Senior Compliance Analyst

TaxBit

Madrid, SpainSecurity

Posted 1 weeks ago · via Greenhouse

Job Description

<div class="content-intro"><p><strong>Company</strong></p> <p>Founded by CPAs, tax attorneys, and engineers, Taxbit is the leading innovator automating global tax reporting for the digital economy. Taxbit's AI-enabled platform streamlines compliance related to digital assets, payments, and other financial transactions. Its unique combination of deep subject matter expertise and AI-forward technology have made it a fast-growing disruptor trusted by the world's leading fintechs, marketplaces, digital asset players, Big 4 accounting firms, traditional enterprises, and government agencies. Backed by top-tier Silicon Valley VCs, Taxbit's team is located across offices in San Francisco, New York, Seattle, Salt Lake City, London, Madrid, and Singapore.</p></div><h4>Opportunity for Impact</h4> <p>Taxbit is seeking a Senior Compliance Analyst to be a critical partner in maturing our global compliance and certification programs, with a particular focus on European and international regulatory requirements. This role combines hands-on control ownership with close collaboration across legal, engineering, and customer-facing teams—ideal for someone who thrives at the intersection of compliance, regulation, and real-world impact. You will lead ISO 27001 and ISO 42001 program execution — ISO 42001 being the international standard for AI management systems, governing how organizations responsibly develop, deploy, and manage AI throughout its lifecycle — monitor and translate evolving European regulatory obligations — including GDPR, DORA, NIS 2.0, and the EU AI Act — into actionable controls, and act as a trusted advisor to stakeholders navigating audits, vendor risk, AI governance, and customer due diligence.</p> <p>We welcome individuals who are humble, hungry, and excited to tackle some of the industry’s biggest challenges at the intersection of compliance and regulation!</p> <p>This role is based in Madrid. Candidates must be legally authorized to work in Spain or another European Union country without company-sponsored visa support (e.g., holders of a valid Residency and Work Visa or Permanent Resident status).</p> <h4>Role and Responsibilities</h4> <p><strong>Compliance Program Management</strong></p> <ul> <li>Own day-to-day execution of Taxbit’s ISO 27001 and ISO 42001 compliance programs, including evidence collection, control testing, and audit coordination.</li> <li>Serve as a primary point of contact for third-party auditors and European regulators, managing audit timelines, requests, and remediation tracking.</li> <li>Build and maintain policies, procedures, and control documentation that align to applicable European and global frameworks and regulatory requirements.</li> <li>Identify gaps in the current compliance and control environment and collaborate with stakeholders to drive remediation.</li> <li>Support continuous monitoring and automation of compliance evidence collection across GRC and security tooling.</li> <li>Conduct third-party risk assessments (TPRAs) for new and existing vendors, evaluating security, privacy, cross-border data transfer, and AI governance posture.</li> <li>Draft and maintain responses to customer security questionnaires and due diligence requests, including those focused on EU/international regulatory obligations.</li> </ul> <p><strong>European Regulatory Strategy &amp; Enablement</strong></p> <ul> <li>Lead Taxbit’s compliance efforts against European and international regulatory frameworks, including GDPR, DORA, NIS 2.0, and the EU AI Act, translating requirements into actionable controls and program requirements.</li> <li>Monitor the evolving European and international regulatory landscape and advise stakeholders on the impact of new or amended requirements to Taxbit’s products and operations.</li> <li>Serve as the voice of European compliance across engineering, legal, and sales, translating regulatory risk into actionable work.</li> <li>Educate and mentor colleagues on GDPR, DORA, NIS 2.0, EU AI Act, and other European regulatory requirements.</li> <li>Help shape the compliance roadmap as Taxbit expands its footprint in European and other international markets.</li> </ul> <h4>Professional Qualifications</h4> <ul> <li>Fluent in English; native fluency in a main European language; preferred business-level proficiency in 1-2 additional languages.</li> <li>Proven track record of identifying opportunities to build, test, and scale AI-powered solutions.</li> <li>Sees AI as a force multiplier and actively looks for ways to enhance team performance through innovation &amp; curiosity.</li> <li>5+ years of experience in compliance, information security, audit, or risk management.</li> <li>3+ years of hands-on experience supporting ISO 27001 and ISO 42001 audits and certification maintenance.</li> <li>Working knowledge of European and international regulatory requirements, including GDPR, DORA, and/or NIS 2.0.</li> <li>Working knowledge of the EU AI Act, including its risk-tiering approach and obligations for providers and deployers of AI systems.</li> <li>Understanding of AI agentic workflows (e.g., multi-step autonomous or semi-autonomous AI agents) and their associated risk, control, and governance considerations.</li> <li>Experience conducting or supporting third-party/vendor risk assessments.</li> <li>Strong analytical and problem-solving skills.</li> <li>Ability to work autonomously in a fast-paced, distributed environment with minimal supervision.</li> <li>Comfortable working independently across time zones, with the majority of the team based in the United States.</li> <li>Bachelor’s degree in a technical, business, or related field (Information Systems, Cybersecurity, Accounting, or other related field).</li> </ul> <p><strong>Technical Qualifications</strong></p> <ul> <li>Experience with GRC or compliance automation platforms.</li> <li>Knowledge of common compliance and security frameworks: ISO 27001, ISO 42001, NIST CSF, and/or SOC 2.</li> <li>Strong written communication skills, with experience drafting policies, procedures, and questionnaire responses.</li> <li>Experience with AI governance frameworks, such as the NIST AI Risk Management Framework (AI RMF).</li> </ul> <p><strong>Nice to Have</strong></p> <ul> <li>Working knowledge of a scripting language (e.g., Python) for compliance automation.</li> <li>Experience in a fintech, digital assets, or highly regulated industry operating across EU/international markets.</li> </ul> <p><strong>Personal Characteristics</strong></p> <ul> <li>Passionate about building strong compliance programs and solving complex regulatory problems.</li> <li>Strong sense of ownership and accountability.</li> <li>Comfortable collaborating across teams.</li> <li>Thrives in an agile, fast-paced environment.</li> <li>Enjoys mentoring others.</li> </ul><div class="content-conclusion"><p><strong>Taxbit in the News&nbsp;</strong></p> <ul> <li><a href="https://www.prnewswire.com/news-releases/bybit-collaborates-with-taxbit-to-ensure-seamless-financial-compliance-for-global-and-eu-users-302610053.html" target="_blank">Bybit Collaborates with Taxbit to Ensure Seamless Financial Compliance for Global and EU Users</a></li> <li><a href="https://www.prnewswire.com/news-releases/taxbit-expands-global-platform-to-power-carfdac8-compliance-at-scale-302411671.html" target="_blank">Taxbit Expands Global Platform to Power CARF/DAC8 Compliance at Scale</a></li> <li><a href="https://www.prnewswire.com/news-releases/taxbit-unveils-industry-first-global-reporting-platform-bridging-digital-and-traditional-finance-302304125.html" target="_blank">Taxbit Unveils Industry-First Global Reporting Platform, Bridging Digital and Traditional Finance</a>&nbsp;</li> <li><a href="https://www.prnewswire.com/news-releases/taxbit-named-to-2024-deloitte-technology-fast-500-list-of-fastest-growing-companies-in-north-america-302313123.html" target="_blank">Taxbit Wins the Digital Banker’s 2025 Digital Assets Award for Best Technology Solution Provider for Digital Assets - Tax &amp; Compliance Automation</a></li> <li><a href="https://www.prnewswire.com/news-releases/taxbit-named-to-2024-deloitte-technology-fast-500-list-of-fastest-growing-companies-in-north-america-302313123.html" target="_blank">Taxbit Named to 2024 Deloitte Technology Fast 500™ List of Fastest-Growing Companies in North America</a></li> <li><a href="https://ffnews.com/newsarticle/paytech/taxbit-appoints-former-oecd-advisor-colby-mangels-as-global-head-of-government-solutions/" target="_blank">Taxbit Appoints Former OECD Advisor Colby Mangels as Global Head of Government Solutions</a></li> <li><a href="https://www.taxbit.com/webinars/unlocking-compliance-at-scale-carf-dac8-reporting-for-digital-asset-platforms/" target="_blank">Unlocking Compliance at Scale: CARF/DAC8 Reporting for Digital Asset Platforms</a>&nbsp;</li> </ul> <p>&nbsp;</p> <p><span style="font-weight: 400;"><strong>Disclaimers<br></strong></span></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">By submitting an application for this role, you certify that the information contained in the application is correct to the best of your knowledge. You understand that to falsify information is&nbsp;</span><span style="font-weight: 400;">grounds for refusing to hire you, or for discharge should you be hired.&nbsp;</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">For US roles, employment with the Company is at will unless otherwise stated in a written agreement signed by the CEO of the Company.&nbsp; This means that either the Company or the employee can terminate the employment at any time and for any reason, with or without notice.</span></li> </ul> <p>&nbsp;</p> <p><span style="font-weight: 400;"><strong>&nbsp;</strong></span></p></div>
Ask Mav