Compliance Analyst 2 - PCI (Hybrid - Seattle)

Nordstrom, Inc.; Seattle (WA); Hybrid; USD 80,000 - 110,000; Full time

Job summary

Nordstrom, Inc. in Seattle is seeking a Compliance Analyst to join our Governance, Risk & Compliance team in a hybrid role, requiring in-office presence at our corporate headquarters four days per week.

You will help build and mature programs such as the Continuous Compliance Framework, Financial Control Audit, and PCI DSS, shaping KPIs/KRIs and governance structures, with hands-on testing, documentation, and opportunities to own components over time.

Job description

Job Description

This role is offered ashybridin Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.

Compliance doesn't have to mean dusty binders and once-a-year fire drills — on this team, it's about building programs that are sharp, current, and built to last. Nordstrom's Governance, Risk & Compliance (GRC) team is looking for a Compliance Analyst to help build out three of our most active programs: the Continuous Compliance Framework (CCF), Financial Control Audit, and PCI DSS. All three are actively maturing, and you'll be right there building alongside us — standing up RACIs, shaping the KPIs/KRIs that show program health, and helping put governance structures in place that actually hold. This isn't a "maintain what already exists" role; it's a "help us build the thing" role.

You'll also team up with the rest of the Compliance crew to find smarter, faster ways to get the work done — putting AI and automation to work so evidence collection and control testing stop feeling like a grind and start feeling like a well-oiled machine.

This is a great fit for someone who loves getting hands-on: technical control testing, evidence and documentation, RACI and governance design, program metrics — the whole toolkit. You'll work closely with senior analysts across both programs, and as things mature, you'll pick up direct ownership of specific pieces of CCF and/or PCI.

Come for the compliance, stay for the team that actually makes it fun.

A Day in the Life…

Continuous Compliance Framework (CCF) — Build &