Technology Compliance Manager

yeticoolers; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

YETI IT leadership seeks a Technology Compliance Manager to align systems, policies, and processes with SOX, PCI DSS, data privacy, and AI governance requirements. You will partner with business, IT, Internal/External Audit to support domestic and international obligations.

You will drive risk-based controls, readiness for audits, and continuous improvement of the compliance program across enterprise applications, cloud/SaaS, and ERP environments.

Qualifications

• 8+ years in technology compliance or related GRC role.
• Strong understanding of IT general controls and risk management.
• Experience with enterprise applications, cloud/SaaS environments, ERP systems, payment environments, or system implementation projects.
• Working knowledge of control frameworks such as COSO, COBIT, NIST, ISO 27001, ITIL, and PCI DSS.
• Ability to apply risk-based judgment to evaluate control considerations and balance compliance with business needs.
• Strong written and verbal communication skills for technical and non-technical audiences.

Responsibilities

• Manage and mature the technology compliance program (SOX ITGC, PCI DSS).
• Monitor IT control activities and remediation progress.
• Assist audit walkthroughs, evidence collection, and related activities.
• Coordinate PCI DSS assessment activities and remediation efforts.
• Conduct tech compliance risk assessments and identify control gaps.
• Provide risk-based guidance for technology initiatives and changes.
• Maintain compliance documentation including narratives, flows, policies, logs, and remediation plans.
• Drive continuous improvement of compliance processes.
• Collaborate with governance on privacy and data governance considerations.
• Translate regulatory expectations into practical compliance activities for YETI.

Skills

IT risk management

SOX compliance

IT general controls

risk assessment

stakeholder communication

audit readiness

PCI DSS

COSO/COBIT/NIST

cloud/SaaS

Education

Bachelor's degree

Job description

At YETI, we believe that time spent outdoors matters more than ever and our gear can make that time extraordinary. When you work here, you'll have the opportunity to create exceptional, meaningful work and problem solve with innovative team members by your side. Together, you'll help our customers get the high-quality gear they need to make the most of their adventures. We are BUILT FOR THE WILD

About the Role

As the Technology Compliance Manager , you will be responsible for helping ensure YETI's technology systems, policies, and processes align with applicable legal, regulatory, and industry requirements. In this role, you will partner closely with business, IT, Internal Audit, and External Audit stakeholders to support domestic and international compliance obligations, including SOX, PCI DSS, data privacy, and emerging AI governance requirements. You will help drive a risk-based approach to technology controls, audit readiness, issue remediation, and ongoing compliance program improvement.

What You'll Do

• Help manage and mature YETI's technology compliance program, including activities related to SOX IT general controls, PCI DSS, and related technology control and compliance requirements.
• Monitor and coordinate IT control activities to help ensure control owners complete required procedures and remediation actions in a timely and effective manner.
• Assist relevant stakeholders with audit walkthrough preparation, evidence collection, and related compliance activities as needed.
• Support and coordinate annual PCI DSS assessment activities, including evidence collection, control validation, issue tracking, and remediation follow-up.
• Conduct or support technology compliance risk assessments, evaluate control gaps, assess audit readiness, and identify process improvement opportunities.
• Provide risk-based guidance for technology initiatives, system implementations, process changes, integrations, and automation efforts to help ensure appropriate controls are considered and embedded.
• Support management in maintaining clear and accurate compliance documentation, including control narratives, process flows, policies, procedures, issue logs, and remediation plans.
• Help drive continuous improvement of compliance processes, including opportunities to streamline evidence collection, improve control monitoring, reduce manual effort, and enhance stakeholder accountability.
• Partner with governance stakeholders, as needed, to evaluate technology control considerations related to privacy, data governance, emerging technologies, and other compliance initiatives.
• Maintain awareness of relevant regulatory, industry, and technology control expectations to help translate those expectations into practical compliance activities for YETI.

What You Bring

• Greater than 8 years of experience in technology compliance, IT audit, IT risk management, SOX compliance, or related GRC role.
• Bachelor's degree strongly preferred.
• Strong understanding of IT general controls, technology risk management, and compliance concepts in a public company or similarly regulated environment.
• Experience with enterprise applications, cloud/SaaS environments, ERP systems, payment environments, or system implementation projects preferred.
• Working knowledge of relevant control and risk frameworks, such as COSO, COBIT, NIST, ISO 27001, ITIL, and PCI DSS.
• Ability to apply risk-based judgment to evaluate control considerations, identify practical solutions, and balance compliance requirements with business needs.
• Strong written and verbal communication skills, with the ability to explain technology risk and compliance topics clearly to technical and non-technical audiences.
• Strong organizational and project coordination skills
• Self-motivated and collaborative, with ability to work independently
• Professional certification such as CISA, CRISC, CISSP, CIA, PCI-related certification, or relevant AI governance/risk certification preferred.

YETI is proud to be an Equal Opportunity Employer.

Our commitment to creating a diverse, equitable, and inclusive culture is at the center of everything we do for our employees. We embrace all applicants looking to bring their authentic selves to YETI and contribute to our mission of keeping the wild WILD. Find out more about our commitment to DE&I at yeti.com/esg.html.

All applicants for employment will be considered without regard to an individual's race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws.

YETI welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part