Compliance Analyst II — Build & Automate GRC Programs

Nordstrom Inc; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement plan

Paid time off

Life Insurance

Disability Insurance

Merchandise Discount

Employee Assistance Program

Job summary

Nordstrom, Inc. in Seattle, WA is seeking a Compliance Analyst to join the Governance, Risk & Compliance team. This hybrid role focuses on PCI DSS, Continuous Compliance Framework, and Financial Control Audit, with hands-on testing, RACIs, and KPI/KRI development.

You'll collaborate across programs, implement AI-assisted evidence collection, and grow to own specific modules while delivering measurable improvements in controls and governance.

Qualifications

• 2+ years of hands-on PCI DSS assessments and related control testing experience.
• Experience applying multiple frameworks (PCI DSS, NIST CSF, ISO 27005, SOX, HIPAA).
• Ability to document ownership, RAPIs and governance for controls.

Responsibilities

• Conduct hands-on testing of PCI DSS and CCF controls and document results clearly.
• Build and maintain RACIs and governance documentation across programs.
• Assist with evidence collection, testing schedules, and remediation tracking.
• Collaborate with team to implement AI-assisted and automated workflows for evidence gathering.

Skills

PCI DSS testing

RACI governance

Control testing

Documentation

AI/Automation

KPI/KRI design

GRC tooling

SOX experience

Tools

ServiceNow

AuditBoard

Job description

Nordstrom, Inc. in Seattle, WA is seeking a Compliance Analyst to join the Governance, Risk & Compliance team. This hybrid role focuses on PCI DSS, Continuous Compliance Framework, and Financial Control Audit, with hands-on testing, RACIs, and KPI/KRI development.

You'll collaborate across programs, implement AI-assisted evidence collection, and grow to own specific modules while delivering measurable improvements in controls and governance.