Compliance Analyst 2 - PCI

Summary

Support and help build Nordstrom's Continuous Compliance Framework, PCI DSS, and Financial Control Audit programs. Perform technical control testing, manage evidence and documentation, and contribute to governance, metrics, and process automation.

Responsibilities

• Test controls, document results, collect evidence, and track remediation across compliance programs.
• Maintain governance records, RACIs, control inventories, and evidence repositories.
• Support PCI DSS scoping, assessment cycles, and QSA fieldwork.
• Help design and track program KPIs and KRIs, and develop status reports.
• Evaluate AI-assisted and automated workflows, reviewing outputs for accuracy and escalating exceptions.

Requirements

• At least 2 years of hands-on PCI DSS assessment experience, with CCF, SOX, or equivalent experience.
• Working knowledge of a relevant compliance framework and experience with technical control testing and gap analysis.
• Experience building or maintaining RACIs, or a strong understanding of control ownership and accountability.
• Strong organization, communication, and documentation skills, with the ability to work independently and escalate issues appropriately.
• Experience with AI or automation for compliance work; GRC platform and cloud familiarity are preferred.