IT Risk & Compliance Leader – Luxury Retail

REEDS Jewelers, Inc.; Wilmington (NC); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Merchandise Discounts

401(k)

Paid Time Off

Health/Dental/Life Insurance

Job summary

REEDS Jewelers is seeking an experienced Manager of IT Risk and Compliance to design and oversee the enterprise-wide GRC framework across retail stores, corporate systems, and e-commerce. This strategic leader will ensure secure, compliant operations and will independently investigate and file SARs to mitigate multi-channel fraud risks.

The role requires 3–5 years in IT audit or risk management, with strong PCI-DSS, SOX, and data privacy knowledge.

Qualifications

• 3–5 years of progressive experience in IT audit, information security governance, or IT risk management.
• Industry background in multi-channel retail, e-commerce, banking, or consumer-facing environments with high transaction volumes.
• Familiarity with PCI-DSS, SOX, data privacy laws, and AML regulations.

Responsibilities

• Design, implement, and oversee IT governance, risk management, and compliance framework (GRC) across stores, corporate, and e-commerce.
• Lead investigations into fraud, prepare and file SARs with FinCEN following BSA rules.
• Coordinate IT audits, liaison with auditors, and remediate findings.
• Develop and enforce IT policies aligned with NIST CSF or ISO 27001; manage SoD across ERP and systems.

Skills

IT Governance

Fraud Investigation

Regulatory Compliance

Forensic Analysis

Vendor Risk Management

Education

Bachelor’s degree in IT / Cybersecurity / CS / Business

Tools

PCI-DSS

SOX

NIST CSF

ISO 27001

ITGC

Job description

REEDS Jewelers is seeking an experienced Manager of IT Risk and Compliance to design and oversee the enterprise-wide GRC framework across retail stores, corporate systems, and e-commerce. This strategic leader will ensure secure, compliant operations and will independently investigate and file SARs to mitigate multi-channel fraud risks.

The role requires 3–5 years in IT audit or risk management, with strong PCI-DSS, SOX, and data privacy knowledge.