> Markdown version of [/jobs/ext/135513-it-compliance-analyst](https://www.wearedevelopers.com/jobs/ext/135513-it-compliance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Compliance Analyst - **Company:** Chewy, Inc. - **Location:** Plantation, FL, United States - **Salary:** $68,500.0 - $102,500.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Document Management Systems, PCI Data Security Standards, Cloud Platform System, Information Technology - **Published:** May 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=92becbe4c85e1475 ## About the Role Do you have experience in Document review (document control)?, Do you have a Bachelor's degree?, * Bachelor's degree or higher in Computer Science, Computer Information Systems, or similar; or equivalent experience. * Familiarity with industry frameworks and standards such as PCI-DSS, NIST CSF, NIST 800-53, SOC 2 or similar. * Comfortable reading, interpreting and analyzing policy documents, audit reports and technical control descriptions. * Strong attention to detail and ability to organize and manage documentation effectively. * Basic understanding of IT infrastructure, cloud environments, applications and security controls. * Strong written and verbal communication skills with the ability to collaborate across technical and non-technical teams. * Ability to prioritize tasks and manage multiple initiatives in a structured, deadline-driven environment. * A proactive mindset with a desire to learn and grow within the GRC domain. Bonus (if applicable): * Experience supporting PCI environments (Levels 1 - 3) or participating in formal PCI assessments. * Experience working in organizations with strong adoption of AI technologies and understanding associated governance or compliance considerations. * Exposure to GRC tooling (e.g., AuditBoard, Drata, Vanta, etc.). * Relevant certifications such as Security+, CISA or similar. ## Description * Assist in assessing risk statements and mapping controls to established compliance frameworks such as PCI and NIST. * Participate in the execution of PCI assessments across the organization, including evidence collection, documentation review and coordination with control owners. * Support subject matter experts in maintaining and validating control effectiveness, audit readiness and risk management processes. * Contribute to governance, risk & compliance initiatives by assisting with compliance framework implementations. * Help maintain risk registers, track remediation activities and follow up on action plans. * Support internal and external audit activities by organizing documentation, coordinating stakeholders responses and validating evidence. * Assist with policy and procedure reviews to ensure alignment with evolving regulatory and industry standards. * Partner with technical teams to understand system environments and document control implementations accurately. ## Related Videos - [Cloud Vendor Lock-In - Is it just a new version of the Database Abstraction Layers?](https://www.wearedevelopers.com/videos/1185-cloud-vendor-lock-in-is-it-just-a-new-version-of-the-database-abstraction-layers) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix) - [Dev Digest 151: SEO in an AI world, security fixes and Doomed PDFs](https://www.wearedevelopers.com/magazine/535-dev-digest-151-seo-in-an-ai-world-security-fixes-and-doomed-pdfs) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data) - [Dev Digest 194: AI vs. Version Control, Password Louvre & Cursed Webdev](https://www.wearedevelopers.com/magazine/654-dev-digest-194-ai-vs-version-control-password-louvre-cursed-webdev)