IT Security Compliance Analyst - REMOTE

About Velera

Velera is a leading fintech solutions provider and CUSO, serving over 4,000 financial institutions in North America. Our purpose is to accelerate partners' success through innovative financial technology solutions and inspired service. We foster a remote-first, inclusive culture where employees are valued, respected, and empowered.

The Opportunity

The IT Security Compliance Analyst plays a crucial role in supporting Velera's IT Compliance Programs. This position involves researching risks, identifying issues, developing solutions, and providing essential reporting, training, and other support. The analyst will oversee and gather information on ongoing Velera activities, develop information security metrics for senior leadership, and report on key compliance priorities. A significant aspect of this role includes owning the execution and processes to meet stated priorities and collaborating with functional ITS and business leaders to drive IT compliance practices and adoption.

Day in the Life

• Audit user and system security configurations for compliance with internal and external requirements.
• Perform audits and follow-up on corrective actions; participate in internal audit activities for compliance verification.
• Interact and coordinate with appropriate business unit resources for audit participation.
• Provide information to management regarding negative business impact caused by violations of confidentiality, integrity, or availability of information and information systems.
• Understand the application of security concepts across a broad scope of IT areas, including data communications, network design, operations, database structures, operating systems, application development, security risk assessment, and disaster recovery.
• Provide ongoing guidance and support to the organization to promote a progressive and sustainable compliance culture.
• Prepare and provide updates for monthly internal and external compliance reports.
• Document and maintain risk-based compliance policies and procedures; develop materials for ITS's compliance intranet site.
• Coordinate training material and monitoring records, and the distribution of regulatory information.
• Implement and maintain operational plans for key control activities to ensure compliance with regulatory, legal, and corporate policies.
• Respond to internal and external inquiries to clarify regulatory requirements.
• Assist in developing processes to identify, quantify, analyze, and report on Velera Technology Risk and Compliance status.
• Function as a liaison between business units with compliance responsibilities to collect, report, and retain compliance documentation.
• Identify ongoing process improvements, operational gaps, and potential remediation steps; assist/lead re-design and coordination of remediation efforts.
• Maintain knowledge of legislation and regulation changes related to the financial industry, particularly finance industry security and privacy regulations, and assist in leading internal efforts to ensure compliance.
• Lead and/or participate in special project teams supporting general business initiatives outside the primary security function.
• Perform other duties as assigned.

Qualifications

• Bachelor’s degree in computer science or related discipline, or equivalent combination of education and experience required.
• Risk management, governance, or security certification (CRISC, CGEIT, CISSP, CISM, CISA) required.
• Project Management certification (PMP) preferred.
• Five (5) years of related work experience, including a combination of at least three (3) years’ experience in Internal IT Systems Auditing and three (3) years’ experience in internal control projects in the financial industry required.
• Working knowledge of SSAE 16 and PCI requirements.
• Working knowledge of ISO27000 series of standards, PCI, COBIT, ITIL, and Sarbanes Oxley rules surrounding IT.
• Working knowledge of NACHA.
• Working knowledge of OFAC, BSA, GLBA, Patriot Act, and other Federal or State laws impacting National Security requirements or privacy.

About Velera

At Velera, inclusion is fundamental to our operations, guided by a people‑helping‑people philosophy. We cultivate a culture where every employee feels valued, respected, and empowered. We are committed to building a diverse workforce and fostering meaningful connections across our teams. Our remote‑first, flexible environment prioritizes psychological safety, well-being, and belonging, enabling individuals and teams to collaborate and thrive. Together, we are shaping a new era of secure, innovative solutions for our clients and communities.

Benefits

• Competitive wages
• Medical with telemedicine
• Dental and Vision
• Basic and Optional Life Insurance
• Paid Time Off (PTO)
• Maternity, Parental, Family Care
• Community Volunteer Time Off
• 12 Paid Holidays
• Company Paid Disability Insurance
• 401k (with employer match)
• Health Savings Accounts (HSA) with company provided contributions
• Flexible Spending Accounts (FSA)
• Supplemental Insurance
• Mental Health and Well-being: Employee Assistance Program (EAP)
• Tuition Reimbursement
• Wellness program

Equal Opportunity Employer

Velera is an Equal Opportunity Employer committed to diversity and inclusion. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other protected group. Velera is an E-Verify Employer. Sponsorship is not available for this role.

Key skills/competency

• IT Security Compliance
• Risk Management
• Auditing
• Regulatory Compliance
• Information Security
• Financial Industry Regulations
• SSAE 16
• PCI DSS
• COBIT
• ITIL