Lead Info Security Analyst

We are seeking an experienced PCI Technical Engineer to help build, strengthen, and automate a PCI DSS compliance program within a highly regulated financial services environment.

This is a hands-on role for someone who understands PCI DSS at a deep level and has built and matured a PCI program from the ground up. The ideal candidate will have experience defining PCI scope and boundaries, understanding the Cardholder Data Environment (CDE), establishing and validating controls, supporting audits, remediating findings, and continuously improving the program.

This role is also focused on automation and process improvement. We are looking for someone who is a creator and problem solver—someone who sees a manual process and asks, “How can we make this better and automate it?”What You’ll DoBuild, implement, and mature PCI DSS compliance programs from the ground up.

Define and maintain PCI scope and boundaries, including identifying systems, applications, networks, processes, and people that fall within PCI requirements.

Develop a strong understanding of the Cardholder Data Environment (CDE) and how payment card data moves through the environment.

Establish, document, and validate technical and administrative controls required for PCI DSS compliance.

Lead PCI audit preparation, evidence gathering, auditor coordination, remediation, and ongoing compliance activities.

Gather and validate technical artifacts and evidence required to demonstrate compliance.

Identify control gaps and partner with technical teams to develop and implement remediation plans.

Continuously assess and mature the PCI program as the technology environment and business requirements evolve.

Automate PCI evidence collection, control validation, reporting, and other repetitive compliance processes.

Identify opportunities to automate manual GRC and Information Security processes beyond PCI.Develop repeatable processes and solutions that improve efficiency, accuracy, and audit readiness.

Support internal audits and financial services regulatory examinations.

Document technical processes and controls in a clear and accurate manner.

Develop metrics and reporting that communicate compliance, control effectiveness, risk, and remediation status to leadership.

Partner with Information Security, Infrastructure, Application, Risk, Audit, and other technical teams.

Help establish and maintain security policies, standards, procedures, and controls related to PCI and Information Security.