InfoSec Analyst II, Trust

P2P; Maryland; On-site; USD 90,000 - 150,000; Full time

Job summary

Chainalysis is seeking an InfoSec Analyst II, Trust to operate and enhance our security compliance program across SOC 2, ISO 27001, and client reviews. You will gather evidence, test controls, and drive remediation while contributing to AI governance as we expand AI-powered product use.

Collaboration across teams will transform security requirements into practical processes. You will translate complex compliance data into clear customer responses, maintain records, and support risk assessments,

Qualifications

• Experience in GRC, compliance, or IT audit within a SaaS, fintech, or technology environment.
• Practical knowledge of SOC 2, ISO 27001, or NIST frameworks.
• Proven ability to test controls, track remediation, and translate technical requirements into actions.
• Strong organizational and communication skills to manage multiple assessments and stakeholders.
• Systems-minded approach to improving workflows and curiosity about AI security and governance.
• Experience supporting AI risk assessments, AI vendor reviews, model governance, or enterprise AI-use policies.

Responsibilities

• Contribute to AI governance activities, including AI use-case reviews, vendor assessments, data-handling evaluations, and documentation of applicable security controls.
• Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing.
• Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation.
• Maintain accurate compliance records and automate recurring evidence-gathering workflows.
• Translate technical compliance information into clear responses for customer questionnaires and RFPs.
• Support AI governance by evaluating AI governance risks like data leakage, prompt injection, and third-party exposure.
• Provide security metrics and status updates to stakeholders while building cross-functional partnerships.

Skills

GRC experience

Compliance testing

IT audit

SOC 2 knowledge

ISO 27001 knowledge

NIST knowledge

Controls testing

Stakeholder management

AI governance

AI risk assessments

Tools

APIs

Scripting

Workflow automation

Spreadsheets

Job description

The InfoSec organization at Chainalysis helps protect our company, products, customers, and data as the business grows. We work across security engineering, trust, governance, risk, and compliance to strengthen our control environment, support customer and regulatory expectations, and enable the business to move quickly with confidence.

The InfoSec Analyst II, Trust will operate and improve our security compliance program, focusing on evidence collection, control testing, and customer assurance. You will also contribute to AI governance as Chainalysis expands its use of AI-powered products. Partnering across the company, you will turn security requirements into practical, repeatable processes.

In this role, you’ll:

• Contribute to AI governance activities, including AI use-case reviews, vendor assessments, data-handling evaluations, and documentation of applicable security controls

• Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing

• Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation

• Maintain accurate compliance records and automate recurring evidence-gathering workflows

• Translate technical compliance information into clear responses for customer questionnaires and RFPs

• Support AI governance by evaluating AI governance risks like data leakage, prompt injection, and third-party exposure

• Provide security metrics and status updates to stakeholders while building cross-functional partnerships

We’re looking for candidates who have:

• Experience in GRC, compliance, or IT audit within a SaaS, fintech, or technology environment

• Practical knowledge of frameworks such as SOC 2, ISO 27001, or NIST

• Proven ability to test controls, track remediation, and translate technical requirements into actions

• Strong organizational and communication skills to manage multiple assessments and stakeholders

• A systems-minded approach to improving workflows and curiosity about AI security and governance

• Experience supporting AI risk assessments, AI vendor reviews, model governance, or enterprise AI-use policies

Nice to have experience:

• Experience using APIs, spreadsheets, scripting, or workflow automation to improve evidence collection or reporting

• Experience in blockchain, cryptocurrency, financial services, cybersecurity, or another high-trust environment

AI at Chainalysis

AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

About Chainalysis

Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.

You belong here.

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you.