Regulatory Security Compliance Analyst
You will own the compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI, ensuring regulatory and audit requirements are met. You will lead compliance audits and certifications end-to-end, maintain and evolve policies, and ensure operational adherence by partnering with engineering, security, legal, and operations. You will identify gaps and drive remediation plans, build a proactive compliance culture, and assist in refining KYB, KYC, and AML processes and procedures.
Responsibilities
- Own the compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI
- Lead compliance audits and certifications end-to-end
- Maintain and evolve compliance policies
- Ensure operational adherence by partnering with engineering, security, legal, and operations
- Build a proactive compliance culture
- Identify gaps and drive remediation plans
- Assist in refining KYB, KYC, and AML processes and procedures
Requirements
- 3–7+ years of compliance, GRC, or security assurance experience
- Deep familiarity with SOC 2, SOC 1, GDPR, and PCI and proven audit leadership
- Program management skills to coordinate cross-team timelines and workstreams
- Strong attention to detail and ability to translate complex requirements into actionable tasks
- Strong communication and influence skills with engineers, executives, and external auditors
- Nice to have: experience in card issuing, stablecoins, payments, or cross-border fintech products
- Nice to have: familiarity with ISO 27001 or DORA
- Nice to have: experience with Vanta
Benefits
- 95% coverage of Medical, Dental, and Vision premiums
- Equity for all team members
- Flexible hybrid setup with a SoHo office for NYC-based teammates
- Unlimited PTO
- Monthly product testing budget
- Monthly wellness stipend
- One-time home office setup stipend
- Frequent company events, team dinners, and offsites