Title:  Analyst, Cloud Engineering Compliance (Paisly)

Position Summary:

The Analyst, Cloud Engineering Compliance is responsible for supporting the maintenance and evolution of Paisly’s compliance program to ensure adherence to applicable laws, regulatory frameworks and internal policies. This role will assist in initiatives to assess, implement and monitor controls aligned with industry-specific requirements, with a specific focus on supporting compliance efforts for regulatory requirements in multiple geographical areas. This role requires collaboration with engineering, security, legal and product teams to help embed compliance into technical operations and ensure that Paisly’s products meet both external obligations and internal governance standards. The Analyst also works cross-functionally with Paisly’s matrix partners to support shared risk and compliance objectives.

The ideal candidate is an agile problem-solver who easily adapts to shifting business priorities, excels when working on complex projects, and is motivated to deliver results.

Essential Responsibilities:

• Support the development, implementation, and continuous improvement of technical compliance policies, procedures, and training programs across the organization.
• Assist in the monitoring of technical compliance systems and internal controls to ensure adherence to laws and standards e.g., General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Payment Card Industry Data Security Standard (PCI-DSS), and International Organization for Standardization (ISO).
• Conduct compliance research and monitoring specifically for Brazil and Mexico regulatory frameworks to support international business expansion.
• Collaborate with product, engineering, and legal teams to identify and document technical compliance risks in business initiatives.
• Support internal and external audits by gathering evidence and maintaining compliance documentation.
• Perform periodic risk assessments and gap analyses to support compliance planning.
• Other projects and duties as assigned.

Minimum Experience and Qualifications:

• Bachelor's degree in a relevant field such as Technical Compliance, Risk Management, or Information Security; OR High School Diploma/GED and at least four (4) years of related work experience.
• Two (2) years’ experience in technical compliance, risk management, or a related analyst function.
• Proven understanding of global data privacy and security regulations and industry standards.
• Experience supporting the implementation of technical compliance controls and audit processes.
• Demonstrated ability to interpret and apply complex regulatory requirements in a fast-paced, technology-driven environment.
• Strong communication skills with experience presenting technical compliance issues and recommendations to stakeholders at various organizational levels.
• Proven ability to work cross-functionally with legal, security, data, product and engineering teams.
• Detail-oriented, analytical thinker with strong organizational and project management skills.
• Ability to manage confidential and sensitive information with the highest level of integrity.
• Available for occasional overnight travel (10%).
• Must pass a ten (10) year background check.
• Must be legally eligible to work in the country in which the position is located.
• Authorization to work in the US is required, this position is not eligible for visa sponsorship.

Preferred Experience and Qualifications:

• Knowledge of Brazil's General Personal Data Protection Law (LGPD - Lei Geral de Proteção de Dados Pessoais) and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP - Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
• Experience leading or contributing to technical compliance programs involving privacy, security, consumer protection or financial regulations.
• Familiarity with governance, risk and compliance (GRC) tools and regulatory technology platforms.
• Strong understanding of cloud compliance frameworks and certifications (e.g., ISO/IEC 27001, SOC 2, PCI-DSS) across environments such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
• Experience coordinating internal or external audits, regulatory reviews or investigations.
• Demonstrated ability to interpret and apply laws such as GDPR, CCPA, and other privacy or industry-specific regulatory frameworks.
• Relevant certifications such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar.
• Experience working cross-functionally with legal, security, product, and operations teams to operationalize compliance requirements.

Crewmember Expectations:

• Regular attendance and punctuality.  
• Potential need to work flexible hours and be available to respond on short-notice. 
• Able to maintain a professional appearance. 
• When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of the aircraft. 
• The use of ChatGPT or any other automated tool during the interview process will disqualify a candidate from being considered for the position.

Equipment:

• Computer and other office equipment.

Work Environment

• Traditional office environment. 

Physical Effort:

• Generally not required, or up to 10 pounds occasionally, 0 pounds frequently (Sedentary).