Compliance Analyst, Trust & Infrastructure

Brain Corp•San Diego, CA

18h•$105,257 - $136,215•Onsite

About The Position

Brain Corp is seeking a Compliance Analyst, Trust & Infrastructure to join our Operations team. In this role, you will sit at the intersection of enterprise security, compliance framework operations, and internal business systems infrastructure. You will own our GRC operations—specifically anchoring our SOC 1/SOC 2, privacy, and continuous control monitoring programs—while serving as the primary project management coordinator for our core business systems. Your mission is to maintain a robust, audit-ready compliance posture, accelerate enterprise sales through trust enablement, and manage the cross-functional project lifecycles required to keep our business systems scaleable, secure, and aligned with technical capacity. You will be the primary coordinator responsible for bridging the gap between our commercial teams (Product, Sales, Marketing, Customer Success), internal Corporate Service teams (Accounting, Legal, Finance, Supply Chain) and our technical execution teams (Engineering, Operations, and External Vendors). You will own the delivery of high priority, cross-functional projects that support the growth trajectory, increased scale, and efficiency we are seeking. You will be organizing the coordination loops and the documentation necessary to ensure our project resourcing and available capacity provide a "shared reality" for the leadership team.

Requirements

4+ years in Project Management, Business Systems Analysis, Compliance, and/or Operations, with proven exposure to SOC 1, SOC 2, or ITGC frameworks—preferably in a hardware/software hybrid environment.
Direct, hands-on administrative experience utilizing compliance automation and trust management platforms (e.g., Vanta, SafeBase, or equivalent).
High proficiency in ERP and CRM business processes, with a strong understanding of their objects, workflows, and limitations without needing to be a dedicated administrator.
Strong structural understanding of ERP, CRM, and billing systems infrastructure, specifically regarding data flows, identity and access management (IAM), user lifecycles, and environment separation.
A "roll-up-your-sleeves" mentality with the ability to pivot from a coordinator to an individual contributor, completing tasks or projects independently when necessary to meet company goals.
Proven ability to manage external vendors and developers through a project lifecycle.
Exceptional ability to navigate a matrixed organization and manage conflicting priorities through data and neutral arbitration.

Nice To Haves

A knack for taking "technical-speak" and translating it into plain English for busy department heads to make the complex feel simple.
A strong advocacy for simple, effective workflows over overly complex ones, believing that a well-organized, accessible tool is far more valuable than an underutilized system.
The ability to visualize a business process from end-to-end (e.g., in Figma) to eliminate inefficiencies and bottlenecks before solutions are engineered.
A proactive approach to ensuring critical privacy, security, or safety features remain highly visible on roadmaps, treating trust as a core product feature.
Exceptional organization that keeps our evidence and controls so well-maintained that an audit feels like a non-event.
The ability to politely but persistently follow up with stakeholders to ensure critical projects progress, serving as the "friendly nudge" that keeps the engine running.
A natural curiosity and professional maturity, with an explicit interest in being mentored to take on broader departmental strategy, architectural planning, and leadership responsibilities over time.
A genuine curiosity about how establishing trust, maintaining compliance, and adhering to security frameworks apply to cloud environments, AI governance tools, and autonomous machines operating in public spaces.

Responsibilities

Serve as the primary driver for successful SOC 1, SOC 2, and privacy audits by continuously gathering infrastructure control evidence, mapping technical workflows, and minimizing audit friction.
Manage the ‘to-do’ list of internal controls that must be formed on a regular cadence for the company’s various Trust programs (Security, Privacy, Safety).
Directly administer our compliance automation and trust platforms (e.g., Vanta) to track internal controls, manage the project tracking log, and systematically remediate discovered infrastructure risks.
Author and maintain foundational IT security, access management, and data privacy policy suites, transforming complex technical frameworks into actionable internal operational procedures.
Oversee the infrastructure deployment calendar, ensuring all modifications to core business systems adhere to strict change management protocols, access controls, and IT General Controls (ITGC).
Facilitate scoping sessions with technical and business stakeholders to map infrastructure dependencies, capture data architecture requirements, and define resource needs for business system updates.
Maintain a centralized "source of truth" project roadmap for the Operations team to sequence infrastructure initiatives, track capacity bottlenecks, and manage vendor delivery lifecycles.
Coordinate user acceptance testing (UAT) and system validation procedures. Draft clear "Internal Release Notes" that translate technical infrastructure shifts into clear impact summaries for cross-functional leadership.
Support the facilitation of bi-weekly calibration meetings where leadership makes trade-offs on project sequencing.
Distill complex project data into simple, executive-level updates for operations leadership, and create lightweight training materials and "cheat sheets" to ensure high adoption rates of new features and workflows.
Maintain a centralized inventory of all Business Systems and compliance vendors, regularly auditing utilization rates and system integrations to identify overlap and eliminate platform sprawl.
Act as the primary operational gatekeeper for the onboarding and offboarding provisioning lifecycle, ensuring all external vendors requesting access to core systems strictly adhere to established Trust and ITGC protocols.
Assist leadership in mapping the operational workflows and system requirements necessary to scale business systems for upcoming channel expansions, ensuring infrastructure automation can handle increased capacity without increasing administrative friction.
Design and deliver lightweight, internal training sessions to upskill teams on basic control requirements, championing a culture of "Safety & Privacy by Design" at the contributor level.
Lead and complete independent projects or ad hoc assignments as directed by leadership, moving beyond a facilitation role to ensure direct delivery of business outcomes.

Benefits

A discretionary annual target bonus
Stock options
401(k) plan with match (no waiting period and immediate vesting)
Comprehensive suite of insurance benefits for employees (and their families) to include a variety of medical plan options (including an HSA with employer contribution), dental, vision, life and disability insurance, Employee Assistance Program (EAP), Legal/Identity support plans, pet insurance.
Access to Flexible Spending Accounts (Medical and Dependent Care)
Generous paid time off including flexible vacation, Paid Sick Leave, time off for volunteering in the community, 10 paid company holidays, and a winter company shutdown
Daily on-site lunch available in the San Diego office
On-campus gym including pool and tennis courts in the San Diego office
Opportunities to connect with colleagues including monthly game nights, hikes, wellness challenges, and community events
Internal continuous learning events
Opportunities to share your own interests and hobbies with the Company