PCI Compliance & InfoSec Advisor (Hybrid)

Elevance Health; Atlanta (GA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Elevance Health is seeking an Information Security Advisor to lead PCI DSS compliance across the enterprise. The role requires expertise in ISA/QSA/ROC/SAQ/AOC activities, risk-based decision making, and collaboration with cross-functional teams.

The position supports PCI governance, evidence management, and remediation planning. The ideal candidate has 5+ years in cybersecurity, PCI compliance, IT audit, or related fields, with strong knowledge of PCI controls, segmentation, and evidence

Qualifications

• Requires BS/BA degree in Information Technology or related field and minimum 5 years of related experience.
• Strong knowledge of PCI DSS requirements and risk-based compliance.
• Experience with PCI governance activities, evidence review, and control testing.
• Experience with third-party PCI assessments (ISA, QSA, ROC, SAQ, AOC).
• Experience with risk management frameworks and cybersecurity regulatory requirements.

Responsibilities

• Lead PCI DSS compliance activities across the enterprise.
• Provide first-level engineering design and troubleshooting; act as escalation point for complex issues.
• Support PCI governance activities, including policy and evidence management.
• Evaluate third-party PCI responsibilities and review supporting security evidence.
• Develop testing plans to ensure quality of implementation.

Skills

PCI DSS knowledge

Risk assessment

Incident response

GRC tooling experience

Education

BS/BA degree in Information Technology or related field

Bachelor’s degree in cybersecurity/ information systems/ computer science/ risk management/ business/ audit

Tools

GRC tools

Job description

Elevance Health is seeking an Information Security Advisor to lead PCI DSS compliance across the enterprise. The role requires expertise in ISA/QSA/ROC/SAQ/AOC activities, risk-based decision making, and collaboration with cross-functional teams.

The position supports PCI governance, evidence management, and remediation planning. The ideal candidate has 5+ years in cybersecurity, PCI compliance, IT audit, or related fields, with strong knowledge of PCI controls, segmentation, and evidence