SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Chainalysis is seeking an InfoSec Analyst II to operate and improve the company's security compliance program. This role sits within the broader InfoSec organization, which protects the company, products, customers, and data through security engineering, trust, governance, risk, and compliance initiatives.
You will focus on evidence collection, control testing, and customer assurance across SOC 2, ISO 27001, and customer security reviews. A key responsibility is contributing to AI governance as Chainalysis expands its use of AI-powered products—including AI use-case reviews, vendor assessments, data-handling evaluations, and documentation of applicable security controls.
Key responsibilities include:
- Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing
- Contribute to AI governance activities, evaluating risks like data leakage, prompt injection, and third-party exposure
- Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation
- Maintain accurate compliance records and automate recurring evidence-gathering workflows
- Translate technical compliance information into clear responses for customer questionnaires and RFPs
- Provide security metrics and status updates to stakeholders while building cross-functional partnerships
Required qualifications:
- Experience in GRC, compliance, or IT audit within a SaaS, fintech, or technology environment
- Practical knowledge of frameworks such as SOC 2, ISO 27001, or NIST
- Proven ability to test controls, track remediation, and translate technical requirements into actions
- Strong organizational and communication skills to manage multiple assessments and stakeholders
- Systems-minded approach to improving workflows and curiosity about AI security and governance
- Experience supporting AI risk assessments, AI vendor reviews, model governance, or enterprise AI-use policies
Nice-to-have experience includes APIs, spreadsheets, scripting, workflow automation, blockchain, cryptocurrency, financial services, or cybersecurity backgrounds.
