PCI DSS Auditor

Sisainfosec; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Sisainfosec in Bengaluru is seeking a knowledgeable PCI DSS Auditor to join our compliance and information security team. The auditor will plan, execute, and manage PCI DSS assessments to ensure regulatory compliance and strong security controls.

The ideal candidate has 3–5 years of IT auditing experience, expertise in PCI DSS v4.0, and familiarity with NIST/ISO 27001. Certifications like PCI QSA or CISSP are a plus. Strong communication and remediation-tracking skills are essential.

Qualifications

• Bachelor's degree in information security or related field.
• 3–5 years IT auditing, security assessment, or compliance experience.
• In-depth PCI DSS v4.0 knowledge and prior PCI audits.
• Familiarity with NIST and ISO 27001.
• Strong network security, encryption, access control, and vulnerability management.

Responsibilities

• Plan, coordinate, and perform internal and external PCI DSS assessments.
• Conduct risk assessments and gap analyses against PCI DSS requirements.
• Gather evidence and validate compliance with stakeholders across departments.
• Identify non‑compliance and develop recommendations for remediation.
• Prepare formal audit reports and present findings to management.
• Liaise with QSAs and support PCI DSS validation efforts.
• Maintain documentation of security policies, procedures, and controls.
• Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
• Provide training and guidance on PCI DSS requirements and best practices.
• Assist in remediation of audit findings and track progress until closure.

Skills

PCI DSS v4.0 knowledge

Collaboration and Teamwork

Firewall Rule and Configuration review

Server Configuration Review

Communication Skills

Compliance Management

Education

Bachelor's degree in Information Security, Computer Science, Information Systems, or related field

Job description

We are seeking a knowledgeable and detail‑oriented PCI DSS Auditor to join our compliance and information security team. The auditor will be responsible for planning, executing, and managing audits to ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS). The ideal candidate will have deep knowledge of PCI DSS requirements and a strong background in IT security, risk management, and regulatory compliance.

Key Responsibilities

• Plan, coordinate, and perform internal and external PCI DSS assessments.
• Conduct risk assessments and gap analyses against PCI DSS requirements.
• Work with stakeholders across departments to gather evidence and validate compliance.
• Identify areas of non‑compliance and develop recommendations for remediation.
• Prepare formal audit reports and present findings to management.
• Liaise with Qualified Security Assessors (QSAs) and support formal PCI DSS validation efforts.
• Maintain documentation of security policies, procedures, and controls as they relate to PCI DSS.
• Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
• Provide training and guidance to internal teams on PCI DSS requirements and best practices.
• Assist in the remediation of audit findings and track progress until closure.

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field.
• Minimum of 3–5 years of experience in IT auditing, security assessment, or compliance.
• In‑depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits.
• Familiarity with information security frameworks (e.g., NIST, ISO 27001).
• Strong understanding of network security, encryption, access control, and vulnerability management.

Preferred Qualifications

• Certification such as PCI ISA, PCI QSA, CISA, CISSP, or CISM.
• Experience working in regulated industries (e.g., finance, healthcare, e‑commerce).
• Experience with audit tools, GRC platforms, or compliance tracking systems.
• Excellent verbal and written communication skills.

Required Skills

• Collaboration and Teamwork
• Firewall Rule and Configuration review
• Server Configuration Review
• Communication Skills
• Compliance Management