> Markdown version of [/jobs/ext/4705875-it-grc-analyst-pci-internal-security-assessor-hybrid](https://www.wearedevelopers.com/jobs/ext/4705875-it-grc-analyst-pci-internal-security-assessor-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT GRC Analyst (PCI INTERNAL SECURITY ASSESSOR)-HYBRID

- **Company:** State Farm Insurance
- **Location:** Atlanta, GA, United States
- **Experience:** Expert
- **Salary:** $97,000 - $125,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Authentication Protocols, Microsoft Azure, CompTIA Security+, Cyber Security, Information Systems, Data Security, IT Management, Industry Standard Architecture, Network Segmentation, OAuth, OpenID, PCI Data Security Standards, Systems Development Life Cycle, Security Assertion Markup Language (SAML), Software Engineering, Tokenization, Data Logging, Information Technology, Servicenow
- **Published:** November 13, 2026
- **Apply:** https://www.careerbuilder.com/job-details/it-grc-analyst-pci-internal-security-assessor-hybrid-dunwoody-ga--90e981d7-3605-4016-ae7a-f94c869ebedc

## About the Role

Information Technology & Information Systems, PCI, Analysis Skills, Customer Experience, ISA Standards, Information Technology & Information Systems, Analysis Skills, PCI, PCI-DSS, Systems Maintenance, We Are Seeking Candidates With:

 * Five years of experience in IT and/or information security, preferably with a background in IT risk and compliance and information security best practices.
 * Experience supporting or participating in assessments or audits involving IT governance, regulatory, or compliance requirements.
 * Experience using or building workflows in ServiceNow.
 * Experience using artificial intelligence tools.
 * Intermediate experience in at least three of the following areas, * Current or previous certification in one or more of the following: Security+, CISSP, GSEC, AWS Cloud Practitioner, AWS Solutions Architect - Associate, a Microsoft Azure certification, CISA, CISM, CRISC, PCI ISA, QSA, or PCIP.
 * Demonstrated ability to work independently and deliver results in a fast-paced, complex, and changing environment.
 * Strong communication skills and experience contributing both independently and as part of a team across multiple business functions.

## Description

We are seeking an experienced IT GRC Analyst (PCI Internal Security Assessor) to work on a team of 12 Payment Card Industry Internal Security Assessors (PCI ISA). This role is responsible for assessing, validating, and delivering the Payment Card Industry Data Security Standard (PCI DSS) compliance of people, processes, and technologies for the Cardholder Data Environment at State Farm.

Some Responsibilities May Include:

 * Apply established PCI DSS scoping criteria.
 * Collect and review evidence to validate compliance with PCI DSS requirements.
 * Support the preparation of the annual PCI DSS Report on Compliance (ROC).
 * Drive IT system and process updates aligned with PCI DSS scope and requirements.
 * Facilitate collaboration among business partners, product teams, and the PCI Compliance & Consulting team.
 * Advise on moderately complex PCI DSS compliance matters.
 * Build strong working relationships with business, information security, and technology product teams.
 * Stay current on evolving security, technology, governance, risk, and compliance topics through formal training and independent learning.
 * Share knowledge and experience through ongoing team training and mentoring.
 * Obtain the PCI Security Standards Council (PCI SSC) sponsored PCI Internal Security Assessor (PCI ISA) certification within six months of effective start date in the role., + Infrastructure, including AWS and Azure cloud environments
 + Network segmentation
 + Artificial intelligence
 + Tokenization
 + Secure system development
 + Software development lifecycle
 + Modern authentication protocols, such as OIDC, FIDO2, OAuth 2.0, and SAML 2.0
 + Penetration testing
 + Reviewing and managing internal and external scan results
 + Logging
 + Information security policy
 * Strong analytical, collaboration, and communication skills, with the ability to present solutions verbally and in writing and help business partners and stakeholders remediate compliance issues.
 * Intermediate knowledge of PCI DSS and security frameworks, including the requirements for protecting customers' payment card data.
 * Ability to identify and resolve complex issues involving customer channels, use cases, cardholder data, and applicable PCI DSS requirements.