Card Services Compliance Specialist

Overview

Compensation: $53,000 - $74,000 based on experience and credentials

Location Type:
Hybrid, a flexible work model blending in-office and remote working

Position Type:
Full Time

The Card Services Compliance Specialist is responsible for ensuring the credit union’s debit and credit card programs operate in full compliance with regulatory requirements, card network rules, and PCI standards while supporting a seamless member experience and enabling strategic product growth. This role acts as a key integrator across Card Operations, Member Experience, Fraud, IT, and Product Strategy and Product Enablement teams, ensuring that compliance is embedded into processes, systems, product delivery, and user journeys rather than applied after the fact.

The goal is to ensure that compliance is integrated into the SCU employee experience while protecting the credit union and our members from risk.

• Create, update, and maintain a repository of policies and procedures in alignment with regulatory and business requirements
• Coordinate reviews with First Line Compliance, the Director, and the VP of the Business Unit
• Submit redlined documents and summaries to Second Line Compliance by the designated deadlines
• Develop and maintain documentation for all PCI-related processes, including Reg E, Reg Z, Reg DD, and UDAAP/UDAP considerations, as well as network diagrams, data flow charts, and access controls
• Coordinate internal and external PCI DSS audits, serve as the primary contact for audits, and request attestations
• Provide support to the Director and VP for audits and Third Party Risk (vendor) due diligence
• Evaluate automated systems for compliance, reliability, and performance
• Oversee Quarterly User Reviews and Daily terminations for all Payment systems
• Ensure procedures are enforced and followed consistently across the department
• Collaborate with stakeholders to validate recovery strategies and ensure operational resilience
• Partner with First and Second Line Compliance to update disclosures, training materials, and procedures
• Ensure team members are enrolled in appropriate compliance courses and monitor completion
• Oversee and manage department-level complaints, risk assessments, and RCSA processes
• Initiate and manage Review and Challenge or Risk Acceptance processes
• Serve as the primary contact for audits and examinations conducted by Second Line, Third Line, and external auditors
• Prepare initial exposure analyses and provide timely responses to compliance findings
• Develop and implement action plans to address identified gaps
• Provide feedback on proposed rule changes and assess operational impact
• Update business unit software findings and acknowledge informational letters from the credit union periodically
• Act as the Administrator of PCI, Reg E, Reg Z, Reg DD and UDAAP/UDAP Compliance standards
• Evaluate and monitor third-party vendors for PCI, Reg E, Reg Z, Reg DD, and UDAAP/UDAP compliance, ensuring contracts include requirements and annual attestations are obtained
• Plan annual DR tests, document the annual tests, and update to ensure that payment procedures are accurate in the DR Playbook
• Ensure BCP plans are updated regularly to reflect changes in the department's systems, processes, and risk landscape
• Participate in key industry committees and alliances, including:
  Payment Card Industry Security Standards Council (PCI SSC) and VBN activities pertaining to Reg E and Reg Z, as well as industry updates/standards for UDAAP
• Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise
• Attend educational events to increase professional knowledge
• Complete annual compliance and info security training to understand employees' role in maintaining effective compliance and security programs

• Bachelor's degree in business administration, management, legal discipline, or a related field (A comparable combination of work experience and training may be substituted for the education requirement.)
• Minimum of 4 years of experience with a financial institution in a payment compliance role, to include operational experience in Visa debit or credit cards, with emphasis on PCI compliance
• PCI Professional (PCIP) certification preferred
• Accredited Payment Risk Professional (APRP) certification preferred
• Proven experience with policy and procedure management, compliance, or risk governance
• Strong understanding of regulatory frameworks (Reg E, Reg Z, Reg DD, UDAAP, and operational controls
• Excellent project management and documentation skills
• Ability to translate regulations into practical workflows and collaborate across departments and communicate effectively with stakeholders
• Experience with automated systems and process improvement methodologies
• Familiarity with Fed Line systems, assurance protocols, and BCP/DR planning
• Ability to prioritize tasks by effectively managing competing and changing priorities to meet deadlines
• Accurate, detail-oriented, and organized with task management
• Ability to analyze and…