Sr Security Compliance Specialist

The current role will focus on conducting internal PCI-DSS assessments in

addition to assisting all business units and functional teams in-scope for

external PCI-DSS compliance validation. The ideal candidate will demonstrate

industry experience around compliance with PCI-DSS and related standards and

will have excellent analytical skills with ability to identify non-compliant

issues and ensure remediation of non-compliance using industry standard

methodologies. You will assist in defining scope of the compliance

assessment, ensure the intent of the PCI requirements are being adhered to,

develop internal associates through PCI DSS educational opportunities and

provide direct and specific mentorship to cultivate an efficient, innovative,

and collaborative work environment. You will maintain productive,

informative, working relationships with technical and management staff at all

levels of the organization.

 

 

to Day Overview •Plan, conduct and establish remediation plans for PCI

Assessments.

Actively engage business units at pre-determined times frame to provide a summary

analysis of each business units compliance posture at checkpoints throughout

the year.

Identify and recommend changes in procedures, processes and scope of delivery needed

to demonstrate sustained compliance with PCI requirements.

Assist with PCI-DSS compliance checklists including review and validation of

existing controls, documentation and any potential gaps.

Provide management guidance and expertise for all PCI gaps and help to prioritize

remediation targets.

Reduce demand on resource Owners for evidence collection and analysis via use of GRC

and related security tools.

Reduce the company's overall PCI-DSS scope where possible via taking lead on remote

scoping practices and procedures.

Provide remediation guidance to technical teams to establish and maintain sustained

compliance with PCI-DSS.

Provide long-term cost-effective remediation solutions/recommendations to address

systemic issues or gaps that potentially risk corporate PCI-DSS Compliance.

 

Top Requirements

(Must haves)

•BA/BS

or equivalent experience, with 7+ years' experience gained in the information security field

•CISSP,

CISM, CISA or similar certification [e.g., GIAC Certified ISO-17799 Specialist (G7799)]

•5+ years' experience in a PCI support role or engineering position experience required

•Extensive knowledge and experience with information security standards and methodologies, including the PCIDSS, ISO 9000 series, COBIT, Sarbanes Oxley, HIPAA, and other relevant industry security standards, and an in-depth knowledge of risk assessment and risk analysis

•QSA or ISA strongly preferred

 

Additional Qualifications

•Experience

in an enterprise-class Technology organization, working with large scale Distributed Systems environments

•Excellent written and verbal communications skills

•Leadership role in previous job experience

•Results oriented, self-motivated

•Experience working with, and ideally writing, information security policies and

standards and/or developing or implementing security-related tools

•Understand information security holistically and how it relates to business goals

•Excellent written, oral, and interpersonal communications skills with proven ability to

champion causes with positive impact and change

•Ability to design, implement, reengineer and manage complex processes.

•Privacy Certification (e.g., Certified Information Privacy Professional)

•Experience interfacing with and communicating information on complex privacy and security compliance issues to senior management and business units and external parties

•Experience presenting IT security issues to large audiences, forums, or communities

•Experience working within the retail sector