> Markdown version of [/jobs/ext/272495-it-compliance-manager](https://www.wearedevelopers.com/jobs/ext/272495-it-compliance-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Compliance Manager - **Company:** Sprouts Farmers Market - **Location:** Phoenix, AZ, United States - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Audit Trail, Cyber Security, Issue Tracking Systems, Information Technology Audit, PCI Data Security Standards, Phishing, Simulation Software, IT General Controls (ITGC), Information Technology, Servicenow - **Published:** May 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=bc1306eb223fb9db ## About the Role Do you have experience in Team leadership?, Do you have a Bachelor's degree?, * Four-year degree or equivalent experience in a related field (e.g., Information Technology, Computer Science, Management Information Systems, or equivalent industry experience). * 5+ years of experience in IT compliance, IT audit, or information security, with at least 1-2 years in a supervisory or lead capacity. * Demonstrated working knowledge of PCI DSS, NIST CSF, and SOX requirements. * Hands-on experience with SOX ITGC testing, evidence coordination, and deficiency management. * Experience developing and maintaining IT policies and procedures. * Strong understanding of risk assessment methodologies and mitigation planning. * Experience with change management processes and CAB governance. * Demonstrated ability to work independently, make confident decisions, and drive improvements without constant direction. Preferred * Relevant certifications such as CISA or CRISC. * Experience in the retail or grocery industry. * Experience with ServiceNow and KnowBe4. * Experience managing security awareness and phishing simulation platforms. * Familiarity with GRC (Governance, Risk, and Compliance) platforms. * Experience working with Big 4 or external audit firms, including coordinating walkthroughs and evidence requests., * Communication: Convey information, ideas, and feedback clearly and concisely in an engaging manner that helps others understand and retain the message; listening actively to others. * Customer Focus: Place a high priority on the customer's perspective when making decisions and taking action; implementing service practices that meet the customers' and own organization's needs. * Driving for Results: Set SMART goals and measure progress; tenaciously working to meet or exceed goals and making continuous improvement. Seeking innovative ways to solve problems that result in unique and differentiated solutions. * Positive Approach: Demonstrate a positive attitude in the face of difficult or challenging situations; provide an uplifting (yet realistic) outlook on what the future holds and the opportunities it might present. * Coaching and Developing Others: Engaging team members and teams in developing and committing to individual development plans that target specific behaviors, skills, or knowledge needed to ensure performance improvement or prepare for success in new responsibilities; planning and supporting the development of individual skills and abilities. ## Description Please note this position is based in our Phoenix, AZ Support Office. The IT Compliance Manager is responsible for ensuring Sprouts' IT systems, policies, and processes adhere to applicable legal, regulatory, and industry standards. This role owns IT compliance frameworks including PCI DSS, NIST CSF, and SOX, regulatory adherence, and continuous improvement across the organization. The ideal candidate is self-directed, takes initiative to identify and resolve inefficiencies, and operates with confidence and accountability. This role serves as a cybersecurity culture champion, helping cultivate an empowered security culture where security awareness is integrated into the fabric of the organization and each team member is equipped to protect information assets. Essential Functions: Team Leadership * May lead/mentor compliance analysts. * Assign and prioritize workload across compliance initiatives, audits, and remediation efforts. * Conduct performance evaluations and support professional growth and certification goals. * Accountable for prioritization of compliance activities and delivery of audit milestones. SOX Compliance (ITGC / IT-Dependent Controls) * Own and continuously refine SOX IT control design, documentation, and operating cadence, including control narratives, evidence expectations, and control owner alignment. * Coordinate SOX audit evidence collection, perform quality review, and provide gap analysis and status reporting to stakeholders. * Drive deficiency and remediation management, including action plan tracking, validation of corrective actions, and audit readiness. * Proactively identify and resolve process inefficiencies in evidence collection and audit workflows. * Deliver SOX evidence packages on time with minimal rework. PCI-DSS Compliance * Coordinate PCI-DSS compliance activities including audit preparedness, evidence management, and cross-functional alignment to maintain PCI-DSS posture. * Maintain PCI-DSS program documentation (policies, standards, and procedures as applicable) and track compliance requirements across IT and security control owners. * Drive PCI-DSS audit readiness and coordinate annual assessments with external QSAs and internal stakeholders. Policy Maintenance, Lifecycle, and Enforcement * Own the information security policy lifecycle (draft, review, approval, publish, attestation, and exception handling) and ensure policies are maintained, communicated, and measurable. * Coordinate policy enforcement mechanisms with technical owners (standards, baselines, procedural controls, and compliance reporting) and maintain audit-ready documentation. Security Awareness and Phishing Simulation Program Ownership * Own enterprise security awareness program strategy, annual plan, and compliance tracking, including completion rates, effectiveness measurement, targeted campaigns, and culture alignment. * Own the phishing simulation and testing program, including scenario design cadence, targeting strategy, results reporting, and continuous improvement actions. Audit and Compliance Program Operations * Coordinate internal and external audits and assessments (SOX, PCI-DSS, NIST-aligned assessments, penetration tests, and targeted control audits), including evidence management and stakeholder coordination. * Build and maintain compliance reporting (dashboards, metrics, KRIs/KPIs, issue tracking) to provide transparency into compliance status, risks, and remediation progress. * Provide gap analysis between security policies, standards, regulations, and actual practices, processes, and solutions. Recommend actions to management and track remediation. * Partner with IT and business partners to prioritize and drive process improvements that remediate or mitigate control gaps and compliance findings. Change Governance / CAB * Coordinate weekly CAB meetings and drive Change Control processes to ensure SOX and security control requirements are met, including documentation, evidence, and audit alignment with existing change control policy. Incident Response Support * Support incident response by advising on compliance and control impact, evidence retention, and audit trail requirements, in partnership with Security Operations., Sprouts Farmers Market offers DailyPay - if you're hired as an eligible employee, you'll be able to transfer the money you've already earned at no extra cost, and get it the next business day, for free. We offer DailyPay so you don't have to wait for payday to access the money you've already worked for. With DailyPay, you can see how much you've made every day and you can transfer your money any time before payday. You can learn more by visiting https://www.dailypay.com/partners/sprouts-farmers-market/. Why Sprouts: Grow with us! If you have a passion for inspiring people and a flair for fresh food, consider applying for a job at Sprouts! With a focus on customer service, our neighborhood grocery stores offer high-quality, farm fresh produce, natural meats, plenty of scoop-your-own bulk goods and much more in a fun, friendly, old-fashioned farmer's market setting. Come grow your career in healthy living with a fast-paced, rapidly growing company and teams that pride themselves on empowering others along their journey. The above statements are intended to describe the general nature and level of the work being performed by people assigned to this work. This is not an exhaustive list of all duties, responsibilities, and requirements. Sprouts' management reserves the right to amend and change duties, responsibilities, and requirements to meet business and organizational needs as necessary. Sprouts will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Chance in Hiring Ordinance. California Residents: We collect information in accordance with California law, please see here for more information. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [How One Developer Built the Back Office for 10 Million Companies](https://www.wearedevelopers.com/videos/100082-how-one-developer-built-the-back-office-for-10-million-companies) - [No Keys for the Robot: GitOps as the Control Plane for Autonomous Agents](https://www.wearedevelopers.com/videos/100095-no-keys-for-the-robot-gitops-as-the-control-plane-for-autonomous-agents) ## Related Articles - [Promotion Interview Questions: How to Answer and Get the Job](https://www.wearedevelopers.com/magazine/413-promotion-interview-questions-how-to-answer-and-get-the-job) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager)