IT Compliance Lead

This job is located at 814 Commerce Drive, Oak Brook, IL 60523 PLS ® Overview:   Why PLS? Because You Deserve Better! ®  PLS — which stands for People – Location – Service — is a leading retail provider of financial services. The “P” comes first, because our customers are at the center of everything we do, and we recognize that it’s our exceptional team members who go above and beyond every day. The PLS Group, headquartered in Chicago, is comprised of over 200 financial service centers in 12 states. Through our check cashing stores, we provide consumers with convenient financial products and services to help them manage their day-to-day financial needs. Although many of our customers have banking relationships, we believe that our customers use our financial services because they are convenient, transparent, and frequently more affordable than available traditional alternatives. PLS was founded in 1997 by Bob and Dan Wolfberg, who serve as Co-Presidents. Position Overview : The IT Compliance Lead supports PLS’s IT governance, risk, and compliance activities. This role partners with Information Security, Infrastructure, Application Development, Audit, and Legal departments, as well as business stakeholders to help assess control effectiveness, support audits and regulatory examinations, as well as track remediation activities and strengthen ongoing compliance with applicable requirements. This role requires a risk-based mindset, strong technical and analytical capabilities, and the ability to translate regulatory and control requirements into practical operational support across multiple environments. Candidates must be able to manage assigned work while contributing to compliance, policy maturity, and operational resilience. Job Responsibilities : Support IT compliance activities across PCI DSS, GLBA, IT controls, security awareness, technology risk management, and related cybersecurity and regulatory requirements. Assist with IT testing, audits, assessments, and regulatory examinations conducted by internal and external auditors, and coordinate with security, IT, and other stakeholders throughout the review lifecycle. Work with control owners to communicate scope, evidence requirements, testing approaches, and assessment expectations for in-scope controls and processes. Gather, prepare, evaluate, and retain detailed audit-ready evidence to support control design and operating effectiveness testing. Maintain a centralized library of compliance and information security evidence, including audit artifacts, control documentation, policy records, assessment materials, and supporting evidence needed for ongoing audits, regulatory examinations, and control monitoring. Document testing results, compliance gaps, exceptions, and observations, and communicate findings clearly to control owners, management, and other stakeholders. Support development, tracking, and ongoing revision of remediation plans for issues resulting from audits, assessments, risk reviews, and regulatory findings. Track and report remediation status, overdue actions, and risk acceptance decisions for IT compliance-related issues and escalate material concerns when appropriate. Help maintain and improve a risk-based control framework aligned to applicable standards and regulations, including PCI DSS v4.0.1, GLBA Safeguards Rule, NIST Cybersecurity Framework 2.0, and other relevant requirements. Perform or support compliance impact assessments for new systems, infrastructure changes, cloud services, SaaS platforms, material process changes, and other technology initiatives. Support third-party and vendor risk oversight by reviewing security and compliance documentation, control attestations, remediation commitments, and ongoing compliance obligations. Partner with information security and IT teams on key control domains including identity and access management, multi-factor authentication, vulnerability management, secure configuration, logging and monitoring, incident response, and business continuity. Assist in the review and enhancement of IT policies, standards, procedures, and control documentation to ensure alignment with regulatory expectations and operational practices. Prepare compliance metrics, dashboards, and management reporting for leadership, committees, and auditors to support decision-making and continuous improvement. Monitor changes in laws, regulations, standards, and threat trends, and help translate those changes into actionable control, policy, and process updates for the organization. Job Requirements : Bachelor’s degree in information technology, information security, cybersecurity, computer science, business, accounting, risk management, or a related field; equivalent relevant experience may be considered. 3+ years of experience in information security, IT general controls, IT compliance, IT audit, cybersecurity governance, and/or technology risk management. Experience supporting internal and external auditors, regulators, and cross-functional stakeholders in audits, assessments, examinations, and remediation activities. Knowledge of security and risk frameworks, standards, and best practices, including PCI DSS v4.0.1, GLBA Safeguards Rule, NIST Cybersecurity Framework 2.0, and related guidance. Experience with regulatory and compliance requirements applicable to financial services, payments, retail, or other regulated environments is preferred. Working knowledge of key cybersecurity control areas such as access control, multifactor authentication, vulnerability management, endpoint and network security, logging and monitoring, incident response, and business continuity. Experience with audit-ready documentation, evidence management, issue tracking, and remediation support. Strong communication, documentation, presentation, facilitation, and stakeholder management skills, with the ability to communicate effectively with both technical teams