Top Compliance Analyst Jobs in Boston, MA

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Supports IT compliance and control testing by collecting evidence, maintaining documentation, analyzing deficiencies, tracking remediation, and coordinating with control owners and auditors. Assists with access certifications, segregation-of-duties reviews, SAP role reviews, IT scoping, compliance reporting, and control assessments. The role also contributes to compliance projects and audit tool enhancements while providing status updates to management.

Lead and enhance Circle's IT SOX compliance program by evaluating ITGCs, automated and IT-dependent controls, documenting SOX-ready materials, coordinating testing and remediations, liaising with IT, Security, Finance and auditors, and driving control design for system implementations and new product launches.

Supports a broker-dealer compliance program by maintaining policies and procedures, assisting with representative registrations, conducting compliance testing, delivering regulatory training, monitoring regulatory developments, and responding to regulatory inquiries. The role requires broker-dealer compliance experience, familiarity with FINRA and investment adviser regulations, strong data analysis, organization, attention to detail, and communication skills.

Supports the Registrar’s Office by maintaining accurate, confidential, and compliant student records. Oversees NSC and NSLDS enrollment and degree reporting, validates data, resolves errors, manages Banner and related systems, produces reports, processes transcripts and verifications, and ensures FERPA-compliant record releases. The role also supports system configuration, documentation, process improvement, staff training, and high-volume inquiries from students, faculty, staff, and external stakeholders.

Conducts employee expense report audits, identifies compliance issues and fraud indicators, maintains internal control documentation and process maps, assesses control gaps, and supports internal and external audits. The role applies COSO, HIPAA, CMS, IRS, and internal control best practices while communicating findings and remediation recommendations to finance leadership and operational stakeholders.

Executes Liquidia’s IT compliance program across SOX, GxP, and 21 CFR Part 11 requirements. Manages IT audits, control evidence, corrective actions, third-party risk assessments, infrastructure qualification, validated systems documentation, cybersecurity framework alignment, AI governance records, and external auditor coordination. Partners with Quality, Procurement, Legal, auditors, and IT stakeholders to maintain policies, assess compliance impacts, support validation activities, and mature the cybersecurity governance roadmap.

Perform daily post-trade compliance testing using automated monitoring systems, investigate breaches, communicate with stakeholders, document compliance determinations, validate data, support reporting and UAT, and help implement rules and process improvements for investment portfolios.

Support compliance monitoring, testing, and branch audits for acquired firms during integration. Conduct risk assessments, audits, and branch exams; identify trends, document workpapers, track remediation action plans, assist policy development, and report to Compliance leadership while staying current on regulatory developments.

Supports mortgage origination compliance through complaint investigations, regulatory and investor examinations, risk-based monitoring, transactional testing, regulatory research, root cause analysis, reporting, and remediation. Independently manages multiple compliance matters, develops testing methodologies and monitoring materials, communicates findings to regulators and leadership, and recommends improvements to compliance controls and the Compliance Management System.

Transform operational and financial data into actionable insights to support vaccine purchasing programs. Build dashboards and reports, monitor manufacturer contract compliance, analyze purchasing and enrollment trends, support revenue optimization and rebate/commission reporting, maintain Salesforce data integrity, and drive process improvement and automation across cross-functional teams.

Support Ethics & Compliance by performing compliance monitoring, quality assurance, internal investigations, third-party due diligence, contract compliance reviews, metrics/reporting, and documentation. Cross-train across audit, risk, and compliance functions and produce reports for senior leadership and the board.

Execute internal audits and SOX engagements across the global organization. Assess design and operating effectiveness of controls, identify findings and remediation plans, perform walkthroughs, review third-party arrangements, and support external audits and ad-hoc assignments.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

The Data Privacy Compliance Analyst will support the development and implementation of data privacy programs, assist privacy operations, and ensure compliance with global privacy laws.

Classifies defense-industry parts and products under HTS and Schedule B, documents classification rationales, and supports import/export compliance. Applies rules of origin, customs requirements, ITAR, EAR, and other agency regulations. Coordinates with engineers and stakeholders, maintains compliance records, supports audits, post-entry reviews, FTZ activities, reporting, training, and special projects. Provides expert guidance on international trade compliance and helps improve operational efficiency.

Lead SOC 2 Type II compliance and audit activities, manage data privacy (GDPR, CCPA/CPRA, EU AI Act), run vendor risk lifecycle, respond to customer security questionnaires/RFPs, and collaborate with cross-functional teams to mature GRC and privacy programs across the organization.

Lead assessment and management of ITGCs and cloud security controls; support customer due diligence, contract reviews, and compliance questionnaires; partner with Security, Engineering, Product, and Legal; support external audits and certifications (SOC, ISO, FedRAMP); perform risk assessments, document controls, and drive remediation to maintain regulatory and contractual compliance.

Support design, implementation, and operation of Affirm Bank's BSA/AML and compliance technology. Build and test transaction-monitoring rules, case-management workflows, dashboards, and controls; analyze alerts and control performance; maintain documentation; coordinate across Compliance, Product, Engineering, Data, and vendors to ensure audit-ready, scalable compliance systems.

Perform second-line quality control of the banks AML/CFT program, review suspicious activity reports, file CTRs, support FinCEN 314(a)/(b) reviews, assist audits and regulatory exams, and recommend compliance enhancements.

Build and own end-to-end compliance data pipelines and models (case, alert, entity, transaction, risk features). Ensure data quality, monitoring, lineage, and audit-ready documentation. Partner with Compliance and engineering to close upstream gaps, improve detection signal quality, and implement measurement frameworks and reporting for control effectiveness.

Manage onboarding, appointment, and termination of insurance producers to ensure regulatory and internal compliance. Process state filings, collect documentation, maintain producer records and databases, generate reports, coordinate with internal teams, finance, legal, and external partners, monitor regulatory changes, and improve onboarding and appointment processes.

Manages DTE audit, inspection, and compliance activities across GxP, internal audit, SOX, and regulatory programs. Coordinates audit readiness, evidence collection, auditor communications, findings, CAPAs, remediation, metrics, dashboards, and leadership reporting. Advises stakeholders on compliance requirements, supports health authority inspections, improves governance and audit processes, and partners with Quality Assurance, Internal Audit, SOX PMO, system owners, and business teams.