IT Regulatory Compliance Analyst
Location: Remote
Duration: 6+ Months
Banking experience required.
AUDIT COMPLIANCE
Must-Have-Requirements:
- 5+ years of overall experience - Strong Technology & Privacy Regulatory Expertise – Deep knowledge of GLBA, GDPR, CCPA, NYDFS 23 NYCRR 500, FFIEC IT Handbook, and related cybersecurity and data protection frameworks.
- Technology Risk & Information Security Experience
– Hands-on experience in IT risk management, cybersecurity governance, data protection controls, and regulatory compliance within financial services.
- First Line Risk Management & RCSA Experience – Proven experience supporting RCSA, issue management, control design validation, and regulatory change integration in a FLoD environment.
- Regulatory Advisory & Stakeholder Engagement Skills – Ability to interpret complex regulations and provide practical guidance to IT, security, and business stakeholders while exercising effective challenge. - Strong Analytical & Reporting Capabilities – Experience conducting risk assessments, monitoring compliance metrics, escalating material risks, and delivering executive-level reporting
5+ years of overall experience
- Strong Consumer Banking Regulatory Expertise – Deep knowledge of deposit and payments regulations (e.g., Reg E, Reg CC, Reg D, E-Sign, UDAAP, state-specific requirements) and supervisory expectations. - First Line Risk Management Experience – Proven experience in FLoD compliance or operational risk roles supporting RCSA, issue management, and control implementation. - Regulatory Advisory & Stakeholder Engagement Skills – Ability to interpret regulations, provide practical business guidance, and effectively challenge and influence senior stakeholders. - Risk Assessment & Control Framework Knowledge – Experience identifying control gaps, supporting remediation, and aligning processes to regulatory and industry standards. - Strong Reporting & Escalation Discipline – Ability to monitor compliance risks, escalate material issues appropriately, and deliver clear, executive-level reporting. Nice-to-Haves: - CRCM