Senior Compliance Analyst – Continuous Compliance Framework

Nordstrom

Senior Compliance Analyst leading the Continuous Compliance Framework at Nordstrom. Collaborating across teams to integrate governance and risk management while enhancing compliance practices.

Posted 7/24/2026full-timeSeattle • Washington • 🇺🇸 United StatesSenior💰 $142,000 - $220,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and configuring Continuous Compliance Framework (CCF) programs within GRC tools, with a strong focus on developing KPIs and KRIs. Collaborates effectively with cross-functional teams to align compliance operations with strategic business objectives.

Highest-signal resume keywords

Continuous Compliance Framework (CCF) ManagementGRC Tool ConfigurationKPI and KRI DevelopmentRegulatory Compliance ExperienceCollaboration with Security Teams

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Regulatory ComplianceContinuous Compliance Framework (CCF)GRC ToolsKPI DevelopmentKRI DevelopmentControl Language DefinitionRACI DocumentationAutomated Control TestingAI-Driven TestingPCI DSS Familiarity

Soft Skills

CollaborationCommunicationStakeholder EngagementStrategic Alignment

Industry Keywords

GovernanceRisk ManagementCompliance ControlsControl TestingRisk Appetite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the transformation and ongoing maturation of the CCF
Configure and manage the CCF program module within Nordstrom’s GRC tool
Collaborate with stakeholders across business and technology teams to define control language, testing frequency, and implementation guidance
Document RACI models for all controls within the CCF
Design and implement KPIs and KRIs for the CCF
Work closely with the Governance and Risk teams to ensure the CCF, risk management program, and governance program are integrated
Identify opportunities to harmonize compliance controls with risk appetite and governance structures
Participate in cross-GRC planning sessions
Support the development and communication of a unified GRC narrative for leadership
Partner with Security Engineers to design AI-driven testing and automated evidence collection features

Requirements

What you’ll need

4–6 years of regulatory compliance experience
Direct experience building and managing Continuous Compliance Framework (CCF) or Common Control Framework programs
Hands-on experience configuring compliance programs within GRC tools and platforms
Experience working with stakeholders to define control language, RACI, and testing cadence
Demonstrated experience developing KPIs and KRIs for compliance programs
Familiarity with PCI DSS sufficient to support assessments and control testing activities
Experience partnering with engineering or security teams to implement automated or AI-assisted control testing
Proven ability to align compliance operations with strategic business objectives
Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent work experience

Benefits

Comp & perks

Medical/Vision
Dental
Retirement and Paid Time Away
Life Insurance and Disability
Merchandise Discount and EAP Resources
Performance-based incentives/bonuses
401k
PTO accruals
Holidays