Kwik Trip’s IT Department has an opening for an Information Compliance Analyst.

Location: La Crosse Support Center | Onsite with Hybrid opportunity

What you’ll be doing…

As an Information Compliance Analyst, you’ll provide strategic oversight for Kwik Trip’s IT Governance, Risk, and Compliance (GRC) functions. You’ll ensure our IT operations align with regulatory requirements, internal policies, and business objectives. This role is ideal for someone with deep knowledge of compliance frameworks, strong documentation skills, and the ability to lead incident response and risk mitigation efforts.

Key Responsibilities:

Maintain PCI compliance and coordinate annual audits with external QSAs
Oversee daily IT compliance operations across privacy, accessibility, cybersecurity, and risk management frameworks
Conduct internal audits and develop mitigation strategies for identified risks
Write and maintain IT policies and procedures
Research and track state and federal privacy regulations
Create and communicate strategic roadmaps for compliance milestones
Perform detailed risk assessments, evaluating third-party security policies, procedures, and controls for compliance
Deliver security awareness and compliance training across departments
Lead response efforts for compliance incidents and collaborate on resolution strategies
Ensure all risks are entered into and maintained within the Governance, Risk and Compliance (GRC) tool
Identify and document risks, proposing mitigation strategies and coordinating with teams to address gaps
Prepare reports and summaries for internal stakeholders to inform decision-making
Execute, mature and scale the Vulnerability Management Program

You’ll need to have…

Associate degree in Information Technology, Cybersecurity, or a related field
4 to 6 years of experience in IT compliance, risk management, or audit

Even better if you have…

Certifications such as CRISC, CISA, GRCP, PCIP, CIPM, or CISSP
Strong knowledge of PCI-DSS, CIS, ADA, and privacy compliance requirements
Excellent communication and documentation skills
Proven problem-solving and project management abilities
Ability to adapt to changing regulatory environments and respond quickly to incidents
Experience working as an Analyst or Engineer in a GRC focused function
Understanding of security and technology concepts
Familiarity with Vulnerability Management concepts and best practices

Work Schedule:

Monday through Friday, daytime hours. Work Location is onsite; however will be able to work a hybrid model

Kwik Trip, Inc.

New Jobs

Information Compliance Analyst