{"id":751822,"url":"https://alion.io/job/trumid-technology-compliance-associate","title":"Technology Compliance Associate","company":{"id":686155,"name":"Trumid","domain":"trumid.com","url":"https://alion.io/company/trumid","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":150000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"EU AI Act","optional":false},{"name":"Falcon","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-01T15:34:33Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-11-06T14:14:43Z","board_verified":true,"closed_at":null,"days_open":65,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":65},"description":"About us.\nTrumid is a dynamic fintech revolutionizing the landscape of fixed income trading. With intelligent, easy-to-use, electronic solutions, we are rapidly growing and seeking exceptional talent to help redefine the boundaries of technology and finance.\nFounded in 2014 by a team of fixed income market experts, Trumid has quickly become one of the top three corporate bond e-trading platforms in the U.S. Today, over 1,300 traders from an extensive and expanding client network of 920+ buy- and sell-side institutions transact on Trumid monthly.\nWith a rich history of innovation and a unique ability to innovate at scale, we collaborate closely with our clients, iterating quickly toward optimal solutions. With market share and client engagement at all-time highs and our pace of product development faster than ever, this is an exciting and transformative time at Trumid.\nOur business model thrives on participation, and so does our company culture. We rely on every team member's contribution to help us accomplish our goals. To succeed at Trumid, you must be curious, passionate about your craft, ambitious, collaborative, and driven. Learn more at www.trumid.com.\nThe opportunity.\nTrumid is seeking a Technology Compliance Associate to join our Technology Compliance team. Reporting to our Technology Compliance Manager, you’ll take ownership of key areas - including client security questionnaires and day-to-day security operations - while getting hands-on exposure across AI governance and SOC 2 program operations, working alongside clients, auditors, and regulators. This is a great fit for someone early in their compliance or security career who wants real ownership plus the chance to learn directly from an experienced tech compliance leader as our program scales. \nWhat You'll Do:\nAI Governance\nDevelop and implement AI usage policies and governance frameworks for the organization\n\nImplement guardrails and security controls using AI Gateway and similar tools\n\nConduct security assessments and risk evaluations for AI tools and services\n\nReview AI tool usage and provide metrics through observability platforms\n\nEnsure data privacy and protection standards are maintained across AI tool adoption\n\nManage vendor assessments and ongoing monitoring for AI service providers\n\nStay current on emerging AI regulation, including NIST AI RMF and EU AI Act developments\n\nCompliance & Risk\nOperate SOC 2 compliance program including control frameworks, evidence collection, audit coordination, and certification maintenance\n\nConduct security risk assessments, phishing simulations, vulnerability management, and penetration testing coordination\n\nDrive BCP/DR planning, testing, and documentation\n\nManage security incident response processes and post-incident reviews\n\nTrack and report on security metrics, compliance posture, and risk remediation\n\nSecurity Operations\nDay-to-day operational oversight of CrowdStrike Falcon Complete including alert triage, monitoring, and liaising with security engineering on configuration and escalations\n\nSupport identity and access management programs including employee access reviews and privileged access controls\n\nTracking and reporting on vulnerability scan findings; coordinating remediation workflows with engineering\n\nCoordinating and managing third-party penetration testing engagements; tracking findings through to remediation\n\nClient, Vendor & DDQ Management\nOwn and manage the end-to-end DDQ (Due Diligence Questionnaire) process, including response accuracy, version control, and automation initiatives; serve as the primary point of contact for client and prospect security questionnaires\n\nConduct vendor security assessments and manage third-party risk\n\nSupport legal and compliance teams on vendor contracts and technical due diligence\n\nAbout you.\nExperience: 4+ years in information security or GRC/Compliance with hands-on technical experience and demonstrated leadership\n\nTechnical depth: Familiarity with cloud security (AWS required, GCP valued), security tooling (CrowdStrike or similar EDR/XDR platforms), and infrastructure security controls\n\nAI security knowledge: Understanding of AI/LLM security risks, data privacy concerns, and emerging AI governance frameworks (NIST AI RMF, EU AI Act)\n\nSOC 2 expertise: Operational experience running SOC 2 programs in production environments with successful audit outcomes\n\nSecurity frameworks: Working knowledge of SOC 2, ISO 27001, NIST frameworks and their practical application\n\nClient-facing skills: Proven ability to communicate security concepts to institutional clients and represent technical capabilities professionally\n\nCompliance knowledge: Experience with security compliance in financial services or other regulated industries\n\nCommunication: Excellent written and verbal skills across technical and non-technical audiences\n\nCertifications: CISSP, CISM, Security+, or equivalent preferred\n\nEducation: Bachelor's degree in Computer Science, Information Security, or related field\n\nTechnical Environment\nYou'll work with:\nCloud Platforms: AWS (primary), GCP\n\nSecurity Tools: CrowdStrike Falcon Complete, Vanta, vulnerability scanners\n\nAI & Observability: AI Gateway tools, LLM monitoring platforms, observability tools\n\nInfrastructure: Cloud-native services\n\nCompliance Frameworks: SOC 2, ISO 27001, NIST\n\nIdentity & Access: SSO, MFA, access control systems\n\nEmployee Benefits\nHighly competitive compensation\n\nFully paid medical, dental and vision coverage\n\nRemote work flexibility\n\nTeam-oriented and collaborative company culture\n\nIn compliance with New York City Pay Transparency Law, the base salary range for this role in New York City is between $150,000 - $175,000. This range does not include discretionary bonus or other forms of compensation or benefits offered in connection with this job. Several factors are considered when determining a candidate's compensation. Please note that the salary range listed for this position is based on the level of experience outlined in the job description. If a candidate's experience differs from the requirements, the salary may be adjusted accordingly.\nTrumid is an equal opportunity employer.\nPlease note: All communication from Trumid's recruiting team comes from @trumid.com email addresses. We conduct remote interviews via Zoom only. We will never ask you to purchase equipment, download software (other than Zoom), or share sensitive personal information during the hiring process.","description_format":"text","description_chars":6465,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-09-11T15:56:43Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.417,"p_room":0.36,"age_days":65,"expected_fill_days":35,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":true},"html_url":"https://alion.io/job/trumid-technology-compliance-associate","json_url":"https://alion.io/job/trumid-technology-compliance-associate.json","meta":{"generated_at":"2026-11-06T14:53:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27662,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686155},"rest":"https://alion.io/mcp/rest/get_company?id=686155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrumid-technology-compliance-associate"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrumid-technology-compliance-associate"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrumid-technology-compliance-associate"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trumid-technology-compliance-associate\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrumid-technology-compliance-associate"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":751822}},{"tool":"search_jobs","arguments":{"company":"trumid.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":751822},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}