Fintech Compliance & Security Lead — GRC & Audits

Rain; United States; On-site; USD 65,000 - 110,000; Full time

Benefits offered by this job

Top-tier health coverage

Equity ownership for all team members

Hybrid/remote-friendly setup

Unlimited PTO

Card/testing budget

Wellness stipend

Home office stipend

Team events and offsites

Job summary

Rain is seeking a Compliance & Audit Lead to own our global compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI. You will oversee audits, renewals, and new certifications, while ensuring policies stay current and aligned with regulatory expectations.

You’ll collaborate with engineering, security, legal, and operations to ensure adherence and drive a proactive compliance culture. You’ll drive KYB, KYC, and AML processes, identifying gaps early and guiding remediation.

Qualifications

• 3–7+ years of compliance, GRC, or security assurance experience, ideally in fintech, payments, SaaS, or other regulated industries.
• Deep familiarity with SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks.
• Excellent program management skills and ability to coordinate across teams, manage timelines, and keep multiple workstreams moving.
• Strong attention to detail with the ability to translate complex requirements into actionable tasks.
• Strong communication and influence skills, able to work with engineers, executives, and external auditors.

Responsibilities

• Own Rain’s compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI, ensuring we meet and exceed regulatory and audit requirements.
• Lead all compliance audits and certifications end-to-end — including renewals, observation periods, and new certifications Rain chooses to pursue.
• Maintain and evolve Rain’s policies, keeping them up-to-date, consistent across entities, and aligned with regulatory expectations.
• Ensure operational adherence by partnering with engineering, security, legal, and operations to make sure we are doing what we say we are doing in our policies.
• Build a proactive compliance culture, helping the team understand obligations and embedding compliance into day-to-day decision making.
• Identify gaps and risks early, then drive remediation plans to keep Rain audit-ready at all times.
• Assist the team in other compliance related activities including actionalize and refine KYB, KYC and AML processes and procedures based on best practices informed by operational data.

Skills

Compliance program management

Audits & certifications

Regulatory awareness

Cross-functional collaboration

Communication

Tools

Vanta

Job description

Rain is seeking a Compliance & Audit Lead to own our global compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI. You will oversee audits, renewals, and new certifications, while ensuring policies stay current and aligned with regulatory expectations.

You’ll collaborate with engineering, security, legal, and operations to ensure adherence and drive a proactive compliance culture. You’ll drive KYB, KYC, and AML processes, identifying gaps early and guiding remediation.