Top Compliance Analyst Jobs in Boston, MA

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Supports the security and compliance program by coordinating audits, reviewing technical evidence, assisting with control testing, tracking findings and remediation, and maintaining accurate compliance documentation. The role evaluates whether evidence demonstrates effective control operation, coordinates requests across technical and business teams, manages audit deadlines, identifies gaps, and escalates unresolved issues. It requires foundational knowledge of IT infrastructure, security controls, compliance frameworks, and strong organizational and written communication skills.

Leads global trade and customs compliance activities, including HS/HTS classification, ECCN support, broker filing validation, customs documentation, audits, regulatory inquiries, and trade remedy reviews. Develops compliance processes, SOPs, controls, dashboards, and analytics; leads system enhancements and automation projects; monitors regulatory changes; and partners with logistics, brokers, procurement, finance, engineering, and manufacturing teams to improve global trade operations and advise leadership.

Support the Information Security Program through technology audits, SOC 2 activities, compliance initiatives, control maintenance, security documentation, sales security questionnaires, awareness programs, vendor management, and AI-enabled control automation. Partner with Engineering, IT, Legal, Operations, and control owners to improve auditability, security posture, and compliance processes across SaaS and cloud environments.

Owns CoLab’s FedRAMP GovCloud compliance program as the ISSO, managing certification documentation, NIST control mappings, vulnerability reporting, significant change notifications, assessments, audits, evidence collection, inventory reconciliation, and regulatory transitions. The role coordinates with agencies, 3PAOs, customers, and cross-functional teams while maintaining compliance deadlines and documentation. Requires 6+ years of compliance experience, including 3+ years of FedRAMP experience, U.S. person status, U.S. residence, and an enhanced background check.

Leads Rubrik’s commercial security audit and certification portfolio, managing audit calendars, external auditors, evidence collection, control mapping, findings remediation, certification lifecycle activities, and leadership reporting. Partners with InfoSec, IT, Legal, Engineering, and Risk Management to maintain continuous audit readiness across SOC, ISO, CSA STAR, TISAX, HITRUST, and HIPAA frameworks. Uses Jira-based dashboards, GRC tooling, AI, and automation to streamline audit workflows and support customer security inquiries.

Provides grant management and compliance support for Head Start and Early Head Start recipients. Reviews applications, budgets, waivers, and post-award requirements; records grant actions in federal systems; identifies compliance risks; supports improvement strategies; monitors recipient performance; analyzes data; and prepares memoranda, presentations, and correspondence. Requires early childhood program experience, strong analytical and writing skills, proficiency with federal grant systems and Microsoft Office, remote work, and travel up to 25%.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

Supports global export and import trade compliance activities, including export and customs classifications, denied-party screening, sanctions and licensing reviews, country-of-origin analysis, customs broker coordination, audits, recordkeeping, and compliance monitoring. Maintains trade compliance data in Oracle GTM, resolves trade holds, supports risk assessments and corrective actions, develops procedures, and partners with business and IT teams to improve compliance processes and automation.

Conduct compliance testing and monitoring across the bank and fintech partners, document findings, identify control weaknesses, assess regulatory changes, and collaborate with business, risk, legal, and partner teams to strengthen compliance processes.

Supports AML and compliance operations for a cryptocurrency platform. Responsibilities include reviewing transaction monitoring alerts, investigating accounts and blockchain activity, preparing SARs, performing KYC/KYB and EDD reviews, sanctions screening, using blockchain analytics tools, and optimizing monitoring rules with compliance engineering and cross-functional teams.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Coordinates 340B Drug Pricing Program compliance across the health system by conducting audits, reviewing eligibility and purchasing data, monitoring contract pharmacy activity, maintaining split-billing software, validating charge-code mappings, preparing reports, and identifying risks, discrepancies, duplicate discounts, diversion, and claim-processing issues. The role supports pharmacy, finance, and administrative leadership through data analysis, compliance assessments, reporting, and program optimization.

Own compliance decisions for healthcare professional clearance, including background check disqualifications, credential reviews, license violations, state requirements, audits, renewals, and reporting. Interpret statutes, regulations, and agency guidance; create risk analyses and decision records; recommend operational implementations; and resolve escalations in partnership with Legal and cross-functional teams.

Serves as the subject matter expert for individual disability insurance product compliance and supports supplemental health products. Monitors and interprets federal and state regulations, assesses risks, performs compliance testing, develops policies and guidance, supports product filings, and advises cross-functional teams. The role also assists with audits and regulatory examinations, develops training materials, reviews customer-facing materials, and participates in industry activities.

Reviews retail communications for compliance with firm policies, FINRA, SEC rules, and applicable laws. Explains required revisions, ensures record retention, researches policy questions, maintains compliance materials, supports workflow processes, and completes high-volume assignments within service-level deadlines.

Reviews retail communications for compliance with insurance, securities, FINRA, SEC, and state and federal regulations. Researches advertising requirements, responds to regulatory and customer inquiries, coordinates subject matter expert reviews, communicates compliance changes, maintains review records, and updates internal compliance materials. The role requires managing high volumes of work under tight deadlines in a fully remote environment.

Supports AML and sanctions compliance programs through complex transaction investigations, SAR preparation, OFAC match resolution, quality assurance, compliance monitoring, audit and regulatory exam support, and control enhancement. Provides guidance to analysts and business partners, identifies compliance trends and gaps, and develops communications for business operations.

Owns policy and SOP governance, compliance reviews, audit-ready documentation, incident and complaint reviews, corporate risk tracking, corrective actions, and compliance process improvements. Partners with business teams and the Chief Compliance Officer to identify gaps, escalate risks, maintain controls, and develop tools, templates, and guidance. The role requires strong communication, regulated-industry experience, and proficiency with AI productivity and workflow automation tools.

Support client CMMC and cybersecurity compliance engagements by reviewing documentation, validating technical controls, collecting evidence, maintaining SSPs and POA&Ms, assessing gaps, communicating findings, and preparing audit-readiness reports. The role involves working with clients, executives, engineers, and senior compliance staff while developing expertise in CMMC, NIST, and DFARS requirements.

Executes risk-based compliance testing for lending activities across mortgage, consumer, commercial, and business banking. Responsibilities include assessing controls, planning and performing substantive testing, documenting test scripts, evaluating exceptions, reviewing findings, maintaining regulatory knowledge, and communicating results to management. The role also supports risk assessments, special projects, audit remediation, and junior team members while exercising independent judgment under minimal supervision.

Own recurring government and client compliance reports from production through quality assurance and submission tracking. Validate data, identify discrepancies, maintain audit-ready documentation, and coordinate with Data Analytics, Product, and Operations teams. Translate reporting needs into actionable technical requests, document regulatory requirements and workflows, and lead process optimization and automation efforts. The role supports Medicare, Medicaid, MCO, and client reporting while strengthening scalable compliance processes.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Coordinates 340B Drug Pricing Program compliance across WVU Medicine entities. Performs audits of pharmacies, patient and provider eligibility, purchasing, claims, software mappings, and split-billing processes. Analyzes utilization, savings, exceptions, and discrepancies; maintains 340B software and charge-code mappings; validates data and reporting; supports covered entities and pharmacy leadership; and identifies risks involving duplicate discounts, diversion, contract compliance, and billing accuracy.

Supports compliance operations through regulatory reviews, monitoring, testing, investigations, control-gap remediation, audits, reporting, policy updates, and customer due diligence. Manages vendor compliance intake, questionnaires, policy version control, training coordination, and AI governance documentation. Partners with Legal and Security while monitoring developments in financial services, tax, privacy, and regulatory requirements.