REEDS Jewelers

IT Support

• Design,
• implement,
• and oversee the enterprise-wide IT governance,
• procurement,
• risk management,
• and compliance (GRC) framework for REEDS Jewelers.
• Ensure that our retail stores,
• corporate infrastructure,
• and e-commerce platform are secure,
• resilient,
• and fully compliant with all applicable regulatory,
• financial,
• and industry standards.
• Lead technical forensic investigations into complex corporate fraud including:
• e-commerce account takeovers,
• gift card manipulation,
• and anomalous transactional behaviors across point-of-sale (POS) and omni-channel credit integrations.
• Own the end-to-end process of troubleshooting suspicious patterns,
• compiling narrative reports,
• and formally filing Suspicious Activity Reports (SARs) with the Financial Crimes Enforcement Network (FinCEN) in strict compliance with Bank Secrecy Act (BSA) rules for luxury retailers.
• Provide the CIO and executive leadership with confidential intelligence briefs regarding internal or external fraud investigations,
• exposure assessments,
• and structural vulnerabilities.
• Own end-to-end compliance for PCI-DSS across all digital checkout touchpoints,
• POS systems,
• and multi-channel payment integrations.
• Manage and test IT General Controls (ITGC) to support Sarbanes-Oxley (SOX) audit readiness,
• ensuring tight segregation of duties (SoD) across financial and inventory systems (e.g., enterprise ERP and legacy AS400 databases).
• Monitor and enforce compliance with data privacy frameworks (including CCPA/CPRA) and specialized AML regulations impacting loyalty databases,
• high-value cash/financing transactions,
• and digital marketing.
• Maintain and update the IT risk register,
• translating technical security findings and transaction fraud vectors into quantifiable business risks.
• Architect and execute a robust third-party risk assessment program for SaaS providers,
• financial partners,
• supply chain logistics,
• and AI/analytics vendors.
• Act as the primary point of contact for internal and external IT auditors,
• coordinating evidence collection and owning the tracking and remediation of all audit findings.
• Develop,
• update,
• and manage the lifecycle of corporate information security policies aligned with the NIST Cybersecurity Framework or ISO 27001.

IT Risk and Compliance Manager