Security Assurance & Compliance Snr Lead (PCI)

Mars; Guararema; Presencial; BRL 300 000 - 540 000; Tempo integral

Resumo da oferta

Mars seeks a Senior PCI Compliance professional to safeguard our global payment systems. You will lead end-to-end PCI DSS assessments across cardholder environments, ensuring attestations and ongoing BAU compliance.

You will manage relationships with QSAs and drive the PCI program using Archer as the single source of truth. You will guide cross-functional teams to build secure payment solutions, educate on PCI best practices, and onboard acquisitions into Mars' PCI framework, driving continuous

Responsabilidades

• Lead end-to-end PCI DSS assessments, from scoping the cardholder data environment to final attestation, ensuring annual compliance and re-attestation for BAU activities.
• Manage relationships with third-party QSAs for Level 1 PCI assessments, ROC, gap analyses, and ASV scans.
• Serve as the lead technical expert on PCI compliance, guiding business and development teams to engineer secure, low-friction payment solutions.
• Own and advance the enterprise-wide PCI awareness and education program for all associates involved in card payment processes.
• Drive the strategic use of Archer as the single source of truth for PCI compliance, managing assessment data and evidence within the platform.
• Lead the integration of newly acquired businesses into Mars PCI Compliance program, ensuring timely initial attestations.
• Continuously mature the PCI program by improving testing methodologies, reporting, and overall efficiency.

Descrição da oferta de emprego

Job Description

This position is part of a team at the forefront of securing Mars' global payment systems. In this critical role, you will be instrumental in ensuring Payment Card Industry (PCI) compliance across all Cardholder Data Environments (CDEs) worldwide. This multifaceted position involves both leading PCI audits to deliver attestations of compliance and acting as a key subject matter expert. You will leverage your expertise to advise and influence new projects, guiding them to achieve and maintain robust PCI compliance from inception

Job Description

This position is part of a team at the forefront of securing Mars' global payment systems. In this critical role, you will be instrumental in ensuring Payment Card Industry (PCI) compliance across all Cardholder Data Environments (CDEs) worldwide. This multifaceted position involves both leading PCI audits to deliver attestations of compliance and acting as a key subject matter expert. You will leverage your expertise to advise and influence new projects, guiding them to achieve and maintain robust PCI compliance from inception. In this unique role, you will manage stakeholders across every segment and region, including MVH, SDX and new acquisitions.

What will be your key responsibilities?

• Lead end-to-end PCI DSS assessments, from initial scoping of the cardholder data environment (CDE) to final attestation, ensuring annual compliance and re-attestation for all business-as-usual (BAU) activities. Collaborate with key stakeholders, including CFOs and Mars Treasury, to collect evidence and secure the final Attestation of Compliance (AOC).
• Manage relationships with third-party Qualified Security Assessors (QSAs) for Level 1 PCI assessments, overseeing the annual Report on Compliance (ROC), gap analyses, and quarterly Authorized Scanning Vendor (ASV) scans.
• Serve as the lead technical expert on PCI compliance, guiding business and development teams to engineer secure, low-friction payment solutions that minimize compliance overhead.
• Own and advance the enterprise-wide PCI awareness and education program for all associates involved in card payment processes.
• Drive the strategic use of Archer as the single source of truth for PCI compliance, managing all assessment data and evidence within the platform and partnering with the GRC team on enhancements.
• Lead the integration of newly acquired businesses into the Mars PCI Compliance program, ensuring timely and successful completion of their initial compliance attestations.
• Continuously mature the PCI program by identifying and implementing improvements to testing methodologies, compliance reporting, and overall program efficiency.

Scope

• As a critical Individual Contributor within our Global PCI Compliance team, you will partner directly with business teams, Mars Treasury, and CFOs across our segments to drive and execute annual PCI DSS assessments. In this highly visible role, you will perform technical scoping, collect vital compliance evidence, and leverage Archer as our enterprise single source of truth. Additionally, you will act as a trusted advisor, educating and training project teams to design PCI-compliant solutions from the ground up.
• Strategic Stakeholder Collaboration: Partner closely with business units, Mars Treasury, and segment CFOs to fulfill complex annual regulatory PCI assessment requirements.
• Assessments & Scoping: Conduct end-to-end PCI scoping and technical assessments; gather, validate, and maintain evidence files within Archer to preserve our single source of truth.
• Metrics & Reporting: Develop, track, and visualize compliance metrics and trend analyses to clearly communicate Mars Inc.'s PCI posture to executive leadership.
• Enablement & Training: Deliver proactive education, guidelines, and training to global project teams onboarding new initiatives within PCI scope.

#TBdigital