IT Risk & Compliance Analyst (Hybrid) – PCI & Privacy

IDR, Inc.; Brentwood (TN); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Full benefits

Industry-leading organization

Job summary

IDR, Inc. is seeking an IT Risk Analyst to join one of our top clients in the greater Nashville area on a hybrid basis.

This role focuses on supporting the organization's technology compliance program, including privacy, security controls, and regulatory standards in a dynamic retail environment. Responsibilities include coordinating assessments, translating regulatory requirements into practical controls, tracking remediation, and maintaining audit-ready documentation.

Qualifications

• 6+ years of IT risk, governance, and compliance experience.
• Hands-on with frameworks like NIST, ISO, PCI DSS, SOX, or equivalent.
• Certified bodies such as CISSP, CISA, CRISC, or CISM are desirable.

Responsibilities

• Support and execute technology compliance programs, including PCI DSS and data privacy requirements.
• Coordinate assessments, evaluate control effectiveness, and maintain audit evidence.
• Translate regulatory requirements into practical, implementable controls.
• Manage remediation activities and track closure of gaps.

Skills

IT Governance

Risk Assessment

Regulatory Compliance

PCI/SOX Compliance

Job description

IDR, Inc. is seeking an IT Risk Analyst to join one of our top clients in the greater Nashville area on a hybrid basis.

This role focuses on supporting the organization's technology compliance program, including privacy, security controls, and regulatory standards in a dynamic retail environment. Responsibilities include coordinating assessments, translating regulatory requirements into practical controls, tracking remediation, and maintaining audit-ready documentation.