PCI DSS Compliance Analyst — Hybrid (North America)

BP Americas, Inc.; Chicago (IL); Hybrid; USD 112,000 - 208,000; Full time

Job summary

BP Americas, Inc. is seeking a PCI Compliance Analyst for North America to support and maintain the PCI DSS compliance program. You will work with business units, technology delivery, the digital security team, and external assessors to ensure compliance and mitigate control gaps.

You will coordinate governance reviews, gather evidence, prepare for QSA reviews, and develop dashboards to track remediation status. Up to 50% travel; hybrid/remote working.

Qualifications

• Bachelor's degree in Information Security, IT, Cybersecurity, or related field.
• Certifications such as CISSP, CISA, PCI ISA, PCIP, CISM preferred.
• Practical knowledge of PCI DSS requirements.
• Familiarity with governance, risk, and compliance platforms.
• Understanding of NIST CSF, ISO 27001, CIS.
• Experience in regulated industries preferred.

Responsibilities

• Support PCI DSS compliance program and annual assessment activities.
• Coordinate evidence collection and remediation activities for assessments.
• Prepare documentation for QSA reviews and Self-Assessment questionnaires.
• Partner with security, IT, and business teams to integrate PCI requirements into processes.

Skills

Communication skills

Teamwork

Initiative

Analytical skills

Audit mindset

Prioritization

Education

Bachelor's degree in Information Security

Tools

GRC platforms

Job description

BP Americas, Inc. is seeking a PCI Compliance Analyst for North America to support and maintain the PCI DSS compliance program. You will work with business units, technology delivery, the digital security team, and external assessors to ensure compliance and mitigate control gaps.

You will coordinate governance reviews, gather evidence, prepare for QSA reviews, and develop dashboards to track remediation status. Up to 50% travel; hybrid/remote working.