Top Compliance Analyst Jobs in Boston, MA

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, validate controls, assess risks, track remediation, and provide compliance reporting. Partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to translate requirements into practical controls. Improve GRC tooling, automation, evidence workflows, and repeatable compliance processes.

Processes IRS and state levies, B-Notices, C-Notices, civil penalties, withholding activities, tax forms, and federal and state reporting. Maintains compliance with tax regulations, resolves inquiries and discrepancies, manages workflow queues, documents activities, and supports continuous improvement. Requires accuracy, timeliness, attention to detail, Excel proficiency, and collaboration with internal teams.

Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Develops compliance analytics for AML, sanctions, and consumer compliance programs. Builds data pipelines, dashboards, scorecards, automated reporting, and data quality processes using dbt, GitLab, Python, SQL, Tableau, and Snowflake. Translates regulatory requirements into actionable insights, risk indicators, and metrics while communicating findings to senior management and regulatory stakeholders.

Monitor and resolve pre- and post-trade compliance alerts, maintain trading rules in the order management system, and analyze trade and position data using SQL. Automate compliance workflows with code and AI tools, maintain restricted securities lists, support MNPI processes, track regulatory developments, and assist with filings, audits, system upgrades, and compliance projects.

Monitors mutual fund investment compliance, reviews Charles River alerts, researches breaches, tests tax and regulatory requirements, and documents compliance activities. Supports prospectus and SAI guideline reviews, sub-adviser and service provider oversight, SEC and IRS compliance testing, regulatory filings, Board reporting, due diligence, and compliance projects. Communicates compliance guidance to sub-advisers and collaborates with internal partners under senior team supervision.

Manages enterprise security and compliance by conducting risk assessments, analyzing security trends, responding to threat intelligence and incidents, coordinating with internal and external stakeholders, maintaining audit documentation, and improving security procedures. The role also develops physical security training, supports compliance with regulations including the Bank Secrecy Act, and creates threat response and recovery plans. It is hybrid, office-based, includes occasional travel between locations, and requires on-call incident response availability.

Supports IT procurement, purchasing, vendor management, third-party risk, privacy, compliance, audit readiness, and governance activities. Responsibilities include RFPs and vendor evaluation, purchase orders and invoice reconciliation, vendor due diligence, contract compliance, policy administration, remediation tracking, business continuity and disaster recovery governance, privacy documentation, reporting, and process improvement. The role also provides guidance to less experienced team members and partners with IT Security, Legal, Privacy, Finance, auditors, vendors, and business teams.

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Conduct trade practice surveillance, support customer onboarding, prepare CFTC regulatory filings, maintain exchange compliance policies, investigate potential violations, monitor market activity, and provide rotating coverage during live market hours.

Conduct trade practice surveillance, support customer onboarding, prepare CFTC regulatory filings, maintain exchange policies, investigate potential violations, monitor market participation and underlying industry news, and provide rotational coverage during live market hours.

Support governance, risk, and compliance by managing third-party risk, customer security assurance, cyber risk, SOX ITGCs, and security governance. Partner with security, engineering, legal, audit, privacy, finance and procurement to build scalable processes, improve audit readiness, and automate security workflows.

Conducts cybersecurity risk assessments, compliance reviews, audits, continuous monitoring, and remediation tracking for a federal government client. Develops security policies and compliance documentation, supports VA audit activities, coordinates corrective actions, analyzes findings, and provides prioritized risk mitigation recommendations. Collaborates with technical teams, program leaders, government stakeholders, and auditors to strengthen cybersecurity compliance and support risk-based decisions.

Supports investment teams by monitoring transactions and holdings for compliance with client guidelines and regulatory requirements. Reviews investment management agreements, evaluates client guidelines, maintains the Sentinel monitoring system, provides real-time pre-trade support, resolves post-trade exceptions, and collaborates with relationship, product management, and portfolio management teams.

Supports compliance, fraud, sanctions, complaints, and dispute programs; analyzes client activity to identify risks; improves compliance workflows and tooling; collaborates with Product, Engineering, Client Services, and Finance; conducts client outreach; supports audits, examinations, investigations, and regulatory inquiries; and reports compliance trends to leadership.

Monitors quality management systems and business processes, produces operational reports, analyzes data, maps processes, and supports productivity improvements. Ensures GDP compliance for healthcare logistics, including corrective actions, risk assessments, cold-chain transportation, document control, training, audits, recalls, and customer requirements. Provides quality and technical training, maintains compliance records, supports regulatory inspections, and develops AI-enabled solutions.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Conduct CDD and EDD reviews for LATAM-related customers, investigate cross-border transactions and potential money laundering or sanctions evasion, assess OFAC exposure, review ownership and source-of-funds information, disposition screening alerts, prepare UAR escalations, and support onboarding, monitoring, risk methodology, and compliance process improvements.

Supports automotive client import compliance across the United States and Canada. Reviews customs documentation, classifications, valuations, country-of-origin determinations, trade programs, and regulatory requirements. Partners with customs brokers and internal teams to resolve entry issues, coordinate post-entry corrections, support audits, and improve compliance processes. Requires consistent Thursday-through-Monday evening and weekend availability.

Serves as the IAM compliance subject matter expert, developing governance frameworks, assessing access-control compliance, guiding remediation, and supporting application teams. Maintains compliance data, reporting, documentation, and support materials while promoting IAM best practices and regulatory adherence. Collaborates with security, infrastructure, and application teams to operationalize policies, manage risks, and improve IAM solutions across cloud and enterprise environments.

Conduct independent QA reviews of AML and financial crime investigations, including transaction monitoring, sanctions screening, EDD, and name screening. Evaluate decisions, documentation, regulatory adherence, and risk-based outcomes; identify defects and provide feedback. Analyze quality trends, prepare reports and dashboards, facilitate calibration sessions, support coaching and remediation, and recommend improvements to QA frameworks, workflows, scorecards, and controls. Participate in AML projects, UAT, process validation, and AI-enabled quality initiatives.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

Reviews mortgage loan packages, underwriting documentation, data, and fees for regulatory compliance, accuracy, completeness, and salability. Captures and audits loan information, identifies discrepancies and exceptions, researches rebuttals, runs system validations, documents findings, and coordinates with internal teams to resolve issues and meet review timelines.

Conduct KYC reviews, restricted-party screening, export-control and sanctions compliance reviews, sales opportunity assessments, and end-user due diligence. Maintain compliance records, databases, reports, dashboards, and authorization tracking. Review transactions under EAR and ITAR requirements, identify risks, resolve screening matches, support audits and training, and collaborate with Legal, Sales Operations, Finance, Procurement, and other teams while escalating higher-risk matters.