Sr. PCI Compliance Analyst ( GRC Analyst)

The Senior Payment Card Industry (PCI) Compliance Analyst, Governance & Risk, leads compliance assessments and strengthens information security controls across technology environments. This role partners with IT and security teams to identify risk, evaluate evidence, and support regulatory compliance. Your impact: Clear, actionable risk findings help teams protect payment data and make informed security decisions.T

Essential Functions

• Strong knowledge and experience developing PCI compliance programs from “bottom up”
• Experience leading GRC and PCI specific programs, including functioning as the “Voice of PCI compliance” program.
• Coordinate PCI assessments, IT compliance audits, internal audits, and IT control testing; document findings and track remediation.
• Work directly with Finance and executive leadership to define the program and guard rails
• Internally assess, evaluate, and make recommendations to management regarding the adequacy of
• security controls for information and technology systems.
• Support the development and implementation of the system-wide risk management function of the information security program to ensure security risks are identified and monitored.
• Conducts information security assessments of suppliers (third party vendors and cloud services) including advising management on how to mitigate any identified risks.
• Performs third party compliance with risk tracking, trending, analysis, and executive reporting

• 6 - 9 years of experience working in information security, risk management and compliance.
• 6+ years of work experience with Payment Card Industry Data Security Standard (PCI DSS)
• 6+ years of work experience with Compliance PCI
• 6 + years of experience with IT auditing and risk analysis.
• Understanding of common security standards and regulations (e.g., PCI DSS, SOX, SOC1, SOC2, ITGC, ISO2700x, etc.).
• 3+years managing security awareness training, testing and reporting
• Strong knowledge of and experience in developing and implementing data governance policies, procedures, frameworks, and industry best practices.

Education

• Bachelor’s degree in business, Information Management, Computer Science, Data Analytics or a related field is required.
• CISA, CISM, CRISC, CISSP, PCIP or any combination preferred, * PCI Compliance & Governance: 6 years (Required)

• 401(k)
• 401(k) matching
• Dental insurance
• Employee discount
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Tuition reimbursement
• Vision insurance