Senior GRC Analyst: AI‑Driven Compliance & Automation

Nordstrom; Seattle (WA); Hybrid; USD 142,000 - 221,000; Full time

Benefits offered by this job

Medical/Vision, Dental, Retirement

Paid Time Away

Life Insurance

Disability insurance

Merchandise Discount

EAP Resources

Job summary

Nordstrom is seeking a Senior Analyst for the Governance, Risk and Compliance (GRC) program. You will own the Common Control Framework (CCF) from inception, mature it, run it, and test control effectiveness in a scalable, AI-enabled environment.

This role requires cross‑functional collaboration with GRC, risk, and compliance teams to ensure controls align with evolving threats and regulations. Hybrid in Seattle, WA, with a minimum four in‑office days per week.

Qualifications

• Experience leading cross-functional compliance initiatives.
• Ability to design control language, RACI, and testing cadence.
• Experience with PCI DSS and PCI assessments.
• Configuring and maturing a Common Control Framework (CCF).

Responsibilities

• Lead transformation and maturation of the CCF with tailored controls.
• Configure CCF module in Nordstrom's GRC tool with controls, testing schedules, and ownership.
• Collaborate with business and tech teams on control language and implementation guidance.
• Build RACI models for all controls and design KPIs/KRIs for the program.
• Develop and pilot AI/automation to cut evidence review time and improve testing.

Skills

Regulatory compliance

Cross-functional collaboration

GRC tooling

AI/Automation

PCI familiarity

Stakeholder engagement

Program leadership

Education

Bachelor's or Master's in IT/CS/Cybersecurity

Tools

GRC tools/platforms

Job description

Nordstrom is seeking a Senior Analyst for the Governance, Risk and Compliance (GRC) program. You will own the Common Control Framework (CCF) from inception, mature it, run it, and test control effectiveness in a scalable, AI-enabled environment.

This role requires cross‑functional collaboration with GRC, risk, and compliance teams to ensure controls align with evolving threats and regulations. Hybrid in Seattle, WA, with a minimum four in‑office days per week.