Top Compliance Analyst Jobs in Boston, MA

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Leads Rubrik’s commercial security audit and certification portfolio, managing audit calendars, external auditors, evidence collection, control mapping, findings remediation, certification lifecycle activities, and leadership reporting. Partners with InfoSec, IT, Legal, Engineering, and Risk Management to maintain continuous audit readiness across SOC, ISO, CSA STAR, TISAX, HITRUST, and HIPAA frameworks. Uses Jira-based dashboards, GRC tooling, AI, and automation to streamline audit workflows and support customer security inquiries.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

Reviews, drafts, and tracks customer and regulatory complaint responses for the bank and fintech partners. The role maintains complaint records in a GRC tool, monitors deadlines, identifies root causes and trends, escalates complex cases, supports audits and regulatory requests, and applies consumer financial protection regulations including Reg E, UDAAP, FACTA, Reg Z, Reg B, and FCRA.

Supports healthcare compliance programs through audits, monitoring, regulatory submissions, data analysis, corrective action tracking, risk identification, and policy governance. Coordinates with business owners, auditors, regulators, and cross-functional teams; prepares reports and documentation; researches regulations; supports training and quality reviews; and helps maintain compliance and records management processes.

Supports global export and import trade compliance activities, including export and customs classifications, denied-party screening, sanctions and licensing reviews, country-of-origin analysis, customs broker coordination, audits, recordkeeping, and compliance monitoring. Maintains trade compliance data in Oracle GTM, resolves trade holds, supports risk assessments and corrective actions, develops procedures, and partners with business and IT teams to improve compliance processes and automation.

Conduct compliance testing and monitoring across the bank and fintech partners, document findings, identify control weaknesses, assess regulatory changes, and collaborate with business, risk, legal, and partner teams to strengthen compliance processes.

Supports AML and compliance operations for a cryptocurrency platform. Responsibilities include reviewing transaction monitoring alerts, investigating accounts and blockchain activity, preparing SARs, performing KYC/KYB and EDD reviews, sanctions screening, using blockchain analytics tools, and optimizing monitoring rules with compliance engineering and cross-functional teams.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Manages enterprise privacy and regulatory compliance programs across concurrent workstreams. Coordinates stakeholders, develops project plans and governance processes, supports privacy reviews and risk assessments, researches state regulations, manages regulatory filings, analyzes regulator findings, supports audits, and communicates compliance changes, performance, risks, and KPIs to leadership. The role also mentors junior analysts and helps implement compliant business procedures and products in a health insurance environment.

Supports insurance product compliance by researching state regulations, preparing and submitting policy and product filings, responding to regulatory inquiries, and coordinating approved changes with underwriting, claims, marketing, and technology teams. Contributes to compliance programs, procedures, training, risk management, and regulatory change implementation.

Coordinates 340B Drug Pricing Program compliance across the health system by conducting audits, reviewing eligibility and purchasing data, monitoring contract pharmacy activity, maintaining split-billing software, validating charge-code mappings, preparing reports, and identifying risks, discrepancies, duplicate discounts, diversion, and claim-processing issues. The role supports pharmacy, finance, and administrative leadership through data analysis, compliance assessments, reporting, and program optimization.

Reviews retail advertising and communications for compliance with insurance, securities, FINRA, SEC, and state regulations. Researches regulatory requirements, responds to regulator and customer inquiries, coordinates subject matter reviews, tracks communications for retention, maintains compliance materials, and communicates regulatory changes. The role requires managing high volumes under tight deadlines while ensuring consistent review standards.

Own compliance decisions for healthcare professional clearance, including background check disqualifications, credential reviews, license violations, state requirements, audits, renewals, and reporting. Interpret statutes, regulations, and agency guidance; create risk analyses and decision records; recommend operational implementations; and resolve escalations in partnership with Legal and cross-functional teams.

Reviews trade surveillance reports, identifies and escalates compliance exceptions, monitors employee access and communications, supports regulatory inquiries and audits, analyzes compliance data, develops Excel reporting, and contributes to automation and AI-driven compliance initiatives. The role also provides administrative and project support to the compliance department.

Serves as the subject matter expert for individual disability insurance product compliance and supports supplemental health products. Monitors and interprets federal and state regulations, assesses risks, performs compliance testing, develops policies and guidance, supports product filings, and advises cross-functional teams. The role also assists with audits and regulatory examinations, develops training materials, reviews customer-facing materials, and participates in industry activities.

Reviews retail communications for compliance with firm policies, FINRA, SEC rules, and applicable laws. Explains required revisions, ensures record retention, researches policy questions, maintains compliance materials, supports workflow processes, and completes high-volume assignments within service-level deadlines.

Reviews retail communications for compliance with insurance, securities, FINRA, SEC, and state and federal regulations. Researches advertising requirements, responds to regulatory and customer inquiries, coordinates subject matter expert reviews, communicates compliance changes, maintains review records, and updates internal compliance materials. The role requires managing high volumes of work under tight deadlines in a fully remote environment.

Coordinates compliance event administration from intake through resolution, including stakeholder follow-up, reporting, documentation, and escalation. Supports governance projects by maintaining plans, deadlines, risks, decisions, and deliverables. Identifies workflow automation opportunities using Power Automate and Power BI, gathers requirements, assists with testing, validates data, prepares analyses and presentations, and supports management requests and process improvements.

Owns policy and SOP governance, compliance reviews, audit-ready documentation, incident and complaint reviews, corporate risk tracking, corrective actions, and compliance process improvements. Partners with business teams and the Chief Compliance Officer to identify gaps, escalate risks, maintain controls, and develop tools, templates, and guidance. The role requires strong communication, regulated-industry experience, and proficiency with AI productivity and workflow automation tools.

Support client CMMC and cybersecurity compliance engagements by reviewing documentation, validating technical controls, collecting evidence, maintaining SSPs and POA&Ms, assessing gaps, communicating findings, and preparing audit-readiness reports. The role involves working with clients, executives, engineers, and senior compliance staff while developing expertise in CMMC, NIST, and DFARS requirements.

Executes risk-based compliance testing for lending activities across mortgage, consumer, commercial, and business banking. Responsibilities include assessing controls, planning and performing substantive testing, documenting test scripts, evaluating exceptions, reviewing findings, maintaining regulatory knowledge, and communicating results to management. The role also supports risk assessments, special projects, audit remediation, and junior team members while exercising independent judgment under minimal supervision.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Leads Medicaid provider compliance, audit delivery, regulatory activities, and risk mitigation. The role interprets audit findings, recommends corrective actions, supports regulator inquiries, manages compliance projects, oversees policy documentation, and partners across teams to improve data integrity, operational efficiency, and regulatory outcomes. It requires strong analytics, communication, project leadership, healthcare operations knowledge, and advanced Microsoft Excel proficiency.