Business Analyst - PCI / Payment Systems

Position Overview

We are seeking a highly analytical and detail-oriented Business Analyst to support a critical enterprise initiative: achieving PCI DSS Level 1 Service Provider compliance through scope reduction, payment flow optimization, and tokenization. This role will partner closely with the PCI Program Director to map, analyze, and redesign how payment data flows through the organization.

Key Responsibilities

• Document end-to-end payment workflows, including:

  • Customer booking and payment processes
  • Internal system interactions (phone system, back-office)
  • Third-party integrations (e.g., payment gateways, GDS, vendors)

• Identify where cardholder data (PAN) is:

  • Collected
  • Processed
  • Stored
  • Transmitted

• Develop and maintain:

  • Data flow diagrams
  • System interaction maps
  • Process documentation aligned to PCI scope requirements

• Support Analyze payment and data flows to identify opportunities to reduce PCI scope

• Partner with Security, Operations and Finance teams to:

  • Eliminate unnecessary PAN handling
  • Support segmentation strategies
  • Enable system isolation and scope containment
  • Ensure all scope-related documentation is accurate, complete, and defensible for audit

• Support tokenization & payment process redesign

  • Mapping current vs. future-state payment flows
  • Identifying systems and processes impacted by tokenization
  • Working with Product and Operations teams to redesign workflows to remove PAN from internal systems
  • Eliminate manual or legacy payment handling processes
  • Documenting business and system changes required to support tokenization initiatives

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field or equivalent experience.

• 4+ years of experience as a Business Analyst, preferably in complex system environments

• Proven experience mapping end-to-end business processes and system workflows

• Strong experience working with:

  • Payment systems, financial transactions, or e-commerce platforms

• Demonstrated ability to analyze and document data flows across multiple systems

• Experience translating business needs into technical requirements

Preferred Qualifications

• Experience in PCI DSS environments or supporting compliance initiatives

• Familiarity with:

  • Payment gateways and processors
  • Tokenization concepts and implementations

• Experience in travel, hospitality, or high-volume transaction environments

• Experience working with distributed systems and third-party integrations

Benefits

Onboard In addition to Medical, Dental, and Vision benefits Direct Travel offers an employee rewards and recognitions program, Total Rewards Package which includes Wellness, Sustainability, DE&I initiatives, and Mental Health Support.

About Direct Travel

Direct Travel is a leading provider of corporate travel management services. The company has been providing travel management for over 40 years, working with clients to develop highly customized travel programs. By leveraging both the expertise of its people and innovative solutions, Direct Travel enables clients to derive the greatest value from their travel program in terms of superior service, progressive technologies and significant cost savings. Direct Travel has offices in over 70 locations across North America and the UK and is currently ranked 12th on Travel Weekly’s Power List.

Equal Opportunity Employer

Direct Travel is an EOE/AA/Veteran/People with Disabilities employer