IT Compliance Analyst

Incode is a Series B unicorn ($1.25B valuation) rewriting how the world proves identity. Our AI-powered platform lets leading banks, fintechs, marketplaces, and governments deliver friction-free experiences while defeating fraud and safeguarding privacy. Customers such as Citi, AirBnB, Block, Chime, Sixt, and TikTok rely on Incode to power their identity verification and security. Recently named a leader in the Gartner® Magic Quadrant™ for Identity Verification, we're scaling fast—and we need an IT Compliance Analyst who can make our trust provable—across every framework, every audit, and every customer question.

Identity is trust—and at Incode, trust has to be provable. As an IT Compliance Analyst on our fast-growing Technology, Security and Compliance team, you'll turn our security, privacy, and compliance commitments into evidence: controls that hold, audits that pass, and answers our customers can rely on.

This is a GRC role reporting to the Senior Director of IT Compliance, and it reaches into every corner of the company. You'll help leaders across all departments navigate SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA. You'll represent Incode in front of auditors, prospects, and vendors. And you'll build the processes, policies, and training that make compliance a habit rather than a scramble—so the world's leading banks, fintechs, and platforms can keep saying yes to Incode. If you thrive in a fast-paced startup environment where your work directly shapes what we can sell and who we can serve, this role is built for you.

• Compliance Standards & Privacy by Design — Work with leaders across all departments to navigate security control compliance standards and privacy by design—SOC 2, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 42001, HIPAA, GDPR, and CCPA.
• Customer & Prospect Trust — Respond to security, legal, and privacy requests from existing customers and prospects—questionnaires, contracts, and data subject requests—and build efficient, repeatable processes around them. Represent Incode in Security and Compliance inquiries from prospective customers and vendors.
• Audits, Assessments & DPIAs — Liaise with outside parties during third-party audits, privacy risk assessments, and DPIAs, and partner with Engineering to develop a process compliance assessment.
• Policies, Procedures & Whitepapers — Write and test internal Security, Privacy, and Compliance policies, procedures, and whitepapers—practical, effective, and ethical documents that address real compliance controls.
• Strategy & Risk Advisory — Create and implement the strategy for compliance and privacy technologies, policies, and practices that secure protected and sensitive data. Advise senior leadership by identifying critical Privacy and Compliance issues and recommending risk-reduction solutions.
• Change Projects & New Capabilities — Drive change projects and build the new capabilities that keep Incode's environment secure and compliant as we scale.
• Education & Training — Communicate the purpose and vision of our security, compliance, and privacy strategies to employees in every function, and develop and roll out practical, effective internal training programs across the company.
• Staying Ahead — Track the latest security, compliance, and privacy innovations—including AI that automates compliance work—and bring the best of them into how we operate.

• Business-Context Translator — You put threats, incidents, and control gaps into business terms leadership can act on—and you're comfortable being the Privacy and Compliance subject-matter expert in the room.
• Builder of Systems, Not Checklists — You design compliance processes that scale: efficient, repeatable, and light enough that teams actually follow them.
• Auditor-Ready, Always — You've sat across from internal and external auditors many times, and you know what defensible evidence looks like before anyone asks for it.
• Self-Driven & Detail-Obsessed — You catch what others miss, and you don't wait to be told what needs doing.
• Fast Cadence, Ethical Calls — You operate in and maintain a fast pace, making practical, principled decisions in a startup environment where the ground keeps moving.
• Clear Communicator — Fantastic written and verbal communication in English (Spanish is a plus)—you can educate a new hire and persuade an executive in the same afternoon.

• 5+ years of experience across a combination of Privacy Compliance, Risk Management, Information Security, and Information Technology.
• A key member of a compliance program at a SaaS company, in frameworks such as SOC 2, HIPAA, GDPR, PCI-DSS, ISO/IEC 27001, or ISO/IEC 42001.
• Significant experience developing Privacy, Compliance, and Information Security policies and procedures—and successfully executing programs that meet the objectives of the business.
• Extensive experience dealing with internal and external auditors.
• Extensive knowledge of GRC best practices for SaaS organizations.
• Familiarity with security standards (SOC 2, ISO/IEC 27001, ISO/IEC 42001, HITRUST, and NIST 800) and privacy laws (CCPA and GDPR).
• Familiarity with SaaS, PaaS, and IaaS providers and their impact and challenges from a compliance perspective.
• CISM, NCSF, CCSP, CISSP, or CISA certification.
• Experience using AI to automate compliance tasks.
• Fantastic written and verbal communication skills in English; Spanish is a plus.
• Authorized to work lawfully in the United States of America or in Mexico—Incode does not engage in immigration sponsorship at this time.

• Mission with Meaning — Shape how billions of people prove identity—safely, simply, and ethically.
• Rocket-Ship Growth — Join at an inflection point where your strategies will compound in value for years.
• Elite Team & Backing — Work truly global with top engineers, designers, and investors who share your ambition to dominate a category.
• Ownership & Autonomy — Operate like a founder with the resources of a unicorn.
• Global Impact — Every program you launch will reverberate across industries and continents.

Ready to ignite the future of trust?

Make trust provable. Join Incode and build the compliance foundation the world's leading companies rely on.