Security Analyst II – Trust & AI Governance

Chainalysis; New York, Virginia (NY, MN, PA); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Chainalysis is seeking a Security Analyst II, Trust to operate and enhance our security compliance program, focusing on evidence collection, control testing, and customer assurance. You will also contribute to AI governance as the company expands its use of AI-powered products.

You will partner across the company to translate security requirements into practical, repeatable processes and manage SOC 2, ISO 27001 reviews, evidence gathering, and remediation tracking, while supporting AI governance

Qualifications

• Experience in GRC, compliance, or IT audit within SaaS/fintech/technology environments.
• Hands-on testing of controls and tracking remediation.
• Familiarity with SOC 2, ISO 27001 and NIST frameworks.
• Ability to translate security requirements into actionable tasks.
• Strong organizational and stakeholder management skills.
• Experience supporting AI governance and risk assessments.

Responsibilities

• Contribute to AI governance activities, including AI use-case reviews, vendor assessments, data-handling evaluations, and documentation of applicable security controls
• Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing
• Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation
• Maintain accurate compliance records and automate recurring evidence-gathering workflows
• Translate technical compliance information into clear responses for customer questionnaires and RFPs
• Provide security metrics and status updates to stakeholders while building cross-functional partnerships

Skills

GRC/Compliance

IT Audit

SOC 2

ISO 27001

NIST

AI Governance

Evidence Collection

Vendor Assessments

Security Metrics

Job description

Chainalysis is seeking a Security Analyst II, Trust to operate and enhance our security compliance program, focusing on evidence collection, control testing, and customer assurance. You will also contribute to AI governance as the company expands its use of AI-powered products.

You will partner across the company to translate security requirements into practical, repeatable processes and manage SOC 2, ISO 27001 reviews, evidence gathering, and remediation tracking, while supporting AI governance