3-7+ years in compliance, GRC, or security assurance within fintech or regulated industries.
Proven experience with SOC 2, SOC 1, GDPR, PCI compliance frameworks and successfully leading audits.
Strong program management skills for coordinating multiple compliance projects.
Detail-oriented with the ability to clarify complex compliance requirements into actionable tasks.
Excellent communication and interpersonal skills for collaboration across various team levels.
Responsibilities
Own Rain's compliance program and ensure adherence to regulatory requirements.
Lead all compliance audits and certifications, managing renewals and new certifications.
Maintain and update Rain's compliance policies across different entities.
Collaborate with engineering, security, legal, and operations to ensure adherence to policies.
Foster a proactive compliance culture within the team.
Identify compliance gaps and risks, driving remediation plans to stay audit-ready.
Refine KYC, KYB, and AML processes based on operational insights and best practices.
Benefits
95% coverage of Medical, Dental, and Vision premiums
Equity options for all team members to promote ownership.
Flexible hybrid working model with a prime SoHo office for NYC employees.
Unlimited PTO allows for essential rest and recovery time.
Monthly budget for testing products and features as a real user.
Wellness stipend dedicated to fitness or therapy for employee well-being.
One-time stipend to design an effective home office setup.
Regular team events and dinners to foster a connected company culture.
Full Job Description
What you'll do
Own Rain's compliance program across DORA, SOC 2, SOC 1, GDPR, and PCI, ensuring we meet and exceed regulatory and audit requirements
Lead all compliance audits and certifications end-to-end - including renewals, observation periods, and new certifications Rain chooses to pursue
Maintain and evolve Rain's policies, keeping them up-to-date, consistent across entities, and aligned with regulatory expectations
Ensure operational adherence by partnering with engineering, security, legal, and operations to make sure we are doing what we say we are doing in our policies
Build a proactive compliance culture, helping the team understand obligations and embedding compliance into day-to-day decision making
Identify gaps and risks early, then drive remediation plans to keep Rain audit-ready at all times
Assist the team in other compliance-related activities, including actionalize and refine KYB, KYC, and AML processes and procedures based on best practices informed by operational data
What we're looking for
Open to candidates in the US and EU
3-7+ years of compliance, GRC, or security assurance experience, ideally in fintech, payments, SaaS, or other regulated industries
Deep familiarity with SOC 2, SOC 1, GDPR, PCI, and other compliance frameworks, with a proven track record of leading successful audits
Excellent program management skills - you can coordinate across teams, manage timelines, and keep multiple compliance workstreams moving
Strong attention to detail with the ability to turn complex requirements into clear, actionable tasks
Strong communication and influence skills, able to work with everyone from engineers to executives to external auditors
Nice to have, but not mandatory
Experience in card issuing, stablecoins, payments, or cross-border fintech products
Familiarity with ISO 27001, DORA, or other emerging global regulations
Experience with tools like Vanta
Things that enable a fulfilling, healthy, and happy experience at Rain:
Unlimited time off Unlimited vacation can be daunting, so we require Rainmakers to take at least 10 days off.
Flexible working We support a flexible workplace. If you feel comfortable at home, please work from home. If you'd like to work with others in an office, feel free to come in. We want everyone to be able to work in the environment in which they are their most confident and productive selves. New Rainmakers will receive a stipend to create a comfortable home environment.
Easy to access benefits For US Rainmakers, we offer comprehensive health, dental, and vision plans for you and your dependents, as well as a 100% company subsidized life insurance plan.
Retirement goalsPlan for the future with confidence. We offer a 401(k) with a 4% company match.
Equity plan 📦 We offer every Rainmaker an equity option plan so we can all benefit from our success.
Rain Cards 🌧 We want Rainmakers to be knowledgeable about our core products and services. To support this mission, we issue a card for our team to use for testing.
Health and Wellness High performance begins from within. Rainmakers are welcome to use their card for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you!
Team summits Summits play an important role at Rain! Time spent together helps us get to know each other, strengthen our relationships, and build a common destiny. Expect team and company off-sites both domestically and internationally.
About Rain
Rain is a clothing brand that specializes in waterproof jackets. The company was founded in 2016 and is based in Vancouver, Canada. Rain's jackets are made from a waterproof and breathable fabric and are designed to be both functional and stylish. The company offers a range of jackets for men and women, as well as accessories such as hats and bags. Rain sells its products online and through select retailers.
