IT Compliance Lead

This job is located at 814 Commerce Drive Oak Brook IL 60523

PLS Overview:

Why PLS Because You Deserve Better! PLS which stands for People Location Service is a leading retail provider of financial services. The P comes first because our customers are at the center of everything we do and we recognize that its our exceptional team members who go above and beyond every day. The PLS Group headquartered in Chicago is comprised of over 200 financial service centers in 12 states. Through our check cashing stores we provide consumers with convenient financial products and services to help them manage their day-to-day financial needs. Although many of our customers have banking relationships we believe that our customers use our financial services because they are convenient transparent and frequently more affordable than available traditional alternatives. PLS was founded in 1997 by Bob and Dan Wolfberg who serve as Co-Presidents.

Position Overview:

The IT Compliance Lead supports PLSs IT governance risk and compliance activities. This role partners with Information Security Infrastructure Application Development Audit and Legal departments as well as business stakeholders to help assess control effectiveness support audits and regulatory examinations as well as track remediation activities and strengthen ongoing compliance with applicable requirements. This role requires a risk-based mindset strong technical and analytical capabilities and the ability to translate regulatory and control requirements into practical operational support across multiple environments. Candidates must be able to manage assigned work while contributing to compliance policy maturity and operational resilience.

Job Responsibilities:

• Support IT compliance activities across PCI DSS GLBA IT controls security awareness technology risk management and related cybersecurity and regulatory requirements.
• Assist with IT testing audits assessments and regulatory examinations conducted by internal and external auditors and coordinate with security IT and other stakeholders throughout the review lifecycle.
• Work with control owners to communicate scope evidence requirements testing approaches and assessment expectations for in-scope controls and processes.
• Gather prepare evaluate and retain detailed audit-ready evidence to support control design and operating effectiveness testing.
• Maintain a centralized library of compliance and information security evidence including audit artifacts control documentation policy records assessment materials and supporting evidence needed for ongoing audits regulatory examinations and control monitoring.
• Document testing results compliance gaps exceptions and observations and communicate findings clearly to control owners management and other stakeholders.
• Support development tracking and ongoing revision of remediation plans for issues resulting from audits assessments risk reviews and regulatory findings.
• Track and report remediation status overdue actions and risk acceptance decisions for IT compliance-related issues and escalate material concerns when appropriate.
• Help maintain and improve a risk-based control framework aligned to applicable standards and regulations including PCI DSS v4.0.1 GLBA Safeguards Rule NIST Cybersecurity Framework 2.0 and other relevant requirements.
• Perform or support compliance impact assessments for new systems infrastructure changes cloud services SaaS platforms material process changes and other technology initiatives.
• Support third-party and vendor risk oversight by reviewing security and compliance documentation control attestations remediation commitments and ongoing compliance obligations.
• Partner with information security and IT teams on key control domains including identity and access management multi-factor authentication vulnerability management secure configuration logging and monitoring incident response and business continuity.
• Assist in the review and enhancement of IT policies standards procedures and control documentation to ensure alignment with regulatory expectations and operational practices.
• Prepare compliance metrics dashboards and management reporting for leadership committees and auditors to support decision-making and continuous improvement.
• Monitor changes in laws regulations standards and threat trends and help translate those changes into actionable control policy and process updates for the organization.

Job Requirements:

• Bachelors degree in information technology information security cybersecurity computer science business accounting risk management or a related field; equivalent relevant experience may be considered.
• 3 years of experience in information security IT general controls IT compliance IT audit cybersecurity governance and/or technology risk management.
• Experience supporting internal and external auditors regulators and cross-functional stakeholders in audits assessments examinations and remediation activities.
• Knowledge of security and risk frameworks standards and best practices including PCI DSS v4.0.1 GLBA Safeguards Rule NIST Cybersecurity Framework 2.0 and related guidance.
• Experience with regulatory and compliance requirements applicable to financial services payments retail or other regulated environments is preferred.
• Working knowledge of key cybersecurity control areas such as access control multifactor authentication vulnerability management endpoint and network security logging and monitoring incident response and business continuity.
• Experience with audit-ready documentation evidence management issue tracking and remediation support.
• Strong communication documentation presentation facilitation and stakeholder management skills with the ability to communicate effectively with both technical teams and business stakeholders.
• Strong analytical skills and experience with process improvement automation and continuous compliance monitoring.
• Experience with Governance Risk and Compliance (GRC) platforms and control management workflows is preferred.
• Experience in cloud or hybrid environments including SaaS and third-party service provider risk considerations is preferred.
• Experience in retail payments or financial services is preferred.
• Professional certifications such as CISA CRISC CISSP CISM or similar qualifications are preferred.

Working Conditions and Physical Requirements:

• This role requires regular in-person collaboration with team members at our Oak Brook Support Center.
• Must be able to sit and/or stand for extended periods
• Must be able to lift up to 15 lbs. with little assistance

Benefits:

Benefits for eligible employees include medical/dental/vision 401(k) vacation opportunities for advancement and ongoing training.

We strive to demonstrate our Core Values in all positions at PLS:

Communication Customer Focus Integrity and Trust Teamwork Results

PLS is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex age sexual orientation gender identity national origin disability marital status protected veteran status or any other characteristic protected by law. PLS is a drug-free workplace. PLS provides reasonable accommodations to applicants with disabilities. If you need a reasonable accommodation for any part of the application and hiring process please notify your Recruiter or a member of our Human Resources team at to make arrangements. The decision on granting reasonable accommodation will be made on a case-by-case basis.

For jobs located in the City of Los Angeles consistent with the requirements of the Fair Chance Initiative for Hiring Ordinance qualified applicants with criminal histories will be considered for employment.