[Hiring] IT Compliance Analyst @Incode Technologies

Role Description

Identity is trust—and at Incode, trust has to be provable. As an IT Compliance Analyst on our fast-growing Technology, Security and Compliance team, you'll turn our security, privacy, and compliance commitments into evidence: controls that hold, audits that pass, and answers our customers can rely on.

This is a GRC role reporting to the Senior Director of IT Compliance, and it reaches into every corner of the company. You'll help leaders across all departments navigate:

• SOC 2
• ISO/IEC 27001
• ISO/IEC 22301
• ISO/IEC 42001
• HIPAA
• GDPR
• CCPA

You'll represent Incode in front of auditors, prospects, and vendors. And you'll build the processes, policies, and training that make compliance a habit rather than a scramble—so the world's leading banks, fintechs, and platforms can keep saying yes to Incode. If you thrive in a fast-paced startup environment where your work directly shapes what we can sell and who we can serve, this role is built for you.

Qualifications

• 5+ years of experience across a combination of Privacy Compliance, Risk Management, Information Security, and Information Technology.
• A key member of a compliance program at a SaaS company, in frameworks such as SOC 2, HIPAA, GDPR, PCI-DSS, ISO/IEC 27001, or ISO/IEC 42001.
• Significant experience developing Privacy, Compliance, and Information Security policies and procedures—and successfully executing programs that meet the objectives of the business.
• Extensive experience dealing with internal and external auditors.
• Extensive knowledge of GRC best practices for SaaS organizations.
• Familiarity with security standards (SOC 2, ISO/IEC 27001, ISO/IEC 42001, HITRUST, and NIST 800) and privacy laws (CCPA and GDPR).
• Familiarity with SaaS, PaaS, and IaaS providers and their impact and challenges from a compliance perspective.
• CISM, NCSF, CCSP, CISSP, or CISA certification.
• Experience using AI to automate compliance tasks.
• Fantastic written and verbal communication skills in English; Spanish is a plus.
• Authorized to work lawfully in the United States of America or in Mexico—Incode does not engage in immigration sponsorship at this time.

Requirements

• Compliance Standards & Privacy by Design: Work with leaders across all departments to navigate security control compliance standards and privacy by design.
• Customer & Prospect Trust: Respond to security, legal, and privacy requests from existing customers and prospects.
• Audits, Assessments & DPIAs: Liaise with outside parties during third-party audits, privacy risk assessments, and DPIAs.
• Policies, Procedures & Whitepapers: Write and test internal Security, Privacy, and Compliance policies, procedures, and whitepapers.
• Strategy & Risk Advisory: Create and implement the strategy for compliance and privacy technologies, policies, and practices.
• Change Projects & New Capabilities: Drive change projects and build new capabilities that keep Incode's environment secure and compliant.
• Education & Training: Communicate the purpose and vision of our security, compliance, and privacy strategies to employees.
• Staying Ahead: Track the latest security, compliance, and privacy innovations and bring the best of them into how we operate.

Benefits

• Flexible Working Hours & Workplace
• Open Vacation Policy

Company Description

Incode is the leading provider of world-class identity solutions that is reinventing the way humans authenticate and verify their identities online to power a world of digital trust.

Through our revolutionary identity solutions, we are unleashing the business potential of universal industries including finance, government, retail, hospitality, gaming, and more, by reducing fraud and transforming human interactions with data, products, and services.

Incode is a Series B unicorn ($1.25B valuation) rewriting how the world proves identity. Our AI-powered platform lets leading banks, fintechs, marketplaces, and governments deliver friction-free experiences while defeating fraud and safeguarding privacy.

Recently named a leader in the Gartner® Magic Quadrant™ for Identity Verification, we're scaling fast—and we need an IT Compliance Analyst who can make our trust provable—across every framework, every audit, and every customer question.