PCI DSS Compliance - Senior Analyst

bp; Chicago (IL); Vor Ort; USD 90.000 - 120.000; Vollzeit

Zusammenfassung

BP is seeking a PCI Compliance Analyst to support North America PCI DSS compliance, working with business units, security teams, and assessors to ensure controls meet standards. You will coordinate evidence collection, assist audits, and help translate requirements into business processes.

This role involves analytics, reporting, and cross-team collaboration to minimize data security risk. The ideal candidate has 2+ years in PCI compliance or IT security, a bachelor’s degree in a related field,

Qualifikationen

• Bachelor’s degree in Information Security, IT, Cybersecurity or related field.
• 2+ years of experience in PCI or other regulatory IT compliance or information security.
• Certifications such as CISSP, CISA, PCI ISA, PCIP, CISM are preferred.

Aufgaben

• Support and maintain the PCI DSS compliance program and annual assessment activities.
• Coordinate collection and validation of evidence for PCI assessments and QSA reviews.
• Provide guidance on PCI DSS requirements to business units and customers.
• Develop PCI compliance dashboards and reports for leadership.

Kenntnisse

PCI DSS

Regulatory IT compliance

GRC

Data security

Ausbildung

Bachelor’s degree in Information Security/IT/Cybersecurity

Tools

GRC platforms

Vulnerability management

Access management

Jobbeschreibung

About us

Our purpose is to bring together people, energy and markets to power and navigate a changing world. In a time of constant change and possibility we need new talent to pursue commercial opportunities, fueled by extraordinary insight and expertise. We're alway beginning for more innovative digital solutions, sustainable outcomes and closer collaboration across our company and beyond, and you could be part of that too. Together we continue to grow as the world's leading energy company!

This position is available for Chicago and Ohio Westlake retail support center.

Our Organization

The PCI Global Compliance Office is an energetic and enthusiastic team under the Technology Digital Delivery, Mobility and Convenience organization. The team exists to ensure consistent, efficient, and sustainable PCI DSS compliance across bp's role as a Merchant and as Service Provider, while balancing operational perfection and cost efficiency.

Our objective is to enable best in class payment solutions that meet business needs, protect customer data, and streamline compliance mechanisms globally. We aim to serve our consumers with best-in-class payment solutions while keeping the cost of compliance at the optimal level.

We use our expertise to help improve efficiency, increase effectiveness and harness the ground-breaking potential of digital technologies to deliver value.

The Position Summary

As the PCI Compliance Analyst for North America, you will be responsible for supporting and maintaining the organization's Payment Card Industry Data Security Standard (PCI DSS) compliance program. You will work closely with business units, the Technology digital delivery team, the digital security team, and with external assessors to ensure compliance with PCI DSS requirements, identify and remediate control gaps, and reduce payment card data security risks. You will coordinate compliance activities, supervise control effectiveness, handle evidence collection, support audits and assessments, and provide guidance to collaborators regarding PCI security requirements and guidelines.

Summary of the Responsibilities This Role Brings

PCI Compliance Program Management

• Support the organization's PCI DSS compliance program and annual assessment activities.
• Drive up to date PCI DSS documentation, including alignment with the company digital security policy and procedures and promotion of responsibility matrices.
• Assist with creation and maintenance of PCI scope documentation, network diagrams, and data flow diagrams.
• Perform ongoing PCI compliance governance reviews across business, technology, and security teams.
• Working with other members of the office, supervise changes to PCI DSS requirements and assess organizational impact.
• Identify compliance gaps and recommend corrective actions.
• Supervise remediation efforts and validate closure of compliance findings.

Assessment & Audit Support

• Coordinate the collection and validation of evidence required for PCI assessments.
• Prepare documentation for Qualified Security Assessor (QSA) reviews, Self-Assessment- Questionnaires, and internal audits.

Customer Engagement

• Partner with the digital Security, the infrastructure, the technology, and Operational teams to ensure PCI requirements are integrated into business processes.
• Provide guidance and interpretation of PCI DSS requirements to customers.
• Facilitate compliance meetings and communicate compliance status to management.
• Assist in developing awareness and training initiatives related to PCI compliance.

Reporting & Metrics

• Develop and maintain PCI compliance dashboards and reports.
• Report compliance metrics, remediation status, and emerging risks to your leadership.
• Maintain accurate records to support regulatory and compliance requirements.

Preferred Qualifications

Education / Technical Knowledge

• Bachelor's degree in Information Security, Information Technology, Cybersecurity or related field.
• One or more Information Security / compliance related certifications are preferred, such as Certified Information Systems Security Practitioner (CISSP), Certified Information Systems Auditor (CISA), Procurement Card Industry Internal Security Assessor (PCI ISA), PCI Professional (PCIP), Certified Information Security Manager (CISM).
• Practical knowledge of PCI DSS requirements.
• Practical knowledge of governance, risk, and compliance (GRC) platforms.
• Familiarity with security processes such as Vulnerability management, Access management, Logging and monitoring, Encryption technologies, Network segmentation, Security incident management.
• Understanding of security frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS.

Preferred Experience

• 2 or more years of experience in PCI or other regulatory IT compliance, information security efforts.
• Experience in financial services, payments, retail, healthcare, or other regulated industries.
• Experience in a similar governance, risk and compli