Compliance Analyst 2 — PCI & CCF Engineer (Seattle, Hybrid)

Nordstrom; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement & PTO

Life Insurance & Disability

Job summary

Nordstrom is seeking a Compliance Analyst in Seattle for a hybrid role requiring in‑office presence at least 4 days per week. You will help build and mature Continuous Compliance Framework, PCI DSS, and Financial Control Audit programs, including RACIs, KPIs/KRIs, and AI-assisted workflows.

You’ll work with senior analysts across programs, own components over time, and contribute to governance design, evidence collection, and remediation tracking.

Qualifications

• 2+ years of hands-on PCI DSS assessments with CCF/SOX experience
• Familiarity with PCI DSS, NIST 800-30/CSF, ISO 27005, SOX, HIPAA
• Hands-on control testing (firewall reviews, access reviews, log checks) and gap analysis
• Experience building or maintaining RACIs and documenting control ownership
• Interest in metrics and KPIs/KRIs
• Aptitude for using AI/automation to improve compliance work
• Strong organizational and communication skills

Responsibilities

• Conduct hands-on testing of CCF controls and document results clearly
• Build and maintain the CCF module in Nordstrom's GRC tool with control status, testing schedules, evidence, and ownership
• Create RACIs and governance documentation for CCF and PCI programs
• Coordinate evidence collection and remediation tracking across programs
• Assist with AI-assisted workflows and automated testing
• Support PCI DSS and Financial Control Audit testing activities
• Assist with QSA fieldwork and evidence packages under guidance
• Monitor and report on operational metrics and process improvements

Skills

PCI DSS testing

CCF experience

Technical control testing

RACIs & governance

Metrics & KPIs

AI/automation in compliance

Organizational skills

Communication skills

Education

Associate-level certification such as CISA, CRISC, ISO 27001 Implementer, CIPM, or CIPP

Tools

ServiceNow

OnSpring

AuditBoard

Archer

Job description

Nordstrom is seeking a Compliance Analyst in Seattle for a hybrid role requiring in‑office presence at least 4 days per week. You will help build and mature Continuous Compliance Framework, PCI DSS, and Financial Control Audit programs, including RACIs, KPIs/KRIs, and AI-assisted workflows.

You’ll work with senior analysts across programs, own components over time, and contribute to governance design, evidence collection, and remediation tracking.