Compliance and Audit Specialist

Our Flavor — Why Whataburger

Whataburger isn’t just a fast-food burger chain it is where bold leadership starts — and where potential doesn’t just grow, it heats up. Whether you're leading the line or working behind the scenes, this is the place where opportunities stack up, and every day gives you a chance to Make a Difference.

Since 1950, we’ve invested in people who lead with integrity, Serve with Heart, and bring their best flavor to the team. We believe in working together, speaking up, having a little fun, and Winning as One — because great burgers (and great teams) start with the right ingredients. If you're ready — to learn, grow, impact, and Move Forward Boldly — we’ve got your back and your path cooked to perfection.

Your Recipe for Impact — What You’ll Do

As a Compliance and Audit Specialist, you will strengthen Whataburger’s cybersecurity, technology, and regulatory posture by ensuring we meet internal policies, industry standards, and compliance obligations. Your work supports a secure and resilient environment that empowers our restaurants and teams to Make a Difference by protecting our systems and data; Serve with Heart by helping stakeholders understand and implement effective controls; Win as One by collaborating across Technology, Security, Risk, Legal, and business partners; and Move Forward Boldly by driving continuous improvement, audit readiness, and proactive compliance practices across the enterprise

Day-to-Day Ingredients — Responsibilities

As a Compliance and Audit Specialist, you will:

• Prepare and support internal and external audits, coordinating evidence, documentation, and control testing.
• Evaluate IT and security controls, identify gaps, and track remediation through completion.
• Monitor regulatory and industry cybersecurity standards to ensure ongoing compliance.
• Review third‑party and vendor risk materials, including questionnaires and audit attestations.
• Provide clear compliance updates, audit findings, and risk insights to Technology leadership.
• Partner cross‑functionally to align security practices with evolving requirements and operational needs.

The Sauce — Pay & Perks

As a Compliance and Audit Specialist, you will receive:

• Competitive Weekly Pay
• Bonus Program that scales up to 2.5X payout potential based on company results
• 5 weeks PTO
• Flex Weeks
• Paid Corporate Holidays
• Paid Parental Leave*
• 401(k) match $1/$1 up to 4%
• Competitive Medical, Dental and Vision Benefits*
• Short-term and Long-term Disability Benefits*
• Opportunities for Career Development and Growth
• Whataburger Family Foundation - Scholarship Program (dependents eligible) and Hardship Grant Assistance
• Discounted Meals for You and a Guest
• Wireless Service Discounts
• Computer & Software Discounts
• Fitness / Gym Discounts
• Awards and recognition for all you do
• Retirement Celebration Program

What You Bring to the Table — Required Experience

As a Compliance and Audit Specialist, you must have: 

• Working knowledge of cybersecurity governance, risk, and compliance (GRC) concepts.
• Understanding of PCI DSS v4.0 requirements and how to apply them in enterprise IT environments.
• Ability to map regulatory frameworks to administrative and technical controls.
• Skill in identifying control deficiencies, audit findings, and compliance risks.
• Familiarity with security governance tools and platforms that support compliance monitoring.
• Strong written and verbal communication skills for presenting audit results and compliance expectations.
• Proven ability to conduct interviews, facilitate control reviews, and collaborate across IT, Security, Risk, Legal, and business teams.
• 5+ years of relevant professional experience.

Extra Toppings — Desired Experience

As a Compliance and Audit Specialist, we prefer you to have: 

• CISA (Certified Information Systems Auditor).
• CRISC (Certified in Risk and Information Systems Control).
• Experience supporting third‑party risk, cybersecurity governance, or audit programs in large organizations. (Synthesis from required responsibilities)

Where & How You’ll Work

This role is based at the San Antonio Home Office, working on‑site Monday through Thursday with remote flexibility on Fridays. In this role, you’ll have strong collaboration with leadership, across cross-functional teams, and with external partners to align capabilities with restaurant realities. The work environment is fast‑paced and requires sound judgment, strategic thinking, and strong collaboration skills. Full‑time availability is required, with occasional extended hours based on business needs, along with occasional travel to properties, project sites, and external meetings. Candidates must reside within commuting distance of the San Antonio Home Office.

Whataburger is committed to providing equal employment opportunities to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, age, or other condition or status protected by law. Whataburger participates in the federal E-Verify Program. For more information go to www.dhs.gov/E-Verify. E-Verify is a registered trademark of the U.S. Department of Homeland Security.

*Eligibility rules may apply