Manager, Information Technology Compliance at The Wonderful Company

Oklahoma City, Oklahoma, United States -

Full Time

Start Date

Immediate

Expiry Date

13 Jul, 26

Salary

0.0

Posted On

14 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

PCI DSS compliance, Project management, IT compliance, Audit coordination, Risk management, Regulatory compliance, Data privacy, CPRA, GDPR, PCI-SSF, Documentation management, Stakeholder management, Communication skills, Organizational skills, IT security, Evidence collection

Industry

Food and Beverage Manufacturing

Description

Company Description Teleflora provides innovative marketing, education, and technology to make sure our member florists get the resources they need to thrive, creating beautiful bouquets with keepsake vases delivered to your door. We’ve been a part of The Wonderful Company family since 1979, and with a nationwide network of florists, we’ve become the world’s largest flower delivery service. With more than 10,000 member florists in North America, we lead the industry by working directly with our florists to hand-arrange and hand deliver every bouquet! We are seeking a highly organized, detail‑oriented, and collaborative Manager, IT Compliance to support our IT Infrastructure and Engineering teams. This role is ideal for a compliance generalist with strong project management, time management, and organizational skills who enjoys coordinating across multiple teams and regulatory domains. The Manager, IT Compliance will be responsible for the day‑to‑day coordination and oversight of our Payment Card Industry (PCI) compliance efforts, including management of the annual PCI DSS Level 1 Service Provider audit and PCI Software Security Framework (PCI‑SSF) audits for our Point‑of‑Sale (POS) applications. In addition to PCI, this role will support broader compliance and privacy initiatives, including evolving privacy regulations such as the California Privacy Rights Act (CPRA) and the General Data Protection Regulation (GDPR). While this position does not require deep hands‑on engineering work, it works closely with IT engineers, security teams, and compliance leadership to track requirements, manage evidence, coordinate remediation efforts, and ensure compliance activities stay on schedule. The ideal candidate is comfortable balancing multiple initiatives, organizing complex documentation, and serving as a central point of coordination across technical and compliance stakeholders. This position is located in Oklahoma City, OK and requires minimum one day per month in the Oklahoma City office. Job Description Payment Card Industry Audit Coordination Coordinate the annual Payment Card Industry Data Security Standard (PCI DSS) Level 1 audit process, including scheduling meetings, tracking deliverables, and managing timelines. Support development teams in preparing for Payment Card Industry Software Security Framework (PCI-SSF) audits by organizing evidence collection and facilitating communication with auditors. Serve as the primary point of contact for the Qualified Security Assessor (QSA) on day-to-day audit activities and evidence submission. Compliance Support Assist in maintaining compliance with privacy regulations such as California Privacy Rights Act (CPRA) and General Data Protection Regulation (GDPR). Monitor changes in compliance requirements and help update internal documentation accordingly. Collaborate with the compliance program owner to ensure alignment with company policies and regulatory expectations. Cross-Functional Collaboration Work closely with system engineers, network engineers, IT security engineers, database administrators, and developers to gather and validate compliance evidence. Facilitate internal meetings and working sessions to ensure timely progress on compliance initiatives. Documentation & Policy Support Help review and update IT and security policies in response to changes in compliance frameworks. Ensure documentation is well-organized, audit-ready, and reflects current practices. Qualifications 5+ years of experience supporting Payment Card Industry Data Security Standard (PCI DSS) compliance efforts, preferably in a Level 1 Service Provider environment. Familiarity with Payment Card Industry Software Security Framework (PCI-SSF), California Privacy Rights Act (CCPA), General Data Protection Regulation (GDPR), and general IT compliance practices. Strong organizational and communication skills, with the ability to coordinate across multiple technical teams. Experience working with Qualified Security Assessors (QSAs) or external auditors is a plus. Awareness of Systems and Organization Controls (SOC)-2 and International Organization for Standardization (ISO)-27001 frameworks is beneficial. Additional Information Thriving Wellness Community: Access to top-notch medical coverage comprehensive vision and dental plans, and a 401k with match eligibility to secure your financial future and including: 24/7 online physician consultations virtual mental health resources life coaching engaging employee community groups cash rewards for healthy habits and fitness reimbursements library of on-demand fitness videos Career Advancement Opportunities: Unlock your potential with clear paths for career progression and internal mobility across our diverse family of brands and business units. Focused Learning and Development: Grow as a leader with our dedicated Learning and Organizational Development department, offering extensive resources like People Manager and leadership training, webinars, and eLearning courses. Empowering Mentorship Program: Connect with colleagues through our company-wide mentorship program to share goals, overcome challenges, and drive your career forward. Continuous Improvement Training: Participate in training that empowers all employees to learn and implement concepts that drive significant, positive change in the workplace. Building a Healthy Society: We focus on improving the social determinants of a healthy society-quality education and medical care, economic mobility, and a healthy environment-to help build thriving communities. Wonderful CSR Giving Back to the Community: Make a difference with Wonderful Giving, allowing you to allocate company-provided funds to up to three charities of your choice, and join Wonderful Neighbor to contribute to group service projects within our local communities. Say everything and share your "Love Out Loud™" with the gift of Teleflora® flowers—all made by hand and delivered by hand by your local florist. With more than 10,000 member florists in North America alone, Teleflora offers the kind of personal touches, artistry and expertise you expect from a trusted neighborhood florist—even if that neighborhood is across the country. No prepackaged flowers in nondescript boxes dropped on your doorstep—Teleflora's network of professional florists creates artistic arrangements personally delivered in a vase, often on the same day. Teleflora makes every day an occasion with a two-in-one gift that includes a multipurpose keepsake container for long-lasting enjoyment. For more, visit: www.teleflora.com, or follow us on Instagram and Facebook and tag your own #LoveOutLoud moment. Telefora is part of The Wonderful Company, a successful, fast-growing privately held $6 billion company with 10,000 employees worldwide. The Wonderful Company’s connection to consumers has health at its heart and giving back in its DNA. The company has a long-standing commitment to corporate social responsibility, including more than $1 billion invested in environmental sustainability; $65 million in charitable giving, education initiatives, and innovative health and wellness programs each year; and $143 million toward the construction of two charter school campuses in California’s Central Valley. To view the current Corporate Social Responsibility report, visit csr.wonderful.com. The Wonderful Company is an Equality Opportunity Employer that provides opportunities for advancement. We are committed to creating a diverse workforce that embodies a deep culture of acceptance, equity, and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, region, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected categories. EEO is the law - click here for more information

Responsibilities

The Manager, IT Compliance will coordinate day-to-day PCI DSS Level 1 audits and support broader privacy initiatives like CPRA and GDPR. This role involves collaborating with IT and security teams to track compliance requirements, manage evidence, and facilitate remediation efforts.