IT Compliance Analyst

Incode; Santa Fe (NM); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible Working Hours

Open Vacation Policy

Equal Opportunities

Job summary

Incode is seeking an IT Compliance Analyst to turn security, privacy, and compliance commitments into proven evidence. You will manage controls, audits, and responses to customer inquiries, reporting to the Senior Director of IT Compliance.

The role covers privacy, data protection, and regulatory requirements across multiple frameworks, collaborating with engineering and product teams in a fast-paced, startup-like environment.

Qualifications

• 5+ years in privacy compliance, information security, or risk management in SaaS or tech environments.
• Experience implementing and maintaining governance, risk, and compliance programs (SOC 2, HIPAA, GDPR).
• Strong ability to translate requirements into practical policies and controls.

Responsibilities

• Navigate SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA for audits and assessments.
• Represent the company in audits with customers and vendors; respond to inquiries and questionnaires.
• Develop and maintain security, privacy, and compliance policies, procedures, and training.

Skills

Privacy Compliance

Information Security

Risk Management

GRC

Education

Bachelor's degree in a related field

Job description

POWER A WORLD OF TRUST

Incode is the leading provider of world-class identity solutions that is reinventing the way humans authenticate and verify their identities online to power a world of digital trust. Through our revolutionary identity solutions, we are unleashing the business potential of universal industries including finance, government, retail, hospitality, gaming, and more, by reducing fraud and transforming human interactions with data, products, and services.

We’re in the process of rapidly scaling our diverse global team and we’re looking for entrepreneurial individuals and leaders who are curious, driven, and excited by ownership to join a Unicorn-status scale-up!

About Incode

Incode is a Series B unicorn ($1.25B valuation) rewriting how the world proves identity. Our AI-powered platform lets leading banks, fintechs, marketplaces, and governments deliver friction-free experiences while defeating fraud and safeguarding privacy. Customers such as Citi, AirBnB, Block, Chime, Sixt, and TikTok rely on Incode to power their identity verification and security. Recently named a leader in the Gartner® Magic Quadrant™ for Identity Verification, we're scaling fast—and we need an IT Compliance Analyst who can make our trust provable—across every framework, every audit, and every customer question.

The Impact You'll Make

Identity is trust—and at Incode, trust has to be provable. As an IT Compliance Analyst on our fast-growing Technology, Security and Compliance team, you'll turn our security, privacy, and compliance commitments into evidence: controls that hold, audits that pass, and answers our customers can rely on.

This is a GRC role reporting to the Senior Director of IT Compliance, and it reaches into every corner of the company. You'll help leaders across all departments navigate SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA. You'll represent Incode in front of auditors, prospects, and vendors. And you'll build the processes, policies, and training that make compliance a habit rather than a scramble—so the world's leading banks, fintechs, and platforms can keep saying yes to Incode. If you thrive in a fast-paced startup environment where your work directly shapes what we can sell and who we can serve, this role is built for you.

What You'll Own & Drive

Compliance Standards & Privacy by Design

• — Work with leaders across all departments to navigate security control compliance standards and privacy by design—SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA.

Customer & Prospect Trust

• — Respond to security, legal, and privacy requests from existing customers and prospects—questionnaires, contracts, and data subject requests—and build efficient, repeatable processes around them. Represent Incode in Security and Compliance inquiries from prospective customers and vendors.

Audits, Assessments & DPIAs

• — Liaise with outside parties during third-party audits, privacy risk assessments, and DPIAs, and partner with Engineering to develop a process compliance assessment.

Policies, Procedures & Whitepapers

• — Write and test internal Security, Privacy, and Compliance policies, procedures, and whitepapers—practical, effective, and ethical documents that address real compliance controls.

Strategy & Risk Advisory

• — Create and implement the strategy for compliance and privacy technologies, policies, and practices that secure protected and sensitive data. Advise senior leadership by identifying critical Privacy and Compliance issues and recommending risk-reduction solutions.

Change Projects & New Capabilities

• — Drive change projects and build the new capabilities that keep Incode's environment secure and compliant as we scale.

Education & Training

• — Communicate the purpose and vision of our security, compliance, and privacy strategies to employees in every function, and develop and roll out practical, effective internal training programs across the company.

Staying Ahead

• — Track the latest security, compliance, and privacy innovations—including AI that automates compliance work—and bring the best of them into how we operate.

The Qualities That Set You Apart

Business-Context Translator

• — You put threats, incidents, and control gaps into business terms leadership can act on—and you're comfortable being the Privacy and Compliance subject-matter expert in the room.

Builder of Systems, Not Checklists

• — You design compliance processes that scale: efficient, repeatable, and light enough that teams actually follow them.

Auditor-Ready, Always

• — You've sat across from internal and external auditors many times, and you know what defensible evidence looks like before anyone asks for it.

Self-Driven & Detail-Obsessed

• — You catch what others miss, and you don't wait to be told what needs doing.

Fast Cadence, Ethical Calls

• — You operate in and maintain a fast pace, making practical, principled decisions in a startup environment where the ground keeps moving.

Clear Communicator

• — Fantastic written and verbal communication in English (Spanish is a plus)—you can educate a new hire and persuade an executive in the same afternoon.

Your Background

• 5+ years of experience across a combination of Privacy Compliance, Risk Management, Information Security, and Information Technology.
• A key member of a compliance program at a SaaS company, in frameworks such as SOC 2, HIPAA, GDPR, PCI-DSS, ISO/IEC 27001, or ISO/IEC 42001.
• Significant experience developing Privacy, Compliance, and Information Security policies and procedures—and successfully executing programs that meet the objectives of the business.
• Extensive experience dealing with internal and external auditors.
• Extensive knowledge of GRC best practices for SaaS organizations.
• Familiarity with security standards (SOC 2, ISO/IEC 27001, ISO/IEC 42001, HITRUST, and NIST 800) and privacy laws (CCPA and GDPR).
• Familiarity with SaaS, PaaS, and IaaS providers and their impact and challenges from a compliance perspective.
• CISM, NCSF, CCSP, CISSP, or CISA certification.
• Experience using AI to automate compliance tasks.
• Fantastic written and verbal communication skills in English; Spanish is a plus.
• Authorized to work lawfully in the United States of America or in Mexico—Incode does not engage in immigration sponsorship at this time.

Why Incode?

Mission with Meaning

• — Shape how billions of people prove identity—safely, simply, and ethically.

Rocket-Ship Growth

• — Join at an inflection point where your strategies will compound in value for years.

Elite Team & Backing

• — Work truly global with top engineers, designers, and investors who share your ambition to dominate a category.

Ownership & Autonomy

• — Operate like a founder with the resources of a unicorn.

Global Impact

• — Every program you launch will reverberate across industries and continents.

Aspects of our Culture:

• High performanceFreedom & responsibilityContext, not controlHighly aligned, loosely coupledContinuous FeedbackPromotions & DevelopmentLearn more about

Benefits & Perks:

• Flexible Working Hours & WorkplaceOpen Vacation PolicyEqual Opportunities:

Equal Opportunities:

Incode is an equal opportunity employer, committed to creating a diverse and inclusive work environment. We take great pride in having an inclusive, diverse, and global team, and we are always looking for talented and passionate individuals from all backgrounds and walks of life. As part of our commitment to inclusion, we ensure that reasonable accommodations are available throughout the hiring process. If you require any accommodation due to a disability or specific need, please let our Talent Acquisition team know—we’ll do our best to support you.

Applicant Data Privacy:

We will only use your personal information concerning Incode’s application, recruitment, and hiring processes.