Director of IT Risk & Compliance
Core
Lead technical forensic investigations into complex corporate fraud, oversee IT governance, risk, and compliance frameworks, and manage audit readiness for a multi-channel retail and e-commerce environment.
Role type
Director of IT Risk & Compliance (Forensics & Governance)
Builds
Fraud investigation reports, SAR filings, IT risk registers, security policies, and audit remediation plans.
Domain
Retail / E-commerce / Financial Services
Required skills
IT audit, information security governance, IT risk management, forensic investigation, fraud detection, regulatory compliance (ADA, PCI-DSS, SOX, privacy laws), third-party risk assessment, IT General Controls testing, policy development.
Preferred skills
CISA, CRISC, technical security and fraud/investigative certifications, experience with NIST Cybersecurity Framework or ISO 27001.
Technologies
Ada, AI, Security Architect, ERP, Network
Responsibilities
Lead technical forensic investigations into complex corporate fraud (e-commerce account takeovers, gift card manipulation, POS/omni-channel credit system anomalies). Manage the full process for investigating suspicious activity, preparing reports, and filing SARs with FinCEN in accordance with BSA rules. Provide confidential briefings to the CIO and executive leadership on fraud investigations, exposure, and structural vulnerabilities. Oversee PCI-DSS compliance across digital checkout, POS systems, and multi-channel payment integrations. Manage and test IT General Controls to support SOX audit readiness, including segregation of duties across financial and inventory systems. Monitor and enforce data privacy and AML compliance affecting loyalty databases, high-value cash and financing transactions, and digital marketing. Maintain the IT risk register and translate security findings and transaction-fraud risks into measurable business risks. Develop and run third-party risk assessments for SaaS providers, financial partners, supply-chain logistics, and AI and analytics vendors. Serve as the main contact for internal and external IT auditors, coordinate evidence gathering, and track remediation of audit findings. Develop, update, and manage corporate information security policies aligned with the NIST Cybersecurity Framework or ISO 27001.
Seniority
Director, strategic leadership & hands-on execution
