Project Manager -PCI DSS Compliance Upgrade

Krisvconsulting Services Pte Ltd; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

A consulting services provider in Kuala Lumpur seeks a Project Manager to lead a PCI DSS upgrade to ensure compliance with technical and regulatory standards. The ideal candidate will have 8-10 years of IT project management experience in banking and strong skills in PCI DSS standards and cybersecurity. Key responsibilities include developing upgrade plans, managing resources, and aligning with regulatory requirements.

Qualifications

• 8-10 years in IT Project Management, ideally in banking.
• Proven PCI DSS project experience.
• Familiarity with QSAs, auditors, and regulators.

Responsibilities

• Develop and manage the PCI DSS upgrade plan.
• Define scope, deliverables, timelines, and resources.
• Align with Bank Negara Malaysia and regulatory standards.

Skills

Project Management

PCI DSS Standards

Stakeholder Management

Cybersecurity Knowledge

Education

Bachelor's in IT, Computer Science or Cybersecurity

PMP / PRINCE2 certification

Job description

The Project Manager will lead the banks PCI DSS upgrade from version 3.2.1/3.4 to 4.0.1, ensuring full compliance with technical, security, regulatory, and business requirements. The role demands deep expertise in PCI DSS standards, project management, and cross-functional coordination.

Responsibilities:

• Develop and manage the PCI DSS upgrade plan.
• Define scope, deliverables, timelines, and resources.
• Align with Bank Negara Malaysia (BNM) and regulatory standards.
• Collaborate with IT, Cybersecurity, Risk, Compliance, Internal Audit, and external QSAs.
• Manage vendors and third-party service providers.
• Report progress to senior management and regulators.
• Coordinate implementation of PCI DSS 4.0.1 controls.
• Conduct gap analysis and oversee remediation.
• Ensure alignment with encryption, segmentation, and monitoring requirements.
• Support policy and evidence development for audits.
• Identify and mitigate project risks and dependencies.
• Track progress against compliance milestones.
• Lead readiness assessments, penetration testing, and remediation.
• Ensure timely certification by QSA.
• Maintain project documentation and audit trails.
• Present status reports, risk logs, and dashboards.

Requirements:

• Bachelors in IT, Computer Science, Cybersecurity, or related field.
• PMP / PRINCE2 certification preferred.
• 8-10 years in IT Project Management, ideally in banking
• Proven PCI DSS project experience.
• Familiarity with QSAs, auditors, and regulators.
• Strong knowledge of payment systems and cybersecurity tools.
• Excellent stakeholder and communication skills.
• Ability to manage complex technical and compliance streams.
• Familiarity with BNM regulations and ISO/NIST standards.
• PCI DSS Gap Analysis Report (v3.4 to v4.0.1)
• Remediation plan and tracking
• Updated policies and technical configurations
• Successful PCI DSS 4.0.1 certification
• Final project closure report with compliance evidence