Compliance Program Manager

Location: Las Vegas, NV |  Reports to: Chief Information Officer

The Compliance Program Manager directly manages and owns Pavilion Payments’ enterprise compliance programs, with an emphasis on control readiness, external assessments, ongoing monitoring, risk management, business continuity, and practical compliance processes. Reporting to the Chief Information Officer, this individual contributor is accountable for the design, execution, and outcomes of these programs and partners with Information Technology, Information Security, Legal, and business stakeholders to document requirements, drive remediation, and ensure compliance with applicable payment-industry and regulatory obligations. The role supports the GLBA, FCRA, NACHA/ACH, and Privacy Programs and performs independent internal compliance assessments and contract reviews.

Key Responsibilities

• Own and manage PCI and SOC 2 assessment activities, including engagement with external assessors, evidence collection, schedules, control documentation, and status reporting.
• Own and maintain an inventory of compliance controls, assign and hold accountable control owners, and own and perform periodic control testing and readiness reviews.
• Own and manage assessment findings, exceptions, and remediation plans; drive closure with stakeholders and report progress, risks, and overdue actions to leadership.
• Directly manage and own the administration and ongoing monitoring of applicable compliance programs, including GLBA, FCRA, NACHA/ACH, and Privacy Programs, serving as the accountable owner and engaging subject-matter experts as needed.
• Own, develop, maintain, and periodically review compliance policies, procedures, and supporting documentation; communicate requirements and deliver training and guidance to employees.
• Own the evaluation of compliance implications of operational changes, working with Legal, Information Security, IT, and business teams; own customer, partner, and vendor contractual compliance requirements.
• Own and manage internal, operational, and technology-related audit activities, including evidence preparation and resolution of identified issues.
• Own the Risk Management Policy, the Risk Register, and risk evaluations, including identifying, assessing, and tracking risks and treatment plans and reporting results to leadership.
• Own and maintain the Audit Committee Policy and its periodic review.
• Own vendor and customer onboarding and due diligence reviews, including vendor risk assessments and ongoing review of third-party risk.
• Own the Business Continuity Policy, business continuity planning, and annual testing, including documentation of test results and tracking of remediation.
• Perform independent internal compliance assessments and compliance reviews of customer, partner, and vendor contracts, and report results and recommendations to leadership.
• Serve as the primary owner for interactions with external regulators and auditors.
• 5+ years of experience in compliance, risk management, internal audit, or a closely related function.
• Working knowledge of payment-industry compliance and assessment processes, including experience with one or more of PCI, SOC 2, GLBA, FCRA, or NACHA/ACH requirements, and experience owning risk management, vendor due diligence, and business continuity programs.
• Ability to own and manage multiple assessments or initiatives, maintain accurate documentation, and drive timely follow-up with cross-functional stakeholders.
• Strong written and verbal communication skills, sound judgment, and attention to detail.
• Experience in payments, banking, financial technology, gaming, public accounting, or compliance consulting.
• Exposure to privacy compliance, technology risk, IT audits, vendor risk, business continuity, or external regulatory examinations.

Qualifications

• 5+ years of experience in compliance, risk management, internal audit, or a closely related function.
• Working knowledge of payment-industry compliance and assessment processes, including experience with one or more of PCI, SOC 2, GLBA, FCRA, or NACHA/ACH requirements, and experience owning risk management, vendor due diligence, and business continuity programs.
• Ability to own and manage multiple assessments or initiatives, maintain accurate documentation, and drive timely follow-up with cross-functional stakeholders.
• Strong written and verbal communication skills, sound judgment, and attention to detail.

Additional Experience That May Be Helpful

• Experience in payments, banking, financial technology, gaming, public accounting, or compliance consulting.
• Exposure to privacy compliance, technology risk, IT audits, vendor risk, business continuity, or external regulatory examinations.

Pavilion Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information, or any other status protected by applicable law.