Security Compliance Analyst II — AI Governance & GRC

P2P; Maryland; On-site; USD 110,000 - 150,000; Full time

Job summary

Chainalysis is seeking a Security Analyst II, Trust to operate and enhance our security compliance program, focusing on evidence collection, control testing, and customer assurance.

You will also contribute to AI governance as Chainalysis expands its use of AI-powered products. Partner across the company to turn security requirements into practical, repeatable processes and support audits.

Qualifications

• Experience in GRC, compliance, or IT audit within a SaaS, fintech, or technology environment.
• Practical knowledge of frameworks such as SOC 2, ISO 27001, or NIST.
• Proven ability to test controls, track remediation, and translate technical requirements into actions.
• Strong organizational and communication skills to manage multiple assessments and stakeholders.
• A systems-minded approach to improving workflows and curiosity about AI security and governance.
• Experience supporting AI risk assessments, AI vendor reviews, model governance, or enterprise AI-use policies.
• Experience using APIs, spreadsheets, scripting, or workflow automation to improve evidence collection or reporting.
• Experience in blockchain, cryptocurrency, financial services, cybersecurity, or another high-trust environment.

Responsibilities

• Contribute to AI governance activities, including AI use-case reviews, vendor assessments, data-handling evaluations, and documentation of applicable security controls
• Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing
• Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation
• Maintain accurate compliance records and automate recurring evidence-gathering workflows
• Translate technical compliance information into clear responses for customer questionnaires and RFPs
• Support AI governance by evaluating AI governance risks like data leakage, prompt injection, and third-party exposure
• Provide security metrics and status updates to stakeholders while building cross-functional partnerships

Skills

GRC experience

Compliance knowledge

IT audit

SOC 2 familiarity

Strong communication

AI governance

Job description

Chainalysis is seeking a Security Analyst II, Trust to operate and enhance our security compliance program, focusing on evidence collection, control testing, and customer assurance.

You will also contribute to AI governance as Chainalysis expands its use of AI-powered products. Partner across the company to turn security requirements into practical, repeatable processes and support audits.