Senior GRC Analyst
TinesFull Time
Senior (5 to 8 years)
Candidates should have 3-7+ years of experience in compliance, GRC, or security assurance, preferably within fintech, payments, SaaS, or regulated industries. A deep understanding of SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks is required, along with a proven history of leading successful audits. Excellent program management, strong attention to detail, and effective communication and influence skills are also necessary. Experience with card issuing, stablecoins, payments, or cross-border fintech products, as well as familiarity with ISO 27001, DORA, or other emerging global regulations, are considered advantageous.
The Regulatory & Security Compliance Analyst will own the company's compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI, ensuring adherence to regulatory and audit requirements. This role involves leading all compliance audits and certifications from initiation to completion, maintaining and updating company policies to align with regulatory expectations, and ensuring operational adherence by collaborating with engineering, security, legal, and operations teams. The analyst will also foster a proactive compliance culture, identify and drive remediation plans for gaps and risks, and assist with refining KYB, KYC, and AML processes.
Spend management platform for Web3 organizations
Rain provides a spend management platform designed specifically for decentralized organizations in the Web3 ecosystem, such as DAOs and blockchain projects. The platform allows these organizations to manage their finances by integrating digital assets with traditional fiat currency systems, enabling seamless transactions. Rain's technology leverages blockchain infrastructure to facilitate instant and secure payments, allowing users to make real-world purchases more quickly than traditional methods. Unlike conventional fintech solutions that rely on outdated systems, Rain focuses on the unique needs of Web3 teams, offering a direct payment pipeline that connects them with vendors. The company's goal is to empower Web3 organizations to operate efficiently while maintaining the ability to transact with traditional merchants globally.