PCI Compliance Program Lead

Old National Bank; Indianapolis (IN); On-site; USD 98,400 - 199,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401K and continuing education

Employee assistance program

Job summary

Old National Bank is seeking a PCI Compliance Manager to lead the organization’s PCI compliance program and ensure adherence to PCI‑DSS requirements. The role focuses on data security, risk mitigation, and policy governance across stakeholders, auditors, and partners.

The position emphasizes collaboration with various teams, continuous improvement of controls, and the ability to drive education and training to strengthen security culture within the bank.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Business, or a related field.
• 7+ years of experience in compliance, risk management, or information security, with a strong focus on PCI‑DSS.
• Direct experience building a PCI Compliance Program and managing the PCI‑DSS lifecycle from readiness to certification.
• Experience with frameworks and best practices such as ISO27XXX, NIST CSF, CRI, SCF.
• Excellent project management, leadership, and communication skills.
• Achieved or in pursuit of a globally recognized information security certification such as PCI Internal Security Assessor (ISA), PCI Professional (PCIP), CISSP, CISA, or equivalent preferred.
• Formal project or program management certification (e.g., PMP, PgMP) strongly preferred.

Responsibilities

• Develop, manage, and maintain Old National Bank's PCI Compliance Program, including PCI‑DSS and all applicable PCI standards.
• Lead continuous improvement of PCI-related policies, standards, procedures, and supporting documentation.
• Provide guidance on impacts related to new technologies, infrastructure, processes, and partnerships, ensuring program alignment and adherence.
• Drive education, communication, and training initiatives which promote behaviors which reduce risk and reinforce a strong information security and risk management culture.
• Serve as the primary point of contact across stakeholders, auditors, third parties, and regulators offering technical and business expertise on PCI compliance and data security processes.
• Collaborate with first‑line teams and risk offices on control design, refinement, and implementation of PCI-related safeguards.
• Coordinate with Procurement and Third‑Party Risk Management to evaluate and track PCI compliance obligations for vendors and partners.

Education

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Business, or a related field

Job description

Old National Bank is seeking a PCI Compliance Manager to lead the organization’s PCI compliance program and ensure adherence to PCI‑DSS requirements. The role focuses on data security, risk mitigation, and policy governance across stakeholders, auditors, and partners.

The position emphasizes collaboration with various teams, continuous improvement of controls, and the ability to drive education and training to strengthen security culture within the bank.