Director of IT Risk and Compliance
About the job
- Three to five years of progressive experience in IT audit, information security governance, or IT risk management.
- Proven experience in a multi-channel retail, e-commerce, banking, or consumer-facing environment with heavy transactional volumes.
- Deep working knowledge of the Americans with Disabilities Act, data protection compliance, PCI-DSS, SOX, and consumer privacy laws.
- A bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business Administration, or a related field.
- Candidates must possess at least two of the listed certifications: CISA; CISM or CISSP. A combination of a technical security certification and a fraud/investigative certification is highly preferred.
- Lead technical forensic investigations into complex corporate fraud, including e-commerce account takeovers, gift card manipulation, and anomalous transactional behaviors across point-of-sale and omni-channel credit integrations.
- Own end-to-end troubleshooting of suspicious patterns, compiling narrative reports, and formally filing Suspicious Activity Reports with FinCEN in compliance with Bank Secrecy Act rules for luxury retailers.
- Provide the CIO and executive leadership with confidential intelligence briefs regarding internal or external fraud investigations, exposure assessments, and structural vulnerabilities.
- Own end-to-end PCI-DSS compliance across digital checkout touchpoints, point-of-sale systems, and multi-channel payment integrations.
- Manage and test IT General Controls to support Sarbanes-Oxley audit readiness and ensure segregation of duties across financial and inventory systems, including enterprise ERP and legacy AS400 databases.
- Monitor and enforce compliance with data privacy frameworks, including CCPA/CPRA, and specialized AML regulations affecting loyalty databases, high-value cash and financing transactions, and digital marketing.
- Maintain and update the IT risk register, translating technical security findings and transaction fraud vectors into quantifiable business risks.
- Architect and execute a third-party risk assessment program for SaaS providers, financial partners, supply chain logistics, and AI/analytics vendors.
- Serve as the primary point of contact for internal and external IT auditors, coordinate evidence collection, and track and remediate audit findings.
- Develop, update, and manage the lifecycle of corporate information security policies aligned with the NIST Cybersecurity Framework or ISO 27001.
- CRISC certification is preferred for candidates specializing in designing and executing enterprise-level IT risk registers.
About the company
REEDS Jewelers is a family-owned jewelry retailer that operates the largest network of stores in North America, selling diamonds, watches, and other fine jewelry. Customers can browse and purchase in over 65 stores across 13 states or online at REEDS.com. The company’s products are sold through physical storefronts and a digital storefront, allowing shoppers to view and buy items such as diamonds, designer jewelry, and timepieces. What sets REEDS apart is its status as the largest family-owned jewelry chain in the region, with a long history since 1946, emphasizing scale, family ownership, and a broad selection across many locations. Its goal is to provide a wide range of high-quality jewelry and watches to customers through both brick-and-mortar stores and online, combining extensive inventory with personalized service across many communities.
Company Size
201-500
Company Stage
N/A
Total Funding
N/A
Headquarters
Wilmington, North Carolina
Founded
1946
Get referred to REEDS Jewelers
See people who can refer or advise you
Simplify's Take
What believers are saying
- Cary’s 7,800-square-foot Fenton Landmark opens in early 2026 with Rolex, Tudor, Omega.
- Fayetteville opened March 3, 2026, expanding the chain’s second Rolex store.
- FWV began national PR support June 8, 2026, boosting 80th-anniversary brand visibility.
What critics are saying
- REEDS lists store-closing sales at Arundel Mills, Asheville, Southpark, and Springfield.
- Trademark fights with Reeds Wilmington Jewelers and REEDS JENSS drain management attention.
- A Rolex-heavy luxury strategy ties growth to vendor allocation and affluent mall traffic.
What makes REEDS Jewelers unique
- REEDS Jewelers is the largest family-owned luxury jeweler, founded in 1946.
- Its Landmark stores bundle bridal, Swiss watches, hospitality bars, and private consultations.
- Fayetteville added Rolex service technicians, strengthening high-touch watch sales and aftercare.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Life Insurance
- Disability Insurance
- 401(k) Retirement Plan
- Employee Discounts