PCI DSS Compliance Analyst

PCI DSS Compliance Analyst

Insight Global is seeking a PCI DSS Compliance Analyst for a remote contract opportunity based in the Louisville, KY area. This individual will lead the organization's transition to PCI DSS v4.0, ensuring alignment with current and upcoming 2025 requirements. They will partner closely with Qualified Security Assessors (QSAs) to support PCI audits, including ROC, AOC, and SAQ-D efforts, while managing audit evidence, documentation, and control validation.

The analyst will conduct gap assessments within the cardholder data environment (CDE), develop and track remediation plans, and validate the effectiveness of implemented controls across IAM, network security, encryption, logging, and vulnerability management domains. Additionally, they will collaborate with infrastructure, application, and security teams to operationalize PCI controls and ensure continuous compliance. The role will also include performing targeted risk analyses, maintaining PCI-specific documentation (e.g., data flow diagrams, policies, procedures), and delivering security awareness training aligned to PCI requirements, while supporting broader compliance initiatives as needed.