Project Manager -PCI DSS Compliance Upgrade

Krisvconsulting Services Pte Ltd; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A consulting firm in Kuala Lumpur is seeking an experienced Project Manager to lead the PCI DSS compliance upgrade. The ideal candidate will have a strong background in IT project management, particularly within the banking sector. Responsibilities include developing upgrade plans, collaborating with various stakeholders, and ensuring regulatory compliance. The role requires excellent communication skills and a thorough understanding of PCI DSS standards, cybersecurity tools, and project risk management. Join us to help enhance our payment security standards.

Qualifications

• 8-10 years in IT Project Management, ideally in banking.
• Familiarity with QSAs, auditors, and regulators.
• Strong knowledge of payment systems and cybersecurity tools.

Responsibilities

• Develop and manage the PCI DSS upgrade plan.
• Align with regulatory standards.
• Manage vendors and third-party service providers.

Skills

Project management

Cybersecurity knowledge

Stakeholder communication

Risk management

Education

Bachelor's in IT, Computer Science, or Cybersecurity

PMP / PRINCE2 certification

Job description

Project Manager -PCI DSS Compliance Upgrade

About the job Project Manager -PCI DSS Compliance Upgrade

The Project Manager will lead the banks PCI DSS upgrade from version 3.2.1/3.4 to 4.0.1, ensuring full compliance with technical, security, regulatory, and business requirements. The role demands deep expertise in PCI DSS standards, project management, and cross‑functional coordination.

Responsibilities:

• Develop and manage the PCI DSS upgrade plan.
• Define scope, deliverables, timelines, and resources.
• Align with Bank Negara Malaysia (BNM) and regulatory standards.
• Collaborate with IT, Cybersecurity, Risk, Compliance, Internal Audit, and external QSAs.
• Manage vendors and third‑party service providers.
• Report progress to senior management and regulators.
• Coordinate implementation of PCI DSS 4.0.1 controls.
• Conduct gap analysis and oversee remediation.
• Ensure alignment with encryption, segmentation, and monitoring requirements.
• Support policy and evidence development for audits.
• Identify and mitigate project risks and dependencies.
• Track progress against compliance milestones.
• Lead readiness assessments, penetration testing, and remediation.
• Ensure timely certification by QSA.
• Maintain project documentation and audit trails.
• Present status reports, risk logs, and dashboards.

Requirements:

• Bachelors in IT, Computer Science, Cybersecurity, or related field.
• PMP / PRINCE2 certification preferred.
• 8-10 years in IT Project Management, ideally in banking.
• Familiarity with QSAs, auditors, and regulators.
• Strong knowledge of payment systems and cybersecurity tools.
• Excellent stakeholder and communication skills.
• Ability to manage complex technical and compliance streams.
• Familiarity with BNM regulations and ISO/NIST standards.
• PCI DSS Gap Analysis Report (v3.4 to v4.0.1)
• Remediation plan and tracking.
• Updated policies and technical configurations.
• Successful PCI DSS 4.0.1 certification.
• Final project closure report with compliance evidence.