Senior GRC Engineer - Regulatory & PCI Compliance (Hybrid)

panerabread; St. Louis (MO); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Panera Bread is seeking a Sr Engineer, Regulatory Compliance in St. Louis, MO. This role acts as the operational owner for PCI, audit management, third-party oversight, and privacy programs, partnering across Legal, Privacy, IT, and business teams to drive assessments and remediation.

The position emphasizes governance, risk management, and a data-driven approach to maintain audit-readiness and regulatory compliance while enabling business objectives.

Qualifications

• Own security regulatory compliance activities across legal, regulatory, contractual, and industry requirements.
• Coordinate PCI compliance program, evidence collection, control validation, and remediation management.
• Lead security audit activities, including planning, evidence collection, responses, and remediation.
• Conduct cybersecurity risk assessments and maintain risk registers and issue management.

Responsibilities

• Own regulatory compliance program across frameworks and maintain evidence repositories.
• Coordinate PCI compliance readiness, documentation, and controls within the organization.
• Manage internal and external audits, responses, corrective action plans, and remediation activities.
• Perform cybersecurity risk assessments and monitor risk trends and remediation progress.
• Partner with Privacy, Legal, HR, Marketing and Technology to governance initiatives.
• Coordinate third-party security reviews and vendor risk assessments.
• Develop and maintain security compliance metrics and executive reporting.

Job description

Panera Bread is seeking a Sr Engineer, Regulatory Compliance in St. Louis, MO. This role acts as the operational owner for PCI, audit management, third-party oversight, and privacy programs, partnering across Legal, Privacy, IT, and business teams to drive assessments and remediation.

The position emphasizes governance, risk management, and a data-driven approach to maintain audit-readiness and regulatory compliance while enabling business objectives.