Senior Compliance Analyst — CCF & GRC Leader

Jobtailor; Seattle (WA); On-site; USD 120,000 - 160,000; Full time

Job summary

Nordstrom is seeking a regulatory compliance professional to lead the transformation and maturation of the Continuous Compliance Framework (CCF) within our GRC environment. You will collaborate with business and technology partners to define control language, testing cadence, and implementation guidance.

The role focuses on KPI and KRI design, RACI documentation, and integration with risk and governance programs.

Qualifications

• 4-6 years of regulatory compliance experience.
• Direct experience building and managing Continuous Compliance Framework (CCF) or Common Control Framework programs.
• Hands-on experience configuring compliance programs within GRC tools and platforms.
• Experience working with stakeholders to define control language, RACI, and testing cadence.
• Demonstrated experience developing KPIs and KRIs for compliance programs.
• Familiarity with PCI DSS sufficient to support assessments and control testing activities.
• Experience partnering with engineering or security teams to implement automated or AI-assisted control testing.
• Proven ability to align compliance operations with strategic business objectives.

Responsibilities

• Lead the transformation and ongoing maturation of the CCF.
• Configure and manage the CCF program module within Nordstrom's GRC tool.
• Collaborate with stakeholders across business and technology teams to define control language, testing frequency, and implementation guidance.
• Document RACI models for all controls within the CCF.
• Design and implement KPIs and KRIs for the CCF.
• Work closely with Governance and Risk teams to ensure the CCF, risk management program, and governance program are integrated.
• Identify opportunities to harmonize compliance controls with risk appetite and governance structures.
• Participate in cross-GRC planning sessions.
• Support the development and communication of a unified GRC narrative for leadership.
• Partner with Security Engineers to design AI-driven testing and automated evidence collection features.

Skills

Regulatory compliance experience

GRC tool configuration

Stakeholder engagement

AI-driven testing familiarity

Education

Bachelor's or Master's in IT / Cybersecurity or related field

Tools

GRC tools configuration

PCI DSS familiarity

Job description

Nordstrom is seeking a regulatory compliance professional to lead the transformation and maturation of the Continuous Compliance Framework (CCF) within our GRC environment. You will collaborate with business and technology partners to define control language, testing cadence, and implementation guidance.

The role focuses on KPI and KRI design, RACI documentation, and integration with risk and governance programs.