SISA Information Security - PCI-DSS Auditor

SISA; Bengaluru Urban; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

SISA in Bengaluru, India is seeking an experienced PCI DSS Auditor to join our Information Security team. You will plan, coordinate, and execute internal and external PCI DSS v4.0 assessments to ensure compliance across the cardholder data environment.

You will work with IT, Security, and business stakeholders to collect evidence, validate controls, prepare audit reports, present findings to senior management, and drive remediation.

Qualifications

• Bachelor's degree in information security, computer science, information systems, or related field.
• 35 years of experience in IT auditing, cybersecurity, risk management, or compliance.
• Strong hands-on experience with PCI DSS v4.0 assessments and audit methodologies.
• Familiarity with NIST, ISO 27001, and CIS Controls.
• Solid understanding of network security, encryption, IAM, vulnerability management, and governance.
• Excellent analytical and stakeholder management skills.

Responsibilities

• Plan, coordinate, and execute internal and external PCI DSS assessments to ensure v4.0 compliance.
• Conduct risk assessments and gap analyses across the cardholder data environment.
• Prepare detailed audit reports and present findings to senior management; track remediation to closure.
• Coordinate with QSAs during certification and validation exercises.
• Maintain and update PCI DSS policies, procedures, and control documentation; provide awareness sessions.

Skills

PCI DSS v4.0

Auditing

Risk assessment

NIST

Education

Bachelor's degree in IS/CS

Tools

Audit methodologies

Job description

Job Title : PCI DSS Auditor

We are looking for an experienced and detail-oriented PCI DSS Auditor to join our Information Security team.

• The ideal candidate will be responsible for planning, coordinating, and executing internal and external PCI DSS assessments to ensure compliance with PCI DSS v4.0 standards.
• The role involves conducting comprehensive risk assessments, performing gap analyses, evaluating security controls, and identifying areas of non-compliance across the organization's cardholder data environment.
• The PCI DSS Auditor will work closely with cross-functional teams, including IT, Security, Infrastructure, and Business stakeholders, to collect audit evidence, validate technical and administrative controls, and recommend practical remediation plans.
• The candidate will prepare detailed audit reports, present findings and risk assessments to senior management, and support remediation activities by tracking corrective actions through to successful closure.
• The role also requires close coordination with Qualified Security Assessors (QSAs) during formal PCI DSS certification and validation exercises.
• Additionally, the successful candidate will maintain and update security policies, procedures, standards, and control documentation related to PCI DSS compliance.
• They will stay informed about changes to PCI DSS requirements, emerging security threats, and industry best practices, ensuring the organization remains compliant and audit-ready.
• The role also includes conducting awareness sessions and providing guidance to internal teams on PCI DSS controls and compliance obligations.

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field.
• 35 years of experience in IT auditing, cybersecurity, risk management, or compliance.
• Strong hands-on experience with PCI DSS v4.0 assessments and audit methodologies.
• Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls.
• Solid understanding of network security, encryption, identity and access management, vulnerability management, and security governance.
• Excellent analytical, communication, documentation, and stakeholder management skills.

(ref:hirist.tech)