Technology Compliance Associate

Job not on LinkedIn

🔥 0 minutes ago

🗽 New York – Remote

🗽 New York – Remote

💵 $150k - $175k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Trumid

WebsiteLinkedInAll Job Openings

51 - 200 employees

💳 Fintech

💸 Finance

☁️ SaaS

Fintech • Finance • SaaS

Trumid is a financial technology company that specializes in providing electronic trading solutions for the fixed income market. The company combines technology, intuitive design, and market expertise to create a differentiated and user-friendly trading platform. Trumid offers customizable market data feeds, flexible protocols, and quantitative models to enhance liquidity and trading efficiency for its users. With a focus on user experience and efficient trade execution, Trumid leverages real-time market data and analytics to inform trading decisions. The platform is designed to connect a community of users through technology to optimize liquidity and market opportunities.

📋 Description

• Develop and implement AI usage policies and governance frameworks • Implement AI security guardrails and controls using AI Gateway and similar tools • Conduct security assessments and risk evaluations for AI tools and services • Review AI tool usage and provide metrics through observability platforms • Maintain data privacy and protection standards across AI tool adoption • Manage vendor assessments and monitoring for AI service providers • Monitor emerging AI regulations, including NIST AI RMF and EU AI Act developments • Operate the SOC 2 compliance program, including control frameworks, evidence collection, audit coordination, and certification maintenance • Conduct security risk assessments, phishing simulations, vulnerability management, and coordinate penetration testing • Drive BCP/DR planning, testing, and documentation • Manage security incident response and post-incident reviews • Track and report security metrics, compliance posture, and risk remediation • Oversee CrowdStrike Falcon Complete, including alert triage, monitoring, configuration coordination, and escalations • Support identity and access management, employee access reviews, and privileged access controls • Track vulnerability scan findings and coordinate remediation with engineering • Manage third-party penetration testing engagements and track findings through remediation • Own the end-to-end DDQ process, including response accuracy, version control, and automation initiatives • Serve as primary contact for client and prospect security questionnaires • Conduct vendor security assessments and manage third-party risk • Support legal and compliance teams with vendor contracts and technical due diligence • Report to the Technology Compliance Manager and work with clients, auditors, and regulators

🎯 Requirements

• 4+ years in information security or GRC/Compliance with hands-on technical experience and demonstrated leadership • Familiarity with cloud security (AWS required, GCP valued), security tooling (CrowdStrike or similar EDR/XDR platforms), and infrastructure security controls • Understanding of AI/LLM security risks, data privacy concerns, and emerging AI governance frameworks (NIST AI RMF, EU AI Act) • Operational experience running SOC 2 programs in production environments with successful audit outcomes • Working knowledge of SOC 2, ISO 27001, NIST frameworks and their practical application • Proven ability to communicate security concepts to institutional clients and represent technical capabilities professionally • Experience with security compliance in financial services or other regulated industries • Excellent written and verbal skills across technical and non-technical audiences • CISSP, CISM, Security+, or equivalent preferred • Bachelor's degree in Computer Science, Information Security, or related field • AWS required; familiarity with GCP valued • Experience with CrowdStrike Falcon Complete or similar EDR/XDR platforms • Knowledge of SSO, MFA, and access control systems

🏖️ Benefits

• Highly competitive compensation • Fully paid medical, dental and vision coverage • Remote work flexibility • Team-oriented and collaborative company culture