> Markdown version of [/jobs/ext/4281190-pci-dss-compliance-senior-analyst](https://www.wearedevelopers.com/jobs/ext/4281190-pci-dss-compliance-senior-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PCI DSS Compliance - Senior Analyst - **Company:** BP Plc - **Location:** Chicago, IL, United States (Remote available) - **Experience:** Expert - **Salary:** $112,000.0 - $208,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Data Analysis, Computing Platforms, Business Process Modeling, Cloud Computing, Configuration Management, Cyber Security, Information Systems, Data Architecture, Data Security, Identity and Access Management, Network Diagrams, Network Segmentation, PCI Data Security Standards, Software Vulnerability Management, Data Logging, Information Technology, Data Management - **Published:** October 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e479c8f65932d852 ## About the Role * Bachelor's degree in Information Security, Information Technology, Cybersecurity or related field. * One or more Information Security / compliance related certifications are preferred, such as Certified Information Systems Security Practitioner (CISSP), Certified Information Systems Auditor (CISA), Procurement Card Industry Internal Security Assessor (PCI ISA), PCI Professional (PCIP), Certified Information Security Manager (CISM). * Practical knowledge of PCI DSS requirements. * Practical knowledge of governance, risk, and compliance (GRC) platforms. * Familiarity with security processes such as Vulnerability management, Access management, Logging and monitoring, Encryption technologies, Network segmentation, Security incident management. * Understanding of security frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS., * 2 or more years of experience in PCI or other regulatory IT compliance, information security efforts. * Experience in financial services, payments, retail, healthcare, or other regulated industries. * Experience in a similar governance, risk and compliance role for a large-scale organization. Equivalent combination of education and experience will be considered sufficient., * Excellent verbal and written communication skills; understands current challenges and propose a solution concisely to convince the audience. * Excellent teamwork skills; adds value to the team and obtains help from others. * Initiative and follow through; navigating through different non-ideal scenarios, drives consistent progress through them; overcomes obstacles and drives problems to a closure. * Strong analytical and problem-solving skills. * Audit and compliance mindset. * Ability to manage multiple priorities and deadlines., Consulting, incident investigation and response, Incident Management, Information Assurance, Information Security, Information security behaviour change, Risk Management, Stakeholder Management, Supplier Relationship Management, Supplier security management., Agility core practices, Agility core practices, API and platform design, Benefits Management, Business Analysis, Business modelling, Client Counseling, Cloud Platforms, Configuration management and release, Data Analysis, Data design, Data Management, Demand Management, Design Thinking, Dialogue enablement, Digital Innovation, Digital Product Management, Employee Experience, Empowering Others, Facilitation, Influencing, Long Term Planning, Managing change, Marketing strategy, Measurement and metrics {+ 5 more} ## Description As the PCI Compliance Analyst for North America, you will be responsible for supporting and maintaining the organization's Payment Card Industry Data Security Standard (PCI DSS) compliance program. You will work closely with business units, the Technology digital delivery team, the digital security team, and with external assessors to ensure compliance with PCI DSS requirements, identify and remediate control gaps, and reduce payment card data security risks. You will coordinate compliance activities, supervise control effectiveness, handle evidence collection, support audits and assessments, and provide guidance to collaborators regarding PCI security requirements and guidelines., * Support the organization's PCI DSS compliance program and annual assessment activities. * Drive up to date PCI DSS documentation, including alignment with the company digital security policy and procedures and promotion of responsibility matrices. * Assist with creation and maintenance of PCI scope documentation, network diagrams, and data flow diagrams. * Perform ongoing PCI compliance governance reviews across business, technology, and security teams. * Working with other members of the office, supervise changes to PCI DSS requirements and assess organizational impact. * Identify compliance gaps and recommend corrective actions. * Supervise remediation efforts and validate closure of compliance findings. Assessment & Audit Support * Coordinate the collection and validation of evidence required for PCI assessments. * Prepare documentation for Qualified Security Assessor (QSA) reviews, Self-Assessment- Questionnaires, and internal audits. Customer Engagement * Partner with the digital Security, the infrastructure, the technology, and Operational teams to ensure PCI requirements are integrated into business processes. * Provide guidance and interpretation of PCI DSS requirements to customers. * Facilitate compliance meetings and communicate compliance status to management. * Assist in developing awareness and training initiatives related to PCI compliance. Reporting & Metrics * Develop and maintain PCI compliance dashboards and reports. * Report compliance metrics, remediation status, and emerging risks to your leadership. * Maintain accurate records to support regulatory and compliance requirements., The PCI Compliance Analyst will be successful when: * PCI assessments are completed on schedule. * Compliance findings are tracked and remediated effectively. * Audit requests are fulfilled accurately and timely. * PCI scope documentation remains current and complete. * Compliance risks are identified and addressed proactively. * Business and technology teams demonstrate sustained adherence to PCI DSS requirements.