Top Compliance Analyst Jobs in Boston, MA

Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Monitors mutual fund investment compliance, reviews Charles River alerts, researches breaches, tests tax and regulatory requirements, and documents compliance activities. Supports prospectus and SAI guideline reviews, sub-adviser and service provider oversight, SEC and IRS compliance testing, regulatory filings, Board reporting, due diligence, and compliance projects. Communicates compliance guidance to sub-advisers and collaborates with internal partners under senior team supervision.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Conduct trade practice surveillance, support customer onboarding, prepare CFTC regulatory filings, maintain exchange policies, investigate potential violations, monitor market participation and underlying industry news, and provide rotational coverage during live market hours.

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Supports insurance product compliance by researching state regulations, preparing and submitting policy and product filings, responding to regulatory inquiries, and coordinating approved changes with underwriting, claims, marketing, and technology teams. Contributes to compliance programs, procedures, training, risk management, and regulatory change implementation.

Conducts cybersecurity risk assessments, compliance reviews, audits, continuous monitoring, and remediation tracking for a federal government client. Develops security policies and compliance documentation, supports VA audit activities, coordinates corrective actions, analyzes findings, and provides prioritized risk mitigation recommendations. Collaborates with technical teams, program leaders, government stakeholders, and auditors to strengthen cybersecurity compliance and support risk-based decisions.

Supports investment teams by monitoring transactions and holdings for compliance with client guidelines and regulatory requirements. Reviews investment management agreements, evaluates client guidelines, maintains the Sentinel monitoring system, provides real-time pre-trade support, resolves post-trade exceptions, and collaborates with relationship, product management, and portfolio management teams.

Supports compliance, fraud, sanctions, complaints, and dispute programs; analyzes client activity to identify risks; improves compliance workflows and tooling; collaborates with Product, Engineering, Client Services, and Finance; conducts client outreach; supports audits, examinations, investigations, and regulatory inquiries; and reports compliance trends to leadership.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Conduct CDD and EDD reviews for LATAM-related customers, investigate cross-border transactions and potential money laundering or sanctions evasion, assess OFAC exposure, review ownership and source-of-funds information, disposition screening alerts, prepare UAR escalations, and support onboarding, monitoring, risk methodology, and compliance process improvements.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

Reviews mortgage loan packages, underwriting documentation, data, and fees for regulatory compliance, accuracy, completeness, and salability. Captures and audits loan information, identifies discrepancies and exceptions, researches rebuttals, runs system validations, documents findings, and coordinates with internal teams to resolve issues and meet review timelines.

Conduct KYC reviews, restricted-party screening, export-control and sanctions compliance reviews, sales opportunity assessments, and end-user due diligence. Maintain compliance records, databases, reports, dashboards, and authorization tracking. Review transactions under EAR and ITAR requirements, identify risks, resolve screening matches, support audits and training, and collaborate with Legal, Sales Operations, Finance, Procurement, and other teams while escalating higher-risk matters.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Reviews labor and wage compliance for public works and construction projects, including certified payroll, prevailing wage, apprenticeship, subcontractor documentation, payment records, and closeout files. Tracks deficiencies, coordinates corrections, maintains audit-ready records, validates data, supports reporting and audits, trains stakeholders, and recommends process improvements. Collaborates with construction operations, project management, accounting, procurement, contractors, subcontractors, agencies, and legal teams.

Supports compliance and risk management for Life Sciences account operations. Administers work order processes, maintains CMMS data, supports audits, partners with stakeholders on compliant maintenance workflows, and facilitates training on Life Sciences requirements. The role requires analytical, organizational, communication, and client relationship skills, along with experience in compliance, risk management, audit, facilities, or project management.

Supports investment guideline compliance testing and reporting across KKR’s insurance asset classes. Responsibilities include reviewing compliance reports, launching sidecar processes, responding to client inquiries, performing scenario analysis, onboarding pre-trade compliance rules, automating analyses with AI, and ensuring data quality. The role partners with investment teams, portfolio managers, senior management, clients, and internal stakeholders.

Supports international trade compliance programs, including post-entry and post-shipment reviews, recordkeeping, restricted-party screening, audit defense, customs broker issue resolution, regulatory analysis, and compliance project monitoring. The role requires expertise in U.S. Customs procedures, HTS and ECCN classification, import/export regulations, free trade agreements, country of origin, Incoterms, commercial invoices, ERP systems, and business analytics.

Maintains and governs disaster recovery, COOP, contingency, and failover documentation for a federal DoD-aligned IT environment. Ensures RMF CP-family compliance, accessibility, version control, audit readiness, and technical accuracy. Coordinates with engineering, cybersecurity, continuity, and database teams; prepares evidence, after-action reports, corrective action plans, test reports, templates, and documentation standards. The role is fully remote and requires an active Secret clearance, bachelor’s degree, at least five years of relevant experience, and ITIL v4 Foundation certification.

Supports mortgage origination compliance through complaint investigations, regulatory and investor examinations, risk-based monitoring, transactional testing, regulatory research, root cause analysis, reporting, and remediation. Independently manages multiple compliance matters, develops testing methodologies and monitoring materials, communicates findings to regulators and leadership, and recommends improvements to compliance controls and the Compliance Management System.

Performs cybersecurity risk assessments, compliance reviews, audits, and RMF/ATO support for federal systems. Identifies vulnerabilities, control gaps, and compliance deficiencies; develops mitigation strategies, remediation reports, risk analyses, and traceability matrices. Coordinates with government stakeholders, auditors, system owners, engineers, and vendors. Maintains cybersecurity policies, evidence, findings, dashboards, and risk records while monitoring remediation and evolving federal requirements. The role may include occasional onsite visits and support for third-party and supply-chain risk management.