Mid Level Compliance Analyst Jobs
Mid level compliance analyst jobs go to professionals ready to own compliance programs end to end, drive regulatory assessments with limited oversight, and guide junior staff through complex requirements. Roles run across Technology & Software, Education, and Healthcare & Medical Services, with 52% remote or hybrid availability, and employers like Plaid, UT Southwestern Medical Center, and Prescient Edge hiring at this level now.
Find JobsOverview
Showing 5 of 40+ Mid Level Compliance Analyst jobs
Job Title/Req: Information Security Governance, Risk and Compliance Analyst - 619502
Location: Boston - Pier 4; hybrid in-office 2-3 days per week
Duration: 12 months
Expected Work Scheduled/Hours: 40
Expected Work Scheduled/Hours: Mon thru Fri 8 am-5 pm EST
Primary Responsibilities
- Perform information security risk assessments across applications, infrastructure, business processes, projects, and third parties
- Support maintenance of the US information security risk register, risk treatment plans, remediation status, and supporting evidence
- Execute third-party security reviews and vendor risk assessments in partnership with Procurement, Legal, Privacy, and business stakeholders
- Support lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions
- Collect, validate, and organize compliance and control evidence for internal audits, external audits, regulatory inspections, and assurance activities
- Track remediation plans and coordinate follow-up activities with risk owners, control owners, and cross-functional stakeholders
- Support control assessments and control effectiveness reviews against information security policies, standards, and regulatory requirements
- Maintain governance, risk, and compliance documentation, repositories, metrics, dashboards, and reporting artifacts to support management visibility
- Assist with preparation of executive reporting materials, governance committee content, and risk review documentation
- Identify opportunities to improve GRC processes through standardization, automation, documentation quality, and repeatable workflows
Requirements
- Minimum of 3 years of experience in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
- Working knowledge of cybersecurity and risk frameworks such as NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or similar standards
- Experience supporting risk assessments, compliance reviews, audits, control assurance, third-party reviews, or remediation tracking
- Strong written communication skills with the ability to develop clear documentation, reports, procedures, and stakeholder-ready materials
- Strong analytical and organizational skills with attention to detail and the ability to manage multiple priorities
- Relevant certifications such as Security+, GSEC, SSCP, CISA, CRISC, or similar certifications preferred
Travel and Location
- Estimated travel required: 0-5%
- On-site in Boston preferred 1-2 days hybrid or 100% remote with occasional travel to Boston
Job Title/Req: Information Security Governance, Risk and Compliance Analyst - 619502
Location: Boston - Pier 4; hybrid in-office 2-3 days per week
Duration: 12 months
Expected Work Scheduled/Hours: 40
Expected Work Scheduled/Hours: Mon thru Fri 8 am-5 pm EST
Primary Responsibilities
- Perform information security risk assessments across applications, infrastructure, business processes, projects, and third parties
- Support maintenance of the US information security risk register, risk treatment plans, remediation status, and supporting evidence
- Execute third-party security reviews and vendor risk assessments in partnership with Procurement, Legal, Privacy, and business stakeholders
- Support lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions
- Collect, validate, and organize compliance and control evidence for internal audits, external audits, regulatory inspections, and assurance activities
- Track remediation plans and coordinate follow-up activities with risk owners, control owners, and cross-functional stakeholders
- Support control assessments and control effectiveness reviews against information security policies, standards, and regulatory requirements
- Maintain governance, risk, and compliance documentation, repositories, metrics, dashboards, and reporting artifacts to support management visibility
- Assist with preparation of executive reporting materials, governance committee content, and risk review documentation
- Identify opportunities to improve GRC processes through standardization, automation, documentation quality, and repeatable workflows
Requirements
- Minimum of 3 years of experience in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
- Working knowledge of cybersecurity and risk frameworks such as NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or similar standards
- Experience supporting risk assessments, compliance reviews, audits, control assurance, third-party reviews, or remediation tracking
- Strong written communication skills with the ability to develop clear documentation, reports, procedures, and stakeholder-ready materials
- Strong analytical and organizational skills with attention to detail and the ability to manage multiple priorities
- Relevant certifications such as Security+, GSEC, SSCP, CISA, CRISC, or similar certifications preferred
Travel and Location
- Estimated travel required: 0-5%
- On-site in Boston preferred 1-2 days hybrid or 100% remote with occasional travel to Boston
See All 40 Mid Level Compliance Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Compliance Analyst Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software11
- Education6
- Healthcare & Medical Services5
- Insurance3
- Banking & Financial Services3
Mid Level Compliance Analyst Jobs: Frequently Asked Questions
How do I get a mid level compliance analyst job?
Position your experience around ownership, not just execution. Highlight compliance projects you led from start to finish, regulatory frameworks you applied independently, and any cross-functional work where you influenced decisions. Tailor your resume to each posting by mirroring its specific regulatory language, such as SOX, AML, or HIPAA, and emphasize measurable outcomes like audit findings resolved or policy gaps closed.
Which companies hire mid level compliance analysts?
Companies hiring mid level compliance analysts right now include Plaid, UT Southwestern Medical Center, and Prescient Edge, based on current listings on Migrate Mate as of November 2026. Hiring at this level covers financial institutions, healthcare systems, technology firms, and regulated manufacturers that need analysts who can operate independently within established compliance frameworks.
Are there remote mid level compliance analyst jobs?
Yes, remote and hybrid options are common at this level. About 52% of mid level compliance analyst openings are remote or hybrid as of November 2026, reflecting how many compliance functions operate effectively outside a central office. On-site roles still exist, particularly in financial services and healthcare where data sensitivity and regulatory oversight requirements favor in-person work.
How do I move up to a mid level compliance analyst role?
Progression from entry level to mid level comes from deepening your regulatory expertise and accumulating ownership over time. Build fluency in one or two specific frameworks, take on projects where you own deliverables rather than just contribute to them, and document measurable impact such as audit pass rates or process improvements. Earning a certification like CRCM or CCEP also signals readiness for greater responsibility.
Which industries hire the most mid level compliance analysts?
Mid Level compliance analyst roles concentrate in Technology & Software, Education, and Healthcare & Medical Services, based on current listings on Migrate Mate as of November 2026. These sectors carry heavy regulatory obligations and require analysts who can interpret requirements independently, not just execute checklists under close supervision.