About the role
Key Responsibilities:
- Plan, coordinate, and perform internal and external PCI DSS assessments.
- Conduct risk assessments and gap analyses against PCI DSS requirements.
- Work with stakeholders across departments to gather evidence and validate compliance.
- Identify areas of non-compliance and develop recommendations for remediation.
- Prepare formal audit reports and present findings to management.
- Liaise with Qualified Security Assessors (QSAs) and support formal PCI DSS validation efforts.
- Maintain documentation of security policies, procedures, and controls as they relate to PCI DSS.
- Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
- Provide training and guidance to internal teams on PCI DSS requirements and best practices.
- Assist in the remediation of audit findings and track progress until closure.
Required Qualifications:
- Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field.
- Minimum of 3–4 years of experience in IT auditing, security assessment, or compliance.
- In-depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits.
- Familiarity with information security frameworks (e.g., NIST, ISO 27001).
- Strong understanding of network security, encryption, access control, and vulnerability management.
Preferred Qualifications:
- Certification such as PCI ISA, PCI QSA, CISA, CISSP, or CISM.
- Experience working in regulated industries (e.g., finance, healthcare, e-commerce).
- Experience with audit tools, GRC platforms, or compliance tracking systems.
- Excellent verbal and written communication skills.