Sr Compliance Specialist - Security

Job-:
Rocklin, CA, United States

Schedule:

Full time, Day Posted:
About the Team Security Compliance helps to demonstrate the sustained compliance of the company with requirements for the protection of its high value systems and information assets. The scope of work extends across the corporate environment and its consumer delivery channels and it addresses legal requirements and industry standards such as PCIDSS, SOX, ISO, HIPAA, CA1386, and GDPR.About the Role The Sr Compliance Specialist - Security plays a lead role in this activity.

The Specialist supports periodic updates to policies, standards and awareness materials, and is responsible for ongoing validation that key controls are implemented in a sound and sustained manner. The Specialist may identify potential security exceptions, help to resolve business requirements, escalate matters requiring management attention, and oversee timely and effective remediation of vulnerabilities in the security of company information. The Specialist also will be responsible for providing execution support to development teams and operations groups in performing risk assessments, due diligence activities, data management, ongoing oversight, and reporting related to their ongoing compliance with polices and technical standards.

The current role will focus on conducting internal PCI-DSS assessments in addition to assisting all business units and functional teams in-scope for external PCI-DSS compliance validation. The ideal candidate will demonstrate industry experience around compliance with PCI-DSS and related standards and will have excellent analytical skills with ability to identify non-compliant issues and ensure remediation of non-compliance using industry standard methodologies.

You will assist in defining scope of the compliance assessment, ensure the intent of the PCI requirements are being adhered to, develop internal associates through PCI DSS educational opportunities and provide direct and specific mentorship to cultivate an efficient, innovative, and collaborative work environment. You will maintain productive, informative, working relationships with technical and management staff at all levels of the organization.

Responsibilities Plan, conduct and establish remediation plans for PCI Assessments.

Actively engage business units at pre-determined times frame to provide a summary analysis of each business units compliance posture at checkpoints throughout the year.

Identify and recommend changes in procedures, processes and scope of delivery needed to demonstrate sustained compliance with PCI requirements.

Assist with PCI-DSS compliance checklists including review and validation of existing controls, documentation and any potential gaps.

Provide management guidance and expertise for all PCI gaps and help to prioritize remediation targets.

Reduce demand on resource Owners for evidence collection and analysis via use of GRC and related security tools.

Reduce the company’s overall PCI-DSS scope where possible via taking lead on remote scoping practices and procedures.

Provide remediation guidance to technical teams to establish and maintain sustained compliance with PCI-DSS.Provide long-term cost-effective remediation solutions/recommendations to address systemic issues or gaps that potentially risk corporate PCI-DSS Compliance.

CriteriaBA/BS or equivalent experience, with 7+ years’ experience gained in the information security fieldCISSP, CISM, CISA or similar certification [e.g., GIAC Certified ISO-17799 Specialist (G7799)]5+ years’ experience in a PCI support role or engineering position experience required

Extensive knowledge and experience with information security standards and methodologies, including the PCIDSS, ISO 9000 series, COBIT,…