Principal Specialist, PCI DSS Compliance

Harman International; Łódź; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work environment

Discounts on Harman/Samsung products

Harman University programs

Job summary

Harman International is seeking a Principal Specialist, PCI DSS Compliance in Lodz, Poland. The role leads the global PCI DSS program, coordinating with business, IT, and third-party stakeholders to ensure secure and compliant payment processes.

Responsibilities include gap assessments, remediation, and advisory support across infrastructure, applications, and cloud, with involvement in ITGC governance and SOX-related activities. A hybrid work setup is offered.

Qualifications

• Bachelor’s or Master’s degree in information security, IT, or related field.
• 5+ years of experience in cybersecurity, risk or compliance roles.
• Strong hands-on experience with PCI DSS.
• Proven experience managing audits (internal/external) and remediation programs.

Responsibilities

• Facilitate the global PCI DSS compliance program across Harman environments.
• Conduct PCI DSS gap assessments and risk evaluations for in-scope systems and define remediation priorities.
• Lead internal and external PCI DSS assessments, acting as the primary liaison for QSAs and ensuring audit readiness.
• Oversee remediation of PCI findings, including coordination with stakeholders and tracking closure of identified gaps.
• Provide expert guidance on PCI DSS requirements, secure payment handling, and control implementation across infrastructure, applications, and cloud.
• Design and oversee ITGC control frameworks and support internal and external audits (SOX).

Skills

PCI DSS compliance

Audit management

Cloud security

English communication

IT governance

Education

Bachelor’s or Master’s degree in information security, IT, or related field

Job description

## Principal Specialist, PCI DSS ComplianceApply: Lodz - Lodz, Poland: Full time: Posted 19 Days Ago: R-53936-2026## A Career at HARMAN### As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do every day.**Introduction: A Career at HARMAN Corporate**We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN Corporate, you are integral to our company’s award-winning success.* Enrich your managerial and organizational talents – from finance, quality, and supply chain to human resources, IT, sales, and strategy* Augment your comprehensive skillset with expert training across decision-making, change management, leadership, and business development* Obtain 360-degree support throughout your career life cycle, from early-stage to seasoned leader**What****You’ll****Be Part Of**As a PCI DSS Compliance Principal, you will be responsible for facilitating HARMAN’s PCI DSS compliance activities across all in-scope environments. This role ensures that cardholder data is protected in line with PCI DSS requirements, drives audit readiness, and partners with business, IT, and third-party stakeholders to implement and maintain secure and compliant payment processes. In addition, you will contribute to the Digital Compliance function by supporting IT governance activities, including ITGC control oversight, policy and procedure management, and second-line support for internal and external audits.**How****You’ll****Make****An****Impact*** Facilitate the global PCI DSS compliance program across HARMAN environments, ensuring consistent implementation and alignment with business and technology teams.* Conduct PCI DSS gap assessments and risk evaluations for in-scope systems, and define remediation priorities based on risk impact.* Enhance PCI DSS governance, including control framework, policies, procedures, and required documentation.* Lead internal and external PCI DSS assessments, acting as the primary liaison for QSAs and ensuring audit readiness at all times.* Oversee remediation of PCI findings, including coordination with stakeholders, tracking progress, and validating closure of identified gaps.* Provide expert guidance and advisory support to business, IT, and product teams on PCI DSS requirements, secure payment handling, and control implementation across infrastructure, applications, and cloud.* Maintain and enhance IT governance framework, including development and lifecycle management of IT policies, standards, and procedures within the Digital Compliance domain.* Design and oversee ITGC control frameworks, ensuring controls are risk-based, effectively implemented, and aligned with regulatory and audit expectations.* Support internal and external (K)SOX audits from a 2nd line perspective, including control validation, evidence review, and stakeholder coordination.**What****Makes You****A****Strong Fit*** Bachelor’s or Master’s degree in information security, IT, or related field.* 5+ years of experience in cybersecurity, risk or compliance roles.* Strong hands-on experience with PCI DSS.* Proven experience managing audits (internal/external) and remediation programs.* Strong understanding of cloud environments, network security and segmentation, identity and access management, encryption and key management.* Ability to effectively communicate in English, including reading, writing and speaking.* We see AI as an important part of how work gets done. While tools may vary, a baseline familiarity with using AI to support efficiency, problem-solving, and quality is expected.**Bonus Points if You Have*** Industry certifications (CISSP, CISM, CISA, ISO 27001 LI/LA).* PCI certifications (PCIP, ISA).* Experience with payment gateways, tokenization solutions, or e-commerce platforms.* Experience operating in a global enterprise with distributed environments.* Strong ownership mindset and ability to drive compliance programs end-to-end.* Ability to translate regulatory requirements into actionable technical controls.**Things To Know*** Be willing to travel up to 5%, domestic only OR domestic and international travel.* Successfully complete a background investigation and drug screen as a condition of employment.**What You Can Expect*** A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.* Access to employee discounts on world-class HARMAN and Samsung products (JBL, Harman Kardon, AKG and others).* Learning and development opportunities through our award-winning HARMAN University programs* An inclusive and diverse work environment that fosters and encourages professional and personal development* Work on best-in-class emerging technologies and an atmosphere that motivates you to give your best.#LI-Hybrid