Compliance Analyst

Our number one priority is the health and safety of our associates and their families, our partners, our communities and our customers. Proof of COVID-19 vaccination is required for employment. If you are unable to be vaccinated for medical reasons or sincerely-held religious beliefs, we will consider requests for reasonable accommodation consistent with our policy, and where we are able to provide such accommodations without undue hardship to the company pursuant to applicable law.

Mission/Job Scope:

The position is responsible for leading Leslie’s cyber risk and compliance functions. In doing this, you will elevate our security posture. This role requires an understanding of our existing systems as well as a willingness to learn about emerging technologies.

The Risk and Compliance Analyst is responsible for managing technical compliance programs, improving our security and privacy processes, assisting with reporting across the security function, and building our business continuity function.

Responsibilities: 

• Be part of Leslie’s security team to provide continued assurance of our security program
• Act as a primary point of contact for internal and external auditors
• Monitor progress and enforce resolution of outstanding issues that may lead to non-compliance or security threats to the business.
• Focus on strong risk management and corporate resiliency, not just compliance
• Responsible for Leslie’s PCI compliance program, and assist with SOX, CCPA, and other compliance obligations
• Use the NIST CSF or CIS framework to document and improve our security capabilities
• Work alongside process owners to identify new and changing processes and systems. Identify impacts to SOX and other operational controls
• Maintain our supplier/third party cyber risk management program
• Support workflows for our privacy program
• Maintain and enhance Leslie’s risk register
• Suggest and develop intelligent, viable, scalable solutions when controls are deemed inefficient or ineffective in addressing risks
• Help create our business continuity plan and improve our disaster recovery processes
• Providing support with drafting and implementing legal and regulatory risk compliance programs and hands on support to various business and operations functions in relation to compliance related issues.
• You should be skilled and ready to liaise with internal and external auditors, the SOX team, and controllership teams

Qualifications:

You have at least 4 years of related professional experience, including technical aspects of compliance programs such as Sarbanes-Oxley Act (SOX), Privacy, and Payment Card Industry Data Security Standard (PCI DSS). 

• You’re able to create and test business and IT process documentation
• You can utilize data to draw actionable conclusions
• Bachelor's degree required, or 5 additional years of related experience

Demonstrated history of living the values important to Leslie’s: Superior Customer Service, Operational Excellence, Continuous Improvement. A Great Place to Work, Passion for Sales Growth, Value-Centric