Compliance and Risk Analyst II
TrueAccord
Responsibilities and Duties
- Support the development, management, and enhancement of compliance and risk frameworks (e.g., ISO, NIST, PCI), ensuring alignment with regulatory standards and internal policies.
- Lead periodic risk assessments to identify potential compliance risks and propose effective control measures. Partner with senior stakeholders to drive prioritization and risk mitigation strategies.
- Maintain, update, and improve the compliance and risk controls library, ensuring information is accurate, comprehensive, and accessible to internal teams and external auditors.
- Conduct regular compliance testing and control monitoring to verify effectiveness, recommending improvements as needed.
- Lead investigations into compliance issues, overseeing risk assessments and implementing corrective actions.
- Collaborate with internal stakeholders to develop, review, and refine policies and procedures to align with regulatory standards and evolving best practices.
- Prepare clear, actionable reports and presentations for senior leadership and regulatory bodies, summarizing risk assessments, control effectiveness, and compliance performance.
- Facilitate collaboration between Engineering, Product, Legal, and Operations teams to integrate compliance considerations into business processes and product development, acting as a liaison to enhance regulatory adherence.
- Identify opportunities to streamline and enhance compliance processes through technology or procedural improvements; collaborate with IT and cross-functional teams to implement these solutions.
- Manage the client due diligence and audit process by quality assessing responses for accuracy.
- Act as a mentor to junior compliance and risk team members, providing guidance in compliance practices, policies, and risk management processes.
- Perform additional assignments and duties as assigned.
Requirements
- Demonstrated integrity and adherence to high ethical standards.
- Excellent English communication skills, both oral and written.
- Strong writing and presentation skills, with the ability to communicate complex data insights and compliance concepts clearly.
- Advanced understanding of GRC platforms and experience with documenting internal controls and processes
- Adaptable to shifting priorities and responsibilities, maintaining high-quality results in a dynamic work environment.
- Strong attention to detail, critical thinking skills, initiative, and problem solving skills
- Strong interpersonal skills. Proven ability to collaborate constructively, resolve conflicts, and maintain positive working relationships across teams.
- Demonstrated ability to work independently in a remote environment, managing time effectively and balancing multiple tasks.
- Proactive in identifying challenges, solutions-oriented, and capable of driving projects to completion.
- Ability to meet deadlines in a fast-paced environment while maintaining focus and adaptability.
- Commitment to the company mission and goals.
Technical Requirements
- Experience with compliance management and GRC tools, with the ability to optimize compliance processes and identify automation opportunities.
- Strong analytical skills to assess risk and compliance data, identifying trends and risks that may impact regulatory adherence.
- In-depth knowledge of regulatory frameworks (e.g., ISO 27001, PCI DSS) and experience applying them in an operational or fintech context.
- Ability to integrate compliance and risk management practices with organizational systems to improve data consistency and compliance monitoring efficiency.
- Skilled in designing and implementing compliance testing and control validation strategies.
- Familiarity with data visualization and reporting tools (Excel, Power BI, Snowflake, Looker etc.) to communicate compliance and risk insights effectively.
- Experience with Mac systems, Google Suite (G Suite), and GRC tools like JIRA, AuditBoard, or similar platforms.
Education & Experience
- 5+ years of relevant compliance and risk management experience
- Bachelor’s degree or equivalent relevant experience
- ISO Internal Audit Certification
Bonus Points
- Knowledge of specific regulatory requirements, such as TCPA, GLBA, Privacy Laws, FDCPA, or other financial regulations.
- Ability to utilize SQL and other analytical tools to access, analyze, and interpret large data sets. Connect different systems and databases to aggregate and assess relevant compliance data.