Sr Compliance Specialist - Security
About The Position
The Sr Compliance Specialist - Security plays a lead role in demonstrating sustained compliance with requirements for protecting the company’s high-value systems and information assets across its corporate environment and consumer delivery channels. The position supports updates to policies, standards, and awareness materials; validates that key controls are implemented and sustained; identifies potential security exceptions; helps resolve business requirements; escalates matters requiring management attention; and oversees timely remediation of information-security vulnerabilities. The Specialist also supports development teams and operations groups with risk assessments, due diligence, data management, ongoing oversight, and compliance reporting. The role focuses on conducting internal PCI-DSS assessments and assisting business units and functional teams with external PCI-DSS compliance validation. It includes defining assessment scope, evaluating adherence to PCI requirements, identifying non-compliant issues and ensuring their remediation, and developing associates through PCI-DSS education and mentorship. The Specialist maintains productive working relationships with technical and management staff at all levels of the organization. The role requires working onsite in the Rocklin, California office Monday through Thursday.
Requirements
- BA/BS degree or equivalent experience.
- At least 7 years of experience in the information security field.
- CISSP, CISM, CISA, or similar certification, such as GIAC Certified ISO-17799 Specialist (G7799).
- At least 5 years of experience in a PCI support role or an engineering position.
- Extensive knowledge and experience with information security standards and methodologies, including PCI-DSS, the ISO 9000 series, COBIT, Sarbanes-Oxley, HIPAA, and other relevant industry security standards.
- In-depth knowledge of risk assessment and risk analysis.
- Excellent written and verbal communication skills.
- Leadership role in previous job experience.
- Results-oriented and self-motivated.
- Ability to work onsite in the Rocklin, CA office Monday through Thursday.
Nice To Haves
- QSA or ISA qualification.
- Experience in an enterprise-class technology organization, working with large-scale distributed systems environments.
- Experience working with, and ideally writing, information security policies and standards and/or developing or implementing security-related tools.
- Understanding of information security holistically and how it relates to business goals.
- Ability to design, implement, reengineer, and manage complex processes.
- Privacy certification, such as Certified Information Privacy Professional.
- Experience communicating complex privacy and security compliance issues to senior management, business units, and external parties.
- Experience presenting IT security issues to large audiences, forums, or communities.
- Experience working within the retail sector.
Responsibilities
- Plan and conduct PCI assessments and establish remediation plans.
- Engage business units at predetermined times to provide summary analyses of their compliance posture at checkpoints throughout the year.
- Identify and recommend changes to procedures, processes, and delivery scope to demonstrate sustained compliance with PCI requirements.
- Assist with PCI-DSS compliance checklists, including reviewing and validating existing controls, documentation, and potential gaps.
- Provide management guidance and expertise on PCI gaps and help prioritize remediation targets.
- Reduce resource owners’ demand for evidence collection and analysis through the use of GRC and related security tools.
- Lead remote-scoping practices and procedures to reduce the company’s overall PCI-DSS scope where possible.
- Provide remediation guidance to technical teams to establish and maintain sustained PCI-DSS compliance.
- Provide long-term, cost-effective remediation solutions and recommendations for systemic issues or gaps that could put corporate PCI-DSS compliance at risk.
- Support updates to security policies, standards, and awareness materials, and validate that key controls are implemented and sustained.
- Support development teams and operations groups with risk assessments, due diligence, data management, ongoing oversight, and compliance reporting.
- Develop associates through PCI-DSS educational opportunities and provide mentorship.
Benefits
- A generous discount on all WSI brands.
- A 401(k) plan and other investment opportunities.
- Paid vacations, holidays, and time off to volunteer.
- Health benefits, dental and vision insurance, including same-sex domestic partner benefits.
- Tax-free commuter benefits.
- A wellness program supporting physical, financial, and emotional health.
- In-person and online learning opportunities through WSI University.
- Cross-brand and cross-function career opportunities.
- Resources for self-development.
- Advisor (mentor) program.
- Career development workshops, learning programs, and speaker series.
- Compensation may include benefits, paid time off, merit, and bonus opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
