IT Compliance Analyst

What You'll Own & Drive

• Compliance Standards & Privacy by Design: Work with leaders across all departments to navigate security control compliance standards and privacy by design—SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA.
• Customer & Prospect Trust: Respond to security, legal, and privacy requests from existing customers and prospects—questionnaires, contracts, and data subject requests—and build efficient, repeatable processes around them. Represent Incode in Security and Compliance inquiries from prospective customers and vendors.
• Audits, Assessments & DPIAs: Liaise with outside parties during third-party audits, privacy risk assessments, and DPIAs, and partner with Engineering to develop a process compliance assessment.
• Policies, Procedures & Whitepapers: Write and test internal Security, Privacy, and Compliance policies, procedures, and whitepapers—practical, effective, and ethical documents that address real compliance controls.
• Strategy & Risk Advisory: Create and implement the strategy for compliance and privacy technologies, policies, and practices that secure protected and sensitive data. Advise senior leadership by identifying critical Privacy and Compliance issues and recommending risk-reduction solutions.
• Change Projects & New Capabilities: Drive change projects and build the new capabilities that keep Incode's environment secure and compliant as we scale.
• Education & Training: Communicate the purpose and vision of our security, compliance, and privacy strategies to employees in every function, and develop and roll out practical, effective internal training programs across the company.
• Staying Ahead: Track the latest security, compliance, and privacy innovations—including AI that automates compliance work—and bring the best of them into how we operate.

Your Background

• 5+ years of experience across a combination of Privacy Compliance, Risk Management, Information Security, and Information Technology.
• A key member of a compliance program at a SaaS company, in frameworks such as SOC 2, HIPAA, GDPR, PCI-DSS, ISO/IEC 27001, or ISO/IEC 42001.
• Significant experience developing Privacy, Compliance, and Information Security policies and procedures—and successfully executing programs that meet the objectives of the business.
• Extensive experience dealing with internal and external auditors.
• Extensive knowledge of GRC best practices for SaaS organizations.
• Familiarity with security standards (SOC 2, ISO/IEC 27001, ISO/IEC 42001, HITRUST, and NIST 800) and privacy laws (CCPA and GDPR).
• Familiarity with SaaS, PaaS, and IaaS providers and their impact and challenges from a compliance perspective.
• CISM, NCSF, CCSP, CISSP, or CISA certification.
• Experience using AI to automate compliance tasks.
• Fantastic written and verbal communication skills in English; Spanish is a plus.
• Authorized to work lawfully in the United States of America or in Mexico—Incode does not engage in immigration sponsorship at this time.

Why Incode?

• Mission with Meaning: Shape how billions of people prove identity—safely, simply, and ethically.
• Rocket-Ship Growth: Join at an inflection point where your strategies will compound in value for years.
• Elite Team & Backing: Work truly global with top engineers, designers, and investors who share your ambition to dominate a category.
• Ownership & Autonomy: Operate like a founder with the resources of a unicorn.
• Global Impact: Every program you launch will reverberate across industries and continents.

Aspects of our Culture:

• High performance
• Freedom & responsibility
• Context, not control
• Highly aligned, loosely coupled
• Continuous Feedback
• Promotions & Development

Benefits & Perks:

• Flexible Working Hours & Workplace
• Open Vacation Policy
• Equal Opportunities: Incode is an equal opportunity employer, committed to creating a diverse and inclusive work environment. We take great pride in having an inclusive, diverse, and global team, and we are always looking for talented and passionate individuals from all backgrounds and walks of life. As part of our commitment to inclusion, we ensure that reasonable accommodations are available throughout the hiring process. If you require any accommodation due to a disability or specific need, please let our Talent Acquisition team know—we’ll do our best to support you.