Cybersecurity PCI Compliance Advisor

About the role

This role requires associates to be in-office 1–2 days per week fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Responsibilities

• Provide first-level engineering design functions and trouble resolution.
• Serve as point of technical escalation on complex problems.
• Support PCI governance activities, including maintenance of PCI policies, standards, procedures, control matrices, evidence repositories, assessment schedules, risk registers, and compliance dashboards.
• Evaluate third-party service provider PCI responsibilities, including review of AOCs, responsibility matrices, shared responsibility documentation, contracts, service descriptions, and supporting security evidence.
• Develop testing plans to ensure quality of implementation.
• Support internal and external audit activities related to PCI DSS, HIPAA, HITRUST, SOC 2, NIST, and other cybersecurity or regulatory compliance requirements.
• Provide system and network architecture support for information and network security technologies.
• Provide technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
• Maintain security incident response plans.
• Represent major upgrades and business system replacements in change control.
• Design and engineer repetitive technical solutions based on business requirements and defined technology standards.
• Develop support procedures and performance metrics reports.
• Lead level 1 & 2 incident recoveries; may organize the efforts of other analysts as part of incident recovery.
• Mentor analysts and control owners by providing guidance on PCI evidence quality, control interpretation, assessment documentation, remediation planning, and stakeholder communication.
• Contribute to continuous improvement of PCI compliance processes, templates, workflows, reporting, evidence management, automation opportunities, and program maturity initiatives.
• Use AI-enabled tools and emerging technologies responsibly to improve productivity, research, documentation quality, control analysis, workflow efficiency, reporting, and decision support while maintaining data protection, confidentiality, and compliance requirements.

Requirements

• Bachelor’s degree in Information Technology or related field and a minimum of 5 years of experience in systems support, system administration, system engineering, system security, access management, network security, network communications, computer networking, telecommunications, systems development and management, hardware, software, and/or data; or any combination of education and experience providing an equivalent background.

Qualifications

• Experience in planning and designing highly complex systems.
• Experience with multiple technical and business disciplines strongly preferred.
• Security certifications such as CISSP or other technical security certifications (e.g., Systems Security Certified Practitioner, Certification and Accreditation Professional) strongly preferred.
• Bachelor’s degree in cybersecurity, information systems, computer science, risk management, business, audit, or a related field; or equivalent combination of education, training, and work experience.
• 5+ years of experience in cybersecurity, PCI compliance, IT audit, GRC, technology risk management, information security, regulatory compliance, or a related field.
• Experience using GRC, workflow, ticketing, audit management, or evidence management tools.
• Active or prior PCI Internal Security Assessor (ISA) certification or PCI Qualified Security Assessor (QSA) certification.
• Familiarity with PCI-related standards and guidance, including PCI DSS, PCI 3DS, PCI P2PE, PCI PIN Security, PCI Secure Software Standard, PCI SSF, and PCI SSC guidance documents.