Compliance Analyst

Privacy is the virtual card platform giving consumers and small businesses complete control over their online payments. Our virtual cards protect 250,000+ users across the U.S., processing over $3 billion in transactions with bank-level security and encryption. From merchant-locked cards that can't be used anywhere else if stolen, to spending limits that block unauthorized charges, to one-click pausing that stops subscriptions instantly, Privacy puts financial control back in users' hands. We're building a future where every online payment is secure by default, free from data breaches, unauthorized charges, and hidden fees. We're proud to have been named one of Forbes' "Top 100 Most Customer-Centric Companies" and featured in The Wall Street Journal, TechCrunch, and Wirecutter. Privacy is the product that started it all. What began as Privacy.com grew into Lithic, now a Series C company backed by world-class investors including Bessemer Venture Partners, Index Ventures, Spark Capital, Stripes, and Mastercard, along with many others. Our dedicated team of 35 sits at the heart of Lithic's 170+ person organization, spanning 26 states and 7 countries, headquartered in New York City. Privacy operates a dedicated compliance program with its own policies, procedures, monitoring workstreams, and bank partner reporting obligations. We are hiring a Compliance Analyst to own day-to-day compliance operations — KYC/KYB reviews, sanctions screening dispositions, transaction monitoring investigations, and Unusual Activity Report (UAR) preparation — enabling compliance leadership to focus on strategic program development and bank partner relationship management. This is a hands-on operational seat with real ownership. You will work across the full BSA/AML lifecycle and contribute to policy development, process improvement, and compliance technology projects as the program scales. What You’ll Do: Conduct KYC and KYB reviews — perform identity verification, beneficial ownership analysis, and use-case-driven risk assessment for consumer and business customers, documenting clearance rationale to an examination-ready standard. Disposition sanctions screening alerts — review and disposition OFAC/sanctions, PEP, and adverse media alerts with appropriate escalation, maintaining complete case documentation and monthly reporting logs. Investigate transaction monitoring alerts — work Privacy-specific alert queues, conduct investigations, and prepare UARs for submission to our partner bank within established SLAs. Execute Enhanced Due Diligence (EDD) — manage reviews for high-risk customers, including trigger-based and periodic reviews aligned to customer risk tier. Own regulatory and bank partner reporting — prepare and submit recurring bank partner reporting deliverables, including monthly OFAC/sanctions logs, complaint reporting, CIP reporting, and fraud, dispute, and support metrics, meeting submission deadlines and quality standards. Process 314(a) and law enforcement requests — execute FinCEN 314(a) list searches under Privacy's dedicated procedure, document results, and support law enforcement inquiry responses. Track and report program metrics — maintain compliance metrics, tracking logs, and KPI reporting (alert volumes, UAR timeliness, review turnaround) for internal governance and bank partner review. Support bank partner and audit requests — support responses to partner bank RFIs, audit inquiries, and examination requests with well-organized, contemporaneous documentation. Contribute to policy and procedure development — draft and refine SOPs based on operational experience; flag gaps between documented procedure and actual practice. Advance compliance technology projects — support integration and optimization of our IDV, screening, case management, and workflow automation stack, including quality assurance on AI-assisted review workflows. What You’ll Bring: Need to Have 2+ years of BSA/AML compliance experience in fintech, payments, or a bank-partnered environment (3–5 years preferred) Hands-on KYC/KYB review experience, including CIP decisioning and documentation of clearance rationale Transaction monitoring and investigation experience, including narrative writing for UARs or SARs Working knowledge of BSA/AML regulatory requirements, including CIP (31 CFR 1020.220), the CDD Rule (31 CFR 1010.230), and OFAC sanctions obligations Experience preparing regulatory or bank partner reporting deliverables (e.g., OFAC logs, complaint reports, compliance metrics) on recurring submission cadences Strong analytical skills and exceptional written documentation — your case records need to hold up to bank partner and examiner scrutiny Self-starter who works independently in a remote environment and knows when to elevate Nice to Have CAMS certification or actively working toward it Direct UAR preparation experience in a sponsor bank / program manager environment Experience with modern IDV and case management platforms (e.g., Persona) and internal tooling (e.g., Retool) Exposure to Enhanced Due Diligence programs and customer risk rating methodologies SQL or data analysis skills applicable to alert investigation and metrics reporting Experience documenting and defending AI-assisted compliance decisions The annual US salary range for this role is $100,000 - $135,000 plus equity. This salary range may be inclusive of several career levels at Lithic and will be narrowed during the interview process based on the candidate’s experience and qualifications. This is a remote position. However, candidates must be located in the United States. We do not offer visa sponsorship or assistance. Benefits for US Employees: Unlimited PTO 12-weeks fully paid parental leave 4-Week Fully Paid Sabbatical (earned at your 5-year anniversary) Work From Anywhere: work from anywhere in the world 4-weeks each year 3% cashback on card purchases with your complimentary Privacy.com employee account Health, vision, and dental insurance; HSA Contribution Match 401(k) match Voluntary Life Insurance and STD/LTD As set forth in Privacy’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law. #J-18808-Ljbffr Privacy