Lead Security Risk Analyst

Jobgether; Remote; IDR 200.000.000 - 300.000.000; Full time

Job summary

A recruitment platform is seeking a Regulatory Compliance Analyst to manage compliance for innovative financial solutions. This role involves leading audits and ensuring adherence to regulatory standards like SOC 2 and GDPR, while fostering a proactive compliance culture across teams. The ideal candidate will have 3–7+ years of experience in compliance, excellent program management skills, and strong communication abilities. This position offers a remote setup with extensive benefits, including unlimited PTO and wellness stipends.

Benefits

95% coverage of Medical, Dental, and Vision premiums

Equity for every team member

Unlimited PTO

Wellness stipend

One-time stipend for home office setup

Qualifications

• 3–7+ years of experience in compliance, GRC, or security assurance.
• Familiarity with SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks.
• Strong communication and influence skills across various stakeholders.

Responsibilities

• Own compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI.
• Lead compliance audits and certifications end-to-end.
• Identify gaps and risks, driving remediation plans.

Skills

Compliance expertise

Program management

Attention to detail

Strong communication

Job description

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Regulatory Compliance Analyst – REMOTE. In this role, you will play a crucial part in shaping the compliance landscape of our partner’s innovative financial solutions. Your expertise will drive the adherence to various regulatory standards and ensure that we not only meet but exceed industry requirements. You’ll collaborate with various teams to foster a proactive compliance culture and help navigate the complexities of audits and certifications. If you’re a dynamic individual eager to influence the regulatory framework of an evolving industry, we’d love to hear from you.

Accountabilities

• Own compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI.
• Lead compliance audits and certifications end-to-end.
• Maintain and evolve compliance policies aligned with regulatory expectations.
• Ensure operational adherence across engineering, security, legal, and operations.
• Build a proactive compliance culture within the team.
• Identify gaps and risks, driving remediation plans.
• Assist in compliance-related activities including refining KYB, KYC, and AML processes.

Requirements

• 3–7+ years of experience in compliance, GRC, or security assurance.
• Familiarity with SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks.
• Excellent program management skills with the ability to coordinate teams.
• Strong attention to detail and ability to translate complex requirements into clear tasks.
• Strong communication and influence skills across various stakeholders.

Benefits

• 95% coverage of Medical, Dental, and Vision premiums.
• Equity for every team member as part of ownership culture.
• Flexible hybrid setup with a prime office for NYC-based teammates.
• Unlimited PTO for rest and personal time.
• Monthly budget for testing products as a user.
• Wellness stipend for fitness or therapy.
• One-time stipend for home office setup.
• Frequent company events and team gatherings.

Why Apply Through Jobgether?

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role’s core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.