Top Compliance Analyst Jobs in NYC, NY

Own hardware certification and cybersecurity compliance for connected vehicle devices and OEM partnerships. Coordinate audits, translate ISO 21434 and other requirements into engineering controls, support threat modeling and firmware analysis, manage FirstNet certification, identify compliance gaps, automate evidence gathering, and communicate security posture and risk to engineering teams, customers, partners, and auditors.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Conduct trade practice surveillance, support customer onboarding, prepare CFTC regulatory filings, maintain exchange policies, investigate potential violations, monitor market participation and underlying industry news, and provide rotational coverage during live market hours.

Conduct first-pass compliance reviews of affordable housing resident files across LIHTC, HUD Section 8, and USDA programs. Apply established rules to income, assets, deductions, certifications, and recertifications; verify automated outputs; document findings; escalate ambiguous cases; support testing and UAT; and meet accuracy, volume, and SLA targets.

Conduct BSA/AML/OFAC transaction monitoring, investigate alerts, support UAR filings, and identify suspicious activity. Perform compliance testing for ECOA, SCRA, and FCRA adherence; track regulatory developments and program metrics; respond to audits and partner requests; use SQL and AI tools to identify risks and improve workflows. Partner with Legal, Risk, Product, and senior Compliance leaders to build processes, documentation, controls, and corrective actions in a fast-moving fintech environment.

Execute KYC/KYB onboarding and transaction monitoring: verify documents, analyze beneficial ownership, sanctions/PEP/adverse media screening, conduct enhanced due diligence, draft SARs, send RFIs, perform KYC refreshes, support policy improvements, and monitor emerging financial crime trends including on-chain analytics.

Supports U.S., Canadian, and global import/export compliance by auditing customs entries, assisting with HTS classification, maintaining trade compliance data and records, monitoring tariff exposure, tracking KPIs, and coordinating with customs brokers, freight forwarders, and internal stakeholders. The role analyzes compliance risks, supports audits and regulatory inquiries, and helps improve global supply chain processes.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Investigates escalated and complex sales and marketing compliance cases, recommends corrective actions, drafts policies and investigative guidance, presents findings, mentors analysts, conducts quality reviews, identifies compliance trends, and partners with Sales, Legal, Operations, and Technology to improve workflows. The role focuses on Medicare Advantage compliance, agent and agency investigations, audits, remediation, and process improvement.

Supports retail banking compliance by reviewing AML and fraud alerts, investigating suspicious transactions, filing CTRs, reviewing new accounts, handling tax levies and subpoenas, tracking Regulation E claims, following up with branches, and preparing audit documentation under senior supervision.

Reviews labor and wage compliance for public works and construction projects, including certified payroll, prevailing wage, apprenticeship, subcontractor documentation, payment records, and closeout files. Tracks deficiencies, coordinates corrections, maintains audit-ready records, validates data, supports reporting and audits, trains stakeholders, and recommends process improvements. Collaborates with construction operations, project management, accounting, procurement, contractors, subcontractors, agencies, and legal teams.

Support the legal and compliance teams by advising business units on policy, preparing FINRA filings, managing personal trading programs, reviewing compliance requests, supporting onboarding/certifications, and improving compliance workflows and systems.

Conducts audits and compliance reviews for New York City’s Commercial Waste Zone program. Assesses contractors’ compliance with contracts, laws, rules, and regulations; performs surveys and research; develops audit procedures; prepares workpapers, spreadsheets, interviews, memos, letters, and reports; supports corrective action plans and audit status updates; and may conduct site visits.

Serve as the compliance SME for HSA, FSA, and HRA products: review marketing and customer content, lead compliance risk assessments (including AI tools), advise product and ops teams on transaction and regulatory issues, monitor regulatory changes, support escalations and audits, and recommend controls and remediation for identified risks.

Supports international trade compliance programs, including post-entry and post-shipment reviews, recordkeeping, restricted-party screening, audit defense, customs broker issue resolution, regulatory analysis, and compliance project monitoring. The role requires expertise in U.S. Customs procedures, HTS and ECCN classification, import/export regulations, free trade agreements, country of origin, Incoterms, commercial invoices, ERP systems, and business analytics.

Support global trade, customs, and sustainability compliance by advising on tariff classification, country-of-origin, customs valuation, FTAs, duties, and product marking. Maintain classification data, review shipments, support circularity programs and sustainability claims substantiation, perform audits and reporting, and monitor emerging trade and sustainability regulations while partnering cross-functionally.

Supports an asset management compliance program through regulatory testing, monitoring, annual compliance reviews, SEC filings, policy maintenance, remediation tracking, audit support, and regulatory recordkeeping. The role collaborates with business and control functions to identify and address compliance risks, supports regulatory examinations and special projects, and maintains compliance documentation. Candidates should have investment adviser or financial services compliance experience and knowledge of the Investment Advisers Act of 1940.

Supports mortgage origination compliance through complaint investigations, regulatory and investor examinations, risk-based monitoring, transactional testing, regulatory research, root cause analysis, reporting, and remediation. Independently manages multiple compliance matters, develops testing methodologies and monitoring materials, communicates findings to regulators and leadership, and recommends improvements to compliance controls and the Compliance Management System.

Performs cybersecurity risk assessments, compliance reviews, audits, and RMF/ATO support for federal systems. Identifies vulnerabilities, control gaps, and compliance deficiencies; develops mitigation strategies, remediation reports, risk analyses, and traceability matrices. Coordinates with government stakeholders, auditors, system owners, engineers, and vendors. Maintains cybersecurity policies, evidence, findings, dashboards, and risk records while monitoring remediation and evolving federal requirements. The role may include occasional onsite visits and support for third-party and supply-chain risk management.

Lead data analytics for network and merchant compliance: design tests, build models and reporting, mine large datasets, improve data quality and processes, advise stakeholders on risk, and manage a team to implement compliance analytics solutions.

Lead Horizon3’s federal compliance program for DoW IL4 and IL5 AWS offerings. Manage FedRAMP and NIST SP 800-53 frameworks, authorization assessments, System Security Plans, continuous monitoring, audits, risk assessments, policies, training, vendor questionnaires, and external auditor relationships. Advise engineering teams on translating federal requirements into cloud-native technical controls and participate in compliance-related incident response. The role is fully remote, requires U.S. citizenship and eligibility for a government security clearance, and involves up to 5% travel.

Build and scale compliance processes for Lemonade’s P&C insurance products across Car, Home, Renters, and Pet lines. Develop policies, provide regulatory guidance to leadership, partner with Insurance Operations and Product, manage compliance projects, and improve processes through AI and automation while handling multiple priorities and deadlines.

Supports citywide workforce equity and compliance by reviewing agency EEO plans and reports, analyzing demographic and training data, refining reporting metrics, translating legal mandates into procedures, coordinating cross-agency workforce analysis, and preparing mandated compliance reports and recommendations.

Supports customs, import/export, RMA, procurement, shipping, and customer due diligence workflows. Reviews trade documentation, assists with HTS classification and country-of-origin records, conducts restricted-party screening, evaluates export-control facts and red flags, and supports export license applications. Coordinates with brokers, freight forwarders, logistics, procurement, supply chain, sales, and internal stakeholders while maintaining compliance records and escalating issues.

Supports IT security and compliance programs, including HITRUST, HIPAA, and SOC 2 activities; policy documentation; risk assessments; audit evidence gathering; incident monitoring; and mitigation. Manages employee onboarding and offboarding, access controls, devices, SaaS tools, vendor reviews, GCP compliance documentation, incident response, and change management. Works independently with the CTO in a remote healthcare SaaS startup.