PCI Compliance Engineer

TEKsystems; Cupertino (CA); Hybrid; USD 74,000 - 105,000; Full time

Benefits offered by this job

Medical benefits

401(k) plan

Time off

Job summary

TEKsystems is seeking a detail-oriented Compliance & Privacy Engineer to join the team. The role combines data governance, privacy engineering, and regulatory compliance, focusing on maintaining a centralized data registry and enforcing data classifications across audits.

The position requires hands-on experience with PCI DSS and related frameworks, proficiency with Splunk & GitHub, and strong documentation skills.

Qualifications

• 10+ years of experience in compliance engineering, data governance, privacy engineering, or a related discipline.
• Hands-on experience with data classification frameworks and metadata management in enterprise environments.
• Familiarity with PCI DSS, PCI PIN, NIST, SOX etc.
• Working knowledge of compliance and monitoring tools (e.g., Splunk, GitHub or similar).
• Experience with AWS cloud services and routine cloud operations.
• Strong documentation skills with Confluence, Quip, or similar collaboration platforms.
• Excellent organizational and project management skills with the ability to track multiple work streams simultaneously.
• Familiarity with AI to create AI agents to perform compliance day to day jobs.

Responsibilities

• Data Registry & Privacy Governance: Input, update, and validate metadata for databases and data assets within a centralized data registry.
• Data Classification & Tagging: Apply data tags and classifications in alignment with privacy and data governance standards.
• Stakeholder Collaboration: Review database documentation with data owners, engineers, and privacy stakeholders.
• Migration Support: Map existing metadata to new registry schemas and standards during transitions.
• Quality Assurance: Perform regular quality checks for completeness and accuracy of tagged data.
• Compliance Review: Review a specific feature from a compliance & privacy standpoint.
• Compliance Controls Execution: Monitor, track, and execute compliance controls across audits and assessments.
• Monthly Controls Management: Track recurring monthly controls like Splunk monitoring, GitHub access reviews, patching, baseline checks.
• Tooling & Platform Monitoring: Monitor governance tools for WPC operations and flag issues.
• Audit & Project Tracking: Track tickets related to WPC audits and projects.
• Vulnerability & Patch Management: Monitor patching cycles and coordinating remediation.
• Training Compliance: Monitor PCI training completion across teams.
• Evidence Collection: Assist in collecting evidence for PCI DSS, NIST, SOX assessments.
• Documentation & Project Management: Maintain Confluence/Quip spaces and drive accountability.
• Cloud Operations: Perform AWS routine tasks for compliance infrastructure.

Skills

Compliance

Security

Risk management

Risk assessment

PCI DSS

AWS

Project management

Program management

Data governance

Education

Bachelor's degree

Certifications: CISA/CISM/CRISC/PCI QSA

Tools

Splunk

GitHub

AWS

Confluence

Job description

PCI Compliance Engineer - must have recent PCI DSS engineering experience

Description

Our client is seeking a detail-oriented and proactive Compliance & Privacy Engineer to join their team. This role sits at the intersection of data governance, privacy engineering, and regulatory compliance. The ideal candidate will be responsible for maintaining the integrity of our centralized data registry, enforcing data classification standards, and driving execution of compliance controls across multiple audit and assessment frameworks. This is a hands-on role requiring strong organizational skills, technical aptitude, and cross-functional collaboration.

Key Responsibilities

Data Registry & Privacy Governance

• Metadata Management: Input, update, and validate metadata for databases and data assets within a centralized data registry, ensuring all entries are current and accurate.
• Data Classification & Tagging: Apply data tags and classifications (e.g., data type,
  sensitivity level, personal data indicators) in alignment with established privacy and data governance standards.
• Stakeholder Collaboration: Review database documentation and collaborate closely with data owners, engineers, and privacy stakeholders to ensure accurate and comprehensive metadata capture.
• Migration Support: Support migration activities by mapping existing metadata to new registry schemas and standards, ensuring continuity and compliance during transitions.
• Quality Assurance: Perform regular quality checks to ensure completeness, consistency, and accuracy of tagged and classified data across the registry.

Engineering Compliance

• Compliance Review: Review a specific feature from a compliance & privacy standpoint
• Compliance Controls Execution: Monitor, track, and execute compliance controls across all audits and assessments, ensuring timely completion and adherence to regulatory requirements.
• Monthly Controls Management: Track and execute recurring monthly controls including but not limited to Splunk monitoring, GitHub access reviews, patching status verification, and baseline compliance checks.
• Tooling & Platform Monitoring: Actively monitor compliance and governance tools for WPC (Wallet, Payments & Commerce) operations, flagging issues and ensuring tool health.
• Audit & Project Tracking: Monitor and track all scheduled tickets related to WPC audits and projects, ensuring milestones are met and blockers are escalated promptly.
• Vulnerability & Patch Management: Monitor and track patching cycles, aging vulnerabilities, and vulnerability reports, coordinating remediation efforts with relevant engineering teams.
• Training Compliance: Monitor and track PCI training completion across applicable teams, ensuring all personnel maintain required certifications and awareness.
• Evidence Collection: Assist in collecting, organizing, and submitting evidence required for WPC audits, including but not limited to PCI DSS, PCI PIN, PCI MPoC, APN, SOX, NIST etc assessments.
• Documentation & Project Management: Maintain Confluence and Quip documentation spaces to track all internal compliance projects, issues, progress, and follow-ups. Serve as a project management point of contact for internal compliance initiatives, driving accountability and visibility.
• Cloud Operations: Perform AWS routine operational tasks in support of compliance infrastructure and monitoring.

Required Qualifications

• 10+ years of experience in compliance engineering, data governance, privacy engineering, or a related discipline.
• Hands-on experience with data classification frameworks and metadata management in enterprise environments.
• Familiarity with regulatory and audit frameworks such as PCI DSS, PCI PIN, NIST, SOX etc
• Working knowledge of compliance and monitoring tools (e.g., Splunk, GitHub or similar).
• Experience with AWS cloud services and routine cloud operations.
• Strong documentation skills with proficiency in Confluence, Quip, or similar collaboration platforms.
• Excellent organizational and project management skills with the ability to track multiple work streams simultaneously.
• Familiarity with AI to create AI agents to perform compliance day to day jobs.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Security, Data Engineering, or a related field.
• Experience with data privacy regulations (e.g., GDPR, CCPA) and privacy-bydesign principles.
• Familiarity with vulnerability management tools and patching lifecycle processes.
• Relevant certifications such as CISA, CISM, CRISC, PCI QSA, CIPM/CIPP, or AWS certifications.
• Experience working in large-scale enterprise environments with complex data ecosystems.
• Strong cross-functional communication skills with the ability to engage both technical and non-technical stakeholders.

What We Value

• Attention to Detail - Precision in data tagging, metadata validation, and audit evidence collection.
• Collaboration - Ability to work across engineering, privacy, and compliance teams seamlessly.
• Accountability - Ownership of compliance timelines, controls, and project deliverables.
• Continuous Improvement - A mindset geared toward optimizing processes, tools, and documentation.

Skills

Compliance, Security, Risk management, Risk assessment, Risk analysis, payment card industry, pci compliance, Pci, Pci dss, aws, project management, program management, data governance

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Cupertino, CA.

Pay and Benefits

The pay range for this position is $65.00 - $65.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a hybrid position in Cupertino, CA.

Application Deadline

This position is anticipated to close on Aug 21, 2026.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.