Compliance Operations Analyst

Klaviyo•Boston, MA

1d•Hybrid

About The Position

At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit klaviyo.com/careers to see how we empower creators to own their own destiny. Compliance is critical to Klaviyo’s success. Our mission is to provide a reliable sending platform for customers by serving as an integral part of Klaviyo’s abuse prevention, detection, and response ecosystem. We balance risk mitigation with customer experience through proactive abuse detection and policy adherence with an educational mindset. The Compliance Operations Analyst plays a key role in reducing risk of abuse on the Klaviyo platform while enabling an optimal customer experience. In this role, you’ll monitor and investigate compliance operations and abuse issues, partner with industry players and vendors, and work cross-functionally with R&D, Deliverability, and Customer teams to improve long-term outcomes across Klaviyo’s sending footprint. Ideal candidates are deeply curious, data-driven, and excited to contribute to systems that scale. You thrive in ambiguous environments and know how to balance short-term incident response with long-term process improvement.

Requirements

3+ years in a technical SaaS company, anti-abuse, trust & safety, or compliance operations role—preferably at an ESP or high-volume marketing communications provider.
Data analysis proficiency—comfortable working with infrastructure-level and behavioral data (e.g., unwanted mail rates, time-to-detection, log behavior); able to pull and review dashboards, spot anomalies, and summarize findings into clear observations and recommendations. SQL or equivalent query experience is strongly preferred.
AI fluency—understands how AI and automation are used in detection systems and operational workflows; comfortable using approved AI tools (e.g., LLMs, AI-assisted log analysis) to accelerate investigation, summarize incidents, or draft communications, while maintaining human judgment in the loop.
Anti-abuse and fraud prevention tools—proven experience with platforms such as Sift, Stripe Radar, eHawk, or similar.
Strong understanding of fraud and abuse landscapes, security protocols, and messaging compliance (email, SMS, privacy standards, and global regulations).
Monitoring & alerting systems—familiarity with log analysis, signal monitoring, or SIEM-style tools (e.g., Splunk, Datadog, or equivalent); able to read and interpret system logs and alert outputs.
Familiarity with APIs, email and text message marketing platforms, and e-commerce ecosystems.
Proficiency with Google Workspace, Zendesk (or equivalent case management), Salesforce, and ticketing systems.
You’ve already experimented with AI in work or personal projects, and you’re excited to dive in and learn fast. You’re hungry to responsibly explore new AI tools and workflows, finding ways to make your work smarter and more efficient.

Nice To Haves

Presence or active participation in anti-abuse industry groups (M3AAWG, etc.).
Experience with SMS/MMS technologies, technical writing, training, or web development.
Python, pandas, or BI tool experience (e.g., Looker, Tableau) for deeper data analysis.
Familiarity with workflow automation tools (e.g., Zapier, internal scripting) for building repeatable, scalable processes.

Responsibilities

Monitor anti-abuse signals, logs, and alerts to identify likely abuse and separate it from normal behavior; recommend mitigations within established guardrails.
Investigate and address compliance and deliverability-impacting abuse events, engaging and escalating for timely response and mitigation.
Perform customer-impacting incident triage to determine scope, urgency, and potential impact; document timelines, key facts, and execute assigned tasks with high follow-through.
Generate and review reporting related to threat alerts and user log behavior (e.g., unwanted mail rate, time to detection, response time).
Monitor the health of assigned signals (noise levels, failure modes) and raise issues when behavior deviates from expectations.
Partner with Engineering and Security to test and implement signal tuning; develop in-depth knowledge of Klaviyo’s sending infrastructure and compliance policies.
Follow standard compliance workflows reliably; flag recurring pain points, failure modes, and opportunities for incremental improvement (e.g., playbook updates, dashboard filters, macro refinements).
Enhance techniques, workflows, and tools to drive compliance team operations and support strategic growth.
Contribute to cross-functional projects and initiatives, representing the operational voice of compliance in incident response and program design.
Transform workflows by putting AI at the center, building smarter systems and ways of working from the ground up.
Collaborate with R&D, Deliverability, Security, Customer Success, Support, and Sales; share clear summaries, route work to the right partners, and keep stakeholders informed.
Coordinate with external vendors (e.g., Sift, aggregators, inbox providers) on day-to-day issues using established channels; document outcomes and surface recurring patterns to senior owners.
Represent Klaviyo in the anti-abuse community by participating in conferences, forums, and mailing lists (e.g., M3AAWG).
Stay current on industry trends and emerging threats; bring insights back to influence Klaviyo’s infrastructure strategy.
Write clear case notes, runbook steps, and dashboard annotations; contribute to internal guides and training content.
Share observations from alerts and incidents with Specialists and peers; participate actively in team reviews and standups.
Drive knowledge-sharing through documentation, cross-functional training, and thought leadership (e.g., blogs, whitepapers, internal guides).