Sr Compliance Specialist - Security

Williams-Sonoma, Inc.; Rocklin (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Discount on WSI brands

401(k) plan

Paid vacations, holidays, and time off

Health, dental and vision insurance

Tax-free commuter benefits

Wellness program

Job summary

Williams-Sonoma, Inc. in Rocklin, CA is seeking a Sr Compliance Specialist - Security to lead PCI-DSS assessments, validate controls, and drive remediation across the enterprise.

You will collaborate with development teams and operations to ensure ongoing compliance with policy and technical standards. The role requires 7+ years in information security, certifications such as CISSP/CISM/CISA, and on-site presence Monday through Thursday.

Qualifications

• BA/BS or equivalent experience in information security.
• 7+ years in information security field.
• CISSP, CISM, CISA or similar certification preferred.
• 5+ years in a PCI support role or engineering position.
• Experience with PCI-DSS, ISO, COBIT, HIPAA and SOX.
• QSA or ISA preferred.
• Onsite in Rocklin, CA, Mon-Thu.
• Experience working in retail sector preferred.

Responsibilities

• Plan, conduct and establish remediation plans for PCI Assessments.
• Actively engage business units at pre-determined times frame to provide a summary analysis of each business units compliance posture at checkpoints throughout the year.
• Identify and recommend changes in procedures, processes and scope of delivery needed to demonstrate sustained compliance with PCI requirements.
• Assist with PCI-DSS compliance checklists including review and validation of existing controls, documentation and any potential gaps.
• Provide management guidance and expertise for all PCI gaps and help to prioritize remediation targets.
• Reduce demand on resource Owners for evidence collection and analysis via use of GRC and related security tools.
• Reduce the company’s overall PCI-DSS scope where possible via taking lead on remote scoping practices and procedures.
• Provide remediation guidance to technical teams to establish and maintain sustained compliance with PCI-DSS.
• Provide long-term cost-effective remediation solutions/recommendations to address systemic issues or gaps that potentially risk corporate PCI-DSS Compliance.

Skills

Leadership

Written and verbal communication

Risk assessment

Self-motivated

Results oriented

Education

BA/BS or equivalent experience

Tools

GRC tools

Job description

About the Team

Security Compliance helps to demonstrate the sustained compliance of the company with requirements for the protection of its high value systems and information assets. The scope of work extends across the corporate environment and its consumer delivery channels and it addresses legal requirements and industry standards such as PCIDSS, SOX, ISO, HIPAA, CA1386, and GDPR.

Job Description

About the Team

Security Compliance helps to demonstrate the sustained compliance of the company with requirements for the protection of its high value systems and information assets. The scope of work extends across the corporate environment and its consumer delivery channels and it addresses legal requirements and industry standards such as PCIDSS, SOX, ISO, HIPAA, CA1386, and GDPR.

About The Role

The Sr Compliance Specialist - Security plays a lead role in this activity. The Specialist supports periodic updates to policies, standards and awareness materials, and is responsible for ongoing validation that key controls are implemented in a sound and sustained manner. The Specialist may identify potential security exceptions, help to resolve business requirements, elevate matters requiring management attention, and oversee timely and effective remediation of vulnerabilities in the security of company information. The Specialist also will be responsible for providing execution support to development teams and operations groups in performing risk assessments, due diligence activities, data management, ongoing oversight, and reporting related to their ongoing compliance with polices and technical standards.

The current role will focus on conducting internal PCI-DSS assessments in addition to assisting all business units and functional teams in-scope for external PCI-DSS compliance validation. The ideal candidate will demonstrate industry experience around compliance with PCI-DSS and related standards and will have excellent analytical skills with ability to identify non-compliant issues and ensure remediation of non-compliance using industry standard methodologies. You will assist in defining scope of the compliance assessment, ensure the intent of the PCI requirements are being adhered to, develop internal associates through PCI DSS educational opportunities and provide direct and specific mentorship to cultivate an efficient, innovative, and collaborative work environment. You will maintain productive, informative, working relationships with technical and management staff at all levels of the organization.

Responsibilities

• Plan, conduct and establish remediation plans for PCI Assessments.
• Actively engage business units at pre-determined times frame to provide a summary analysis of each business units compliance posture at checkpoints throughout the year.
• Identify and recommend changes in procedures, processes and scope of delivery needed to demonstrate sustained compliance with PCI requirements.
• Assist with PCI-DSS compliance checklists including review and validation of existing controls, documentation and any potential gaps.
• Provide management guidance and expertise for all PCI gaps and help to prioritize remediation targets.
• Reduce demand on resource Owners for evidence collection and analysis via use of GRC and related security tools.
• Reduce the company’s overall PCI-DSS scope where possible via taking lead on remote scoping practices and procedures.
• Provide remediation guidance to technical teams to establish and maintain sustained compliance with PCI-DSS.
• Provide long-term cost-effective remediation solutions/recommendations to address systemic issues or gaps that potentially risk corporate PCI-DSS Compliance.

Criteria

• BA/BS or equivalent experience, with 7+ years’ experience gained in the information security field
• CISSP, CISM, CISA or similar certification [e.g., GIAC Certified ISO-17799 Specialist (G7799)]
• 5+ years’ experience in a PCI support role or engineering position experience required
• Extensive knowledge and experience with information security standards and methodologies, including the PCIDSS, ISO 9000 series, COBIT, Sarbanes Oxley, HIPAA, and other relevant industry security standards, and an in-depth knowledge of risk assessment and risk analysis
• QSA or ISA strongly preferred
• Experience in an enterprise-class Technology organization, working with large scale Distributed Systems environments preferred
• Excellent written and verbal communications skills
• Leadership role in previous job experience
• Results oriented, self-motivated
• Experience working with, and ideally writing, information security policies and standards and/or developing or implementing security-related tools preferred
• Understand information security holistically and how it relates to business goals preferred
• Ability to design, implement, reengineer and manage complex processes preferred
• Privacy Certification (e.g., Certified Information Privacy Professional) preferred
• Experience interfacing with and communicating information on complex privacy and security compliance issues to senior management and business units and external parties preferred
• Experience presenting IT security issues to large audiences, forums, or communities preferred
• Experience working within the retail sector preferred
• This role requires being onsite in the Rocklin, CA office Monday through Thursday

Our Culture & Values

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

People First

Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

Benefits

• A generous discount on all WSI brands
• A 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• A wellness program that supports your physical, financial and emotional health

Continued Learning

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).

This role is not eligible for relocation assistance.

Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.

The expected starting pay range for this position is $120,000 - $150,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.

About Us

Our Company

Founded in 1956, Williams-Sonoma, Inc. is the premier specialty retailer of high-quality products for the kitchen and home in the United States. Our family of brands are Williams Sonoma, Williams Sonoma Home, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, Rejuvenation, West Elm, Mark & Graham, Outward, and GreenRow. These brands are among the best known and most respected in the industry. We offer beautifully-designed, stylish and functional products for every area of the home, including the kitchen, living room, bedroom, home office, closet, laundry room and even outdoor spaces. We've seen some big changes since our first brick-and-mortar store opened more than half of a century ago. What hasn't changed is our passion for high-quality products, functional design, outstanding customer service, and enhancing the lives of our customers and the communities where we operate. Today, we’re a multi-brand, multi-channel, global enterprise supported by state-of-the-art technology and some of the most talented teams in retailing - and we’re always looking for new energy and ideas.