Teams at Nordstrom

Lead the Common Control Framework, configure GRC tooling, and transform compliance assessments through automation and AI-assisted evidence collection and control testing. Develop control language, RACI models, testing methodologies, KPIs, and KRIs while integrating governance, risk, and compliance programs. Support PCI DSS and other regulatory assessments, partner with engineering and security teams, and engage stakeholders and auditors to advance continuous monitoring and scalable compliance operations.

Owns the strategic roadmap for Nordstrom’s overages, shortages, and damages exception-management capability across the inbound supply chain. Leads product discovery, prioritization, requirements definition, backlog management, and delivery across engineering teams. Partners with supply chain, transportation, finance, operations, and executives to improve claims recovery, reduce chargeback disputes, eliminate manual workflows, and improve inventory accuracy. Defines KPIs, business cases, process flows, data schemas, and system integration specifications.

Conduct PCI DSS, CCF, and financial control technical testing; collect and validate evidence; maintain GRC records, RACIs, asset inventories, and governance documentation; track remediation and program metrics; support QSA fieldwork and audits; and develop AI-assisted automation for evidence collection and control testing. The role requires translating technical findings into business language, managing recurring compliance activities, and progressively owning specific PCI or CCF control domains.