IT Compliance Analyst

Incode Technologies is an AI-powered identity verification and fraud prevention company. It provides identity, biometric, liveness, KYC/KYB, authentication, age assurance, and deepfake-defense solutions for global enterprises across financial services, fintech, marketplaces, government, healthcare, telecommunications, gaming, and other industries.

San Francisco, USA
About Incode Technologies, Inc.

Incode develops and operates an enterprise identity platform for verifying users, businesses, employees, and AI agents. Its offerings include document and biometric verification, facial recognition, liveness and deepfake detection, government-record matching, sanctions and PEP screening, risk decisioning, configurable workflows, case management, analytics, integrations, APIs, SDKs, and privacy-preserving on-device processing. The company serves organizations in financial services, fintech and crypto, commerce, marketplaces, public sector, healthcare, travel, telecommunications, gaming, social media, and related sectors.

View jobs by Incode Technologies, Inc.

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will translate security, privacy, and compliance commitments into practical controls, defensible evidence, and repeatable processes. You will support audits, respond to customer and vendor requests, develop policies and training, advise leadership on risk, and improve compliance capabilities as the organization scales.

Requirements

  • 5+ years of experience across privacy compliance, risk management, information security, and information technology
  • Experience contributing to a SaaS compliance program using frameworks such as SOC 2, HIPAA, GDPR, PCI-DSS, ISO/IEC 27001, or ISO/IEC 42001
  • Experience developing privacy, compliance, and information security policies and procedures
  • Experience working with internal and external auditors
  • Knowledge of GRC best practices for SaaS organizations
  • Familiarity with SOC 2, ISO/IEC 27001, ISO/IEC 42001, HITRUST, NIST 800, CCPA, and GDPR
  • Familiarity with SaaS, PaaS, and IaaS providers from a compliance perspective
  • CISM, NCSF, CCSP, CISSP, or CISA certification
  • Experience using AI to automate compliance tasks
  • Written and verbal communication skills in English
  • Authorization to work lawfully in the United States or Mexico
  • Spanish is a plus

Responsibilities

  • Navigate security control compliance standards and privacy-by-design requirements
  • Respond to customer and prospect security, legal, privacy, questionnaire, contract, and data-subject requests
  • Represent the organization in security and compliance inquiries from prospective customers and vendors
  • Liaise with outside parties during third-party audits, privacy risk assessments, and DPIAs
  • Partner with Engineering to develop a process compliance assessment
  • Write and test security, privacy, and compliance policies, procedures, and whitepapers
  • Create and implement compliance and privacy technology, policy, and practice strategies
  • Identify privacy and compliance issues and recommend risk-reduction solutions to senior leadership
  • Drive change projects and build capabilities that maintain a secure and compliant environment
  • Develop and deliver internal security, compliance, and privacy training programs
  • Track security, compliance, and privacy innovations, including AI compliance automation

Benefits

  • Flexible working hours and workplace
  • Open vacation policy
  • Reasonable accommodations throughout the hiring process