising and communications for compliance with insurance, securities, FINRA, SEC, and state regulations. Researches regulatory requirements, responds to regulator and customer inquiries, coordinates subject matter reviews, tracks communications for retention, maintains compliance materials, and communicates regulatory changes. The role requires managing high volumes under tight deadlines while ensuring consistent review standards.

Own compliance decisions for healthcare professional clearance, including background check disqualifications, credential reviews, license violations, state requirements, audits, renewals, and reporting. Interpret statutes, regulations, and agency guidance; create risk analyses and decision records; recommend operational implementations; and resolve escalations in partnership with Legal and cross-functional teams.

Reviews trade surveillance reports, identifies and escalates compliance exceptions, monitors employee access and communications, supports regulatory inquiries and audits, analyzes compliance data, develops Excel reporting, and contributes to automation and AI-driven compliance initiatives. The role also provides administrative and project support to the compliance department.

Supports IT governance, risk, privacy, and compliance programs through policy maintenance, audit support, contract and vendor reviews, risk assessments, data governance, privacy compliance, AI governance evaluations, access reviews, cybersecurity training, and corrective-action tracking. Partners cross-functionally with Legal, Information Security, IT, People, and Procurement to manage regulatory obligations and strengthen organizational governance.

Serves as the subject matter expert for individual disability insurance product compliance and supports supplemental health products. Monitors and interprets federal and state regulations, assesses risks, performs compliance testing, develops policies and guidance, supports product filings, and advises cross-functional teams. The role also assists with audits and regulatory examinations, develops training materials, reviews customer-facing materials, and participates in industry activities.

Reviews retail communications for compliance with firm policies, FINRA, SEC rules, and applicable laws. Explains required revisions, ensures record retention, researches policy questions, maintains compliance materials, supports workflow processes, and completes high-volume assignments within service-level deadlines.

Reviews retail communications for compliance with insurance, securities, FINRA, SEC, and state and federal regulations. Researches advertising requirements, responds to regulatory and customer inquiries, coordinates subject matter expert reviews, communicates compliance changes, maintains review records, and updates internal compliance materials. The role requires managing high volumes of work under tight deadlines in a fully remote environment.

Owns policy and SOP governance, compliance reviews, audit-ready documentation, incident and complaint reviews, corporate risk tracking, corrective actions, and compliance process improvements. Partners with business teams and the Chief Compliance Officer to identify gaps, escalate risks, maintain controls, and develop tools, templates, and guidance. The role requires strong communication, regulated-industry experience, and proficiency with AI productivity and workflow automation tools.

Support client CMMC and cybersecurity compliance engagements by reviewing documentation, validating technical controls, collecting evidence, maintaining SSPs and POA&Ms, assessing gaps, communicating findings, and preparing audit-readiness reports. The role involves working with clients, executives, engineers, and senior compliance staff while developing expertise in CMMC, NIST, and DFARS requirements.

Executes risk-based compliance testing for lending activities across mortgage, consumer, commercial, and business banking. Responsibilities include assessing controls, planning and performing substantive testing, documenting test scripts, evaluating exceptions, reviewing findings, maintaining regulatory knowledge, and communicating results to management. The role also supports risk assessments, special projects, audit remediation, and junior team members while exercising independent judgment under minimal supervision.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Coordinates 340B Drug Pricing Program compliance across WVU Medicine entities. Performs audits of pharmacies, patient and provider eligibility, purchasing, claims, software mappings, and split-billing processes. Analyzes utilization, savings, exceptions, and discrepancies; maintains 340B software and charge-code mappings; validates data and reporting; supports covered entities and pharmacy leadership; and identifies risks involving duplicate discounts, diversion, contract compliance, and billing accuracy.

Supports compliance operations through regulatory reviews, monitoring, testing, investigations, control-gap remediation, audits, reporting, policy updates, and customer due diligence. Manages vendor compliance intake, questionnaires, policy version control, training coordination, and AI governance documentation. Partners with Legal and Security while monitoring developments in financial services, tax, privacy, and regulatory requirements.

Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.

Reviews marketing and customer-facing materials for regulatory compliance, performs monitoring and control testing, handles KYB/KYC and transaction-monitoring escalations, supports enhanced due diligence, maintains compliance records, assists with audits and examinations, partners with internal teams, and tracks employee compliance training.