Technology Compliance Manager

YETI•Austin, TX

About The Position

As the Technology Compliance Manager, you will help ensure YETI’s technology systems, policies, and processes align with applicable legal, regulatory, and industry requirements. You will partner with business, IT, Internal Audit, and External Audit stakeholders to support domestic and international compliance obligations, including SOX, PCI DSS, data privacy, and emerging AI governance requirements. The role helps drive a risk-based approach to technology controls, audit readiness, issue remediation, and ongoing compliance program improvement.

Requirements

More than 8 years of experience in technology compliance, IT audit, IT risk management, SOX compliance, or a related GRC role.
Strong understanding of IT general controls, technology risk management, and compliance concepts in a public company or similarly regulated environment.
Ability to apply risk-based judgment to evaluate control considerations, identify practical solutions, and balance compliance requirements with business needs.
Strong written and verbal communication skills, including the ability to explain technology risk and compliance topics clearly to technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated and collaborative, with the ability to work independently.

Nice To Haves

Bachelor’s degree strongly preferred.
Experience with enterprise applications, cloud/SaaS environments, ERP systems, payment environments, or system implementation projects.
Working knowledge of relevant control and risk frameworks, such as COSO, COBIT, NIST, ISO 27001, ITIL, and PCI DSS.
Professional certification such as CISA, CRISC, CISSP, CIA, a PCI-related certification, or a relevant AI governance/risk certification.

Responsibilities

Help manage and mature YETI’s technology compliance program, including SOX IT general controls, PCI DSS, and related technology control and compliance requirements.
Monitor and coordinate IT control activities to help ensure control owners complete required procedures and remediation actions in a timely and effective manner.
Assist stakeholders with audit walkthrough preparation, evidence collection, and related compliance activities.
Support and coordinate annual PCI DSS assessment activities, including evidence collection, control validation, issue tracking, and remediation follow-up.
Conduct or support technology compliance risk assessments, evaluate control gaps, assess audit readiness, and identify process improvement opportunities.
Provide risk-based guidance for technology initiatives, system implementations, process changes, integrations, and automation efforts so appropriate controls are considered and embedded.
Support management in maintaining clear and accurate compliance documentation, including control narratives, process flows, policies, procedures, issue logs, and remediation plans.
Help improve compliance processes by streamlining evidence collection, improving control monitoring, reducing manual effort, and enhancing stakeholder accountability.
Partner with governance stakeholders, as needed, to evaluate technology control considerations related to privacy, data governance, emerging technologies, and other compliance initiatives.
Maintain awareness of relevant regulatory, industry, and technology control expectations and help translate them into practical compliance activities for YETI.