Regulatory & Security Compliance Analyst

Rain; United States; Hybrid; USD 65,000 - 110,000; Full time

Benefits offered by this job

Equity

Hybrid work setup

Unlimited PTO

Medical/Dental/Vision coverage

Job summary

Rain is seeking a dedicated compliance leader to own Rain’s program across SOC 2, SOC 1, GDPR and PCI, coordinating with engineering, security and legal to meet regulatory expectations, audit requirements, and cross-entity consistency.

You’ll lead audits end-to-end, maintain and evolve policies, identify gaps and remediation plans, and foster a proactive compliance culture as Rain scales its borderless fintech platform globally.

Qualifications

• 3–7+ years of compliance, GRC, or security assurance experience in fintech, payments, SaaS, or other regulated industries.
• Deep familiarity with SOC 2, SOC 1, GDPR, PCI and audits; proven track record of leading successful audits.
• Strong program management and communication skills, able to coordinate across teams and keep workstreams moving.

Responsibilities

• Own Rain’s compliance program across SOC 2, SOC 1, GDPR, and PCI, ensuring we meet regulatory and audit requirements.
• Lead all compliance audits and certifications end-to-end, including renewals and new certifications Rain pursues.
• Maintain and evolve Rain’s policies, ensuring consistency across entities and alignment with regulatory expectations.
• Ensure operational adherence by partnering with engineering, security, legal, and operations to implement declared policies.
• Build a proactive compliance culture and embed compliance into day-to-day decision making.
• Identify gaps and risks early, drive remediation plans to keep Rain audit-ready at all times.
• Assist in KYB, KYC and AML process refinement based on best practices and data.

Skills

Compliance

Program management

Attention to detail

Communication

Tools

Vanta

Job description

Overview

At Rain, we’re rebuilding the global financial pipes money flows through. Our infrastructure makes stablecoins usable in the real world by powering credit card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. If you’re curious, bold, and excited to help shape a borderless financial system, we’d love to talk.

Our Ethos

Operating at the epicenter of stablecoin innovation means moving fast and thinking globally. Our team reflects the diverse, international audiences we serve. We hire people who stay agile as the tide ebbs and flows, fix what’s broken without waiting, chase trends before they peak, and remember to have fun through it all.

Much of our product team is based in NYC so we prefer in-person but we would be open to fully remote candidates in exceptional cases.

What you’ll do

• Own Rain’s compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI, ensuring we meet and exceed regulatory and audit requirements.
• Lead all compliance audits and certifications end-to-end — including renewals, observation periods, and new certifications Rain chooses to pursue.
• Maintain and evolve Rain’s policies, keeping them up-to-date, consistent across entities, and aligned with regulatory expectations.
• Ensure operational adherence by partnering with engineering, security, legal, and operations to make sure we are doing what we say we are doing in our policies.
• Build a proactive compliance culture, helping the team understand obligations and embedding compliance into day-to-day decision making.
• Identify gaps and risks early, then drive remediation plans to keep Rain audit-ready at all times.
• Assist the team in other compliance related activities including actionalize and refine KYB, KYC and AML processes and procedures based on best practices informed by operational data.

What we’re looking for

• 3–7+ years of compliance, GRC, or security assurance experience, ideally in fintech, payments, SaaS, or other regulated industries.
• Deep familiarity with SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks, with a proven track record of leading successful audits.
• Excellent program management skills — you can coordinate across teams, manage timelines, and keep multiple compliance workstreams moving.
• Strong attention to detail with the ability to turn complex requirements into clear, actionable tasks.
• Strong communication and influence skills, able to work with everyone from engineers to executives to external auditors.

Nice to haves, but not mandatory

• Experience in card issuing, stablecoins, payments, or cross-border fintech products.
• Familiarity with ISO 27001, DORA, or other emerging global regulations.
• Experience will tools like Vanta

Benefits

Our team works hard, so we make sure our benefits do too. Here’s what you can expect as a Rainmaker:

• Top-tier coverage: We cover 95% of Medical, Dental, and Vision premiums.
• Ownership that matters: Every team member gets equity because we believe in building together.
• Work your way: Flexible hybrid setup with a prime SoHo office for NYC-based teammates.
• Unlimited PTO: Because time to rest and reset is just as important as time to ship.
• Product-first perks: Monthly budget to test our cards and features like a real user.
• Wellness support: Monthly stipend to spend on fitness, therapy, or whatever keeps you thriving.
• Home office setup: One-time stipend to create a space that works for you.Team connection: Frequent company events, team dinners, and offsites to stay connected.

_Compensation will vary based on experience from $65,000-$110,000_

_Open to candidates in the US and EU_