> Markdown version of [/jobs/ext/4207723-senior-pci-security-analyst](https://www.wearedevelopers.com/jobs/ext/4207723-senior-pci-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior PCI Security Analyst

- **Company:** Allianz
- **Location:** Richmond, VA, United States
- **Experience:** Expert
- **Salary:** $66,400.0 - $111,970.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Network Segmentation, PCI Data Security Standards
- **Published:** October 25, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=7298ffe93fc8d147

## About the Role

* Solid understanding of information security control and governance frameworks (ISO 27001, NIST, COBIT)
 * Minimum 3-5 years of direct PCI DSS compliance experience, including assessment coordination and evidence management
 * Previous experience of conducting onsite information security audits
 * Experience working with payment processors, acquiring banks, or card brands
 * Significant information security experience in a regulated environment
 * Experience managing third-party service provider compliance and conducting due diligence reviews

## Description

The role is responsible for maintaining and advancing the organization's PCI DSS compliance posture, coordinating assessment activities, and ensuring the security of cardholder data environments (CDE) across all applicable systems and processes.

What you will do

Information Security (General)

 * Ensures all regulatory, compliance, and internal standards are adhered to
 * Acts as a point of contact to assist the business in ensuring it adheres to the information security group framework and manages any non-compliance
 * Conducts risk assessments during projects and manages reports on residual risks; provides ad-hoc security consultancy on projects, both local and group initiatives
 * Encourages and nurtures effective working relationships across IT, promoting the one team approach both across departments within IT (onshore and offshore) as well as engaging positively with the Business Community in pursuance of total business solutions
 * Ensures that management and staff are made aware of Information Security Policies and Processes relevant to their general working environment and, where necessary, their specific job roles
 * Ensures that management and staff are made aware of and understand the information security risks and associated mitigating controls that have been put in place to address them

PCI DSS Compliance

 * Manages and maintains the organization's PCI DSS compliance program, ensuring adherence to the current PCI DSS standard (v4.0.1)
 * Coordinates and leads the annual PCI DSS Self-Assessment Questionnaire (SAQ) process or Report on Compliance (ROC) activities
 * Defines, documents, and maintains the Cardholder Data Environment (CDE) scope, including network segmentation validation
 * Liaises with Qualified Security Assessors (QSAs) during external assessments and manages remediation of any findings
 * Maintains and updates PCI DSS policies, procedures, and evidence documentation throughout the compliance cycle
 * Conducts quarterly internal vulnerability scans and coordinates with Approved Scanning Vendors (ASVs) for external scans
 * Monitors and ensures compliance with PCI DSS requirements across all 12 requirement domains
 * Manages the PCI DSS compensating controls documentation and ensures controls remain valid and effective
 * Coordinates penetration testing activities in alignment with PCI DSS requirements
 * Tracks and reports on PCI compliance status to senior leadership and relevant governance committees
 * Manages relationships with payment brands, acquiring banks, and third-party service providers regarding PCI compliance obligations
 * Ensures new projects, systems, and vendors that interact with cardholder data are assessed for PCI DSS impact
 * Leads incident response activities related to potential cardholder data breaches in coordination with the broader security team