Project Manager – PCI DSS

Barclay Simpson; London; Hybrid; GBP 50,000 - 90,000; Full time

Job description

PCI DSS Project Manager required to lead and manage an online retailer's PCI DSS recertification process. The successful candidate will be responsible for overseeing the entire recertification project, including planning, execution, monitoring, and closure. The ideal candidate will have a strong technical understanding of PCI DSS requirements and extensive project management experience, with a proven track record of successfully managing complex, compliance-focused projects in highly regulated environments.

Key Responsibilities:

1. Project Leadership & Management: Lead and manage the PCI DSS recertification project, ensuring all activities are completed on time, within scope, and in alignment with PCI DSS standards.
2. Cross-functional Collaboration: Work closely with internal stakeholders, including IT, security, legal, compliance, and business units, to ensure alignment on goals, timelines, and resource allocation.
3. Compliance Management: Oversee the analysis of current systems, processes, and controls to identify any gaps in PCI DSS compliance and coordinate remediation efforts.
4. Vendor and External Coordination: Collaborate with external vendors, Qualified Security Assessors (QSA), and auditors to ensure compliance requirements are met and the recertification process progresses smoothly.
5. Risk Management: Identify potential risks to PCI DSS compliance, develop mitigation plans, and escalate issues as necessary to keep the project on track.
6. Documentation & Reporting: Maintain detailed project documentation, including risk logs, project schedules, progress reports, and compliance evidence. Provide regular updates to senior management and key stakeholders.
7. Training and Awareness: Ensure that relevant teams are trained on PCI DSS requirements and help promote awareness across the organization.
8. Resource Management: Oversee the allocation and utilization of resources required for the recertification, ensuring that teams are appropriately staffed and have the necessary tools and support.
9. Continuous Improvement: Monitor industry trends and best practices related to PCI DSS compliance and suggest improvements to internal processes to strengthen security and compliance for future audits.

Key Qualifications:

1. Project Management Certification: PMP, Prince2, or similar project management certification.
2. PCI DSS Experience: In-depth understanding of PCI DSS standards with experience managing PCI DSS compliance and recertification projects.
3. Technical Understanding: Strong technical knowledge of IT security, infrastructure, and compliance, with the ability to bridge the gap between technical teams and business leaders.
4. Project Management Experience: A minimum of [X] years of project management experience, with at least [X] years focused on compliance-related projects (preferably PCI DSS).
5. Cross-functional Leadership: Proven experience leading cross-functional teams, including IT, security, legal, and operations, to ensure alignment and drive project success.
6. Risk & Issue Management: Demonstrated ability to manage risks and resolve issues effectively, maintaining project timelines and ensuring regulatory compliance.
7. Communication Skills: Excellent verbal and written communication skills, with the ability to present complex technical information to both technical and non-technical stakeholders.
8. Problem Solving: Strong analytical and problem-solving abilities, with a proven track record of navigating complex compliance challenges.