Card Services Compliance Specialist

Suncoast Credit Union•Tampa, FL

3d•Hybrid

About The Position

The Card Services Compliance Specialist is responsible for ensuring the credit union’s debit and credit card programs operate in full compliance with regulatory requirements, card network rules, and PCI standards while supporting a seamless member experience and enabling strategic product growth. This role acts as a key integrator across Card Operations, Member Experience, Fraud, IT, and Product Strategy and Product Enablement teams, ensuring that compliance is embedded into processes, systems, product delivery, and user journeys rather than applied after the fact. The goal is to ensure that compliance is integrated into the SCU employee experience while protecting the credit union and our members from risk.

Requirements

Bachelor's degree in business administration, management, legal discipline, or a related field (A comparable combination of work experience and training may be substituted for the education requirement.)
Minimum of 4 years of experience with a financial institution in a payment compliance role, to include operational experience in Visa debit or credit cards, with emphasis on PCI compliance
Proven experience with policy and procedure management, compliance, or risk governance
Strong understanding of regulatory frameworks (Reg E, Reg Z, Reg DD, UDAAP, and operational controls
Excellent project management and documentation skills
Ability to translate regulations into practical workflows and collaborate across departments and communicate effectively with stakeholders
Experience with automated systems and process improvement methodologies
Familiarity with FedLine systems, assurance protocols, and BCP/DR planning
Ability to prioritize tasks by effectively managing competing and changing priorities to meet deadlines
Accurate, detail-oriented, and organized with task management
Ability to analyze and resolve difficult and often complex problems or situations
Strong written, verbal, and interpersonal communication skills to interact effectively with members, staff, vendors, and government regulators
Strong knowledge and understanding of credit union products, services, policies, and procedures
Strong knowledge and understanding of regulatory compliance
Strong knowledge and understanding of credit union computer systems and software applications required to perform job duties

Nice To Haves

PCI Professional (PCIP) certification preferred
Accredited Payment Risk Professional (APRP) certification preferred

Responsibilities

Create, update, and maintain a repository of policies and procedures in alignment with regulatory and business requirements
Coordinate reviews with First Line Compliance, the Director, and the VP of the Business Unit
Submit redlined documents and summaries to Second Line Compliance by the designated deadlines
Develop and maintain documentation for all PCI-related processes, including Reg E, Reg Z, Reg DD, and UDAAP/UDAP considerations, as well as network diagrams, data flow charts, and access controls
Coordinate internal and external PCI DSS audits, serve as the primary contact for audits, and request attestations
Provide support to the Director and VP for audits and Third Party Risk (vendor) due diligence
Evaluate automated systems for compliance, reliability, and performance
Oversee Quarterly User Reviews and Daily terminations for all Payment systems
Ensure procedures are enforced and followed consistently across the department
Collaborate with stakeholders to validate recovery strategies and ensure operational resilience
Partner with First and Second Line Compliance to update disclosures, training materials, and procedures
Ensure team members are enrolled in appropriate compliance courses and monitor completion
Oversee and manage department-level complaints, risk assessments, and RCSA processes
Initiate and manage Review and Challenge or Risk Acceptance processes
Serve as the primary contact for audits and examinations conducted by Second Line, Third Line, and external auditors
Prepare initial exposure analyses and provide timely responses to compliance findings
Develop and implement action plans to address identified gaps
Provide feedback on proposed rule changes and assess operational impact
Update business unit software findings and acknowledge informational letters from the credit union periodically
Act as the Administrator of PCI, Reg E, Reg Z, Reg DD and UDAAP/UDAP Compliance standards
Evaluate and monitor third-party vendors for PCI, Reg E, Reg Z, Reg DD, and UDAAP/UDAP compliance, ensuring contracts include requirements and annual attestations are obtained
Plan annual DR tests, document the annual tests, and update to ensure that payment procedures are accurate in the DR Playbook
Ensure BCP plans are updated regularly to reflect changes in the department's systems, processes, and risk landscape
Collaborate with stakeholders to validate recovery strategies and ensure operational resilience
Participate in key industry committees and alliances, including: Payment Card Industry Security Standards Council (PCI SSC) and VBN activities pertaining to Reg E and Reg Z, as well as industry updates/standards for UDAAP
Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise
Attend educational events to increase professional knowledge
Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs