IT Compliance and Security Analyst

Yesway - Fort Worth, TX

Full-time - Mid Level

Fort Worth, TX

251-500 employees

Gasoline Stations and Fuel Dealers

About the position

Yesway is seeking an IT Compliance and Security Analyst to join our team in Fort Worth, TX. As one of the fastest-growing convenience store operators in the United States, we pride ourselves on our commitment to maintaining high standards of information security and compliance. The successful candidate will play a crucial role in ensuring adherence to IT policies, procedures, and processes in accordance with business and regulatory requirements. This position will involve developing and leading the global information technology compliance program, particularly in the areas of information security, including PCI and PII compliance. The analyst will work closely with key stakeholders across various departments, including Operations, Legal, Finance, and HR, to create and enforce IT standard operating procedures (SOPs) and ensure that all current projects meet necessary business and regulatory requirements. In this role, you will manage responses to all IT-related audits and privacy inspections, ensuring that our compliance with PCI, PII, and Financial SOX is maintained. You will leverage your technical knowledge to devise solutions for system deficiencies and support continuous quality improvement in IT processes and procedures. Additionally, you will be responsible for ensuring the timely completion of regulatory documentation and managing relationships with external service providers to ensure compliance with internal security and compliance requirements. The analyst will also review and approve network security-related changes as part of our corporate change management process and assist peers in related responsibilities during the installation and relocation of infrastructure.

Responsibilities

• Ensure adherence with IT policies, procedures, and processes in accordance with business and regulatory requirements.
• Develop and lead the global information technology compliance program in the areas of information security (PCI, PII, etc.).
• Create IT standard operating procedures and ensure adherence to the organization's SOPs, IT Controls framework, and System Development Life Cycle (SDLC).
• Manage responses to all IT related audits and privacy related inspections, including PCI, PII and Financial SOX.
• Use technical knowledge to create solutions for system deficiencies and support continuous quality improvement to IT processes and procedures.
• Ensure timely completion of regulatory documentation, including compliance related to PCI.
• Manage relationships with and audit services of external service providers (SAAS and cloud) to ensure SLA compliance with internal security and compliance requirements.
• Review and approve network security-related changes as part of a corporate change management process.
• Assist peers in related responsibilities during installation and relocation of infrastructure.

Requirements

• Bachelor's Degree in Computer Science or a related field; or equivalent combination of education and related experience.
• Four or more years' experience in Information Security and IT Quality-related areas.
• In-depth knowledge and understanding of Payment Card Industry Data Security Standards (PCI DSS) and compliance requirements.
• Experience developing and implementing PCI compliance policies and procedures.
• Excellent attention to detail with analytical and problem-solving abilities.
• Ability to manage multiple shifting priorities and direct the work of others to meet deliverable due dates.
• Excellent organizational, written and verbal communication skills with the ability to present data and other pertinent information to a variety of audiences.
• Highly ethical and transparent, with professional sensitivity and care for confidentiality.

Benefits

• Competitive wages
• Outstanding benefits