About the RoleAs the
Technology Compliance Manager, you will be responsible for helping ensure YETI's technology systems, policies, and processes align with applicable legal, regulatory, and industry requirements. In this role, you will partner closely with business, IT, Internal Audit, and External Audit stakeholders to support domestic and international compliance obligations, including SOX, PCI DSS, data privacy, and emerging AI governance requirements. You will help drive a risk-based approach to technology controls, audit readiness, issue remediation, and ongoing compliance program improvement.
What You'll Do- Help manage and mature YETI's technology compliance program, including activities related to SOX IT general controls, PCI DSS, and related technology control and compliance requirements.
- Monitor and coordinate IT control activities to help ensure control owners complete required procedures and remediation actions in a timely and effective manner.
- Assist relevant stakeholders with audit walkthrough preparation, evidence collection, and related compliance activities as needed.
- Support and coordinate annual PCI DSS assessment activities, including evidence collection, control validation, issue tracking, and remediation follow-up.
- Conduct or support technology compliance risk assessments, evaluate control gaps, assess audit readiness, and identify process improvement opportunities.
- Provide risk-based guidance for technology initiatives, system implementations, process changes, integrations, and automation efforts to help ensure appropriate controls are considered and embedded.
- Support management in maintaining clear and accurate compliance documentation, including control narratives, process flows, policies, procedures, issue logs, and remediation plans.
- Help drive continuous improvement of compliance processes, including opportunities to streamline evidence collection, improve control monitoring, reduce manual effort, and enhance stakeholder accountability.
- Partner with governance stakeholders, as needed, to evaluate technology control considerations related to privacy, data governance, emerging technologies, and other compliance initiatives.
- Maintain awareness of relevant regulatory, industry, and technology control expectations to help translate those expectations into practical compliance activities for YETI.
What You Bring- Greater than 8 years of experience in technology compliance, IT audit, IT risk management, SOX compliance, or related GRC role.
- Bachelor's degree strongly preferred.
- Strong understanding of IT general controls, technology risk management, and compliance concepts in a public company or similarly regulated environment.
- Experience with enterprise applications, cloud/SaaS environments, ERP systems, payment environments, or system implementation projects preferred.
- Working knowledge of relevant control and risk frameworks, such as COSO, COBIT, NIST, ISO 27001, ITIL, and PCI DSS.
- Ability to apply risk-based judgment to evaluate control considerations, identify practical solutions, and balance compliance requirements with business needs.
- Strong written and verbal communication skills, with the ability to explain technology risk and compliance topics clearly to technical and non-technical audiences.
- Strong organizational and project coordination skills
- Self-motivated and collaborative, with ability to work independently
- Professional certification such as CISA, CRISC, CISSP, CIA, PCI-related certification, or relevant AI governance/risk certification preferred.
Benefits & Perks:Click here to learn about the benefits and perks we offer at YETI.
