PCI DSS & Sensitive Data Compliance Lead

Forvis Mazars US

Pittsburgh (Allegheny County)

On-site

USD 120,000 - 190,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

FORVIS MAZARS US is seeking a Sensitive Data Compliance Lead Consultant to collaborate with our Sensitive Data Cyber Compliance leadership to define, refine and expand the firm’s PCI DSS offering for enterprise clients, including DoD contractors and Fortune 1000 companies.

You will lead PCI assessments, support risk management across NIST/FedRAMP frameworks, develop system security plans, POAMs, and documentation, and guide client teams to achieve compliance while managing multiple projects.

Qualifications

Bachelor's Degree in Cybersecurity, MIS, Computer Science, or similar.
PCI QSA credential.
Cybersecurity/privacy certifications (e.g. CISSP, CISA, CISM) preferred.
Experience with federal cyber compliance frameworks (NIST 800-171, FISMA, FedRAMP).
Knowledge of cyber risk management frameworks (NIST 800-171, NIST CSF, NIST SP 800-53).
5+ years in cybersecurity, IT audit, or GRC; experience with PCI DSS, CSF, ISO 27001/27002, FedRAMP, NIST SP 800-53, CIS Controls.

Responsibilities

Lead PCI compliance assessments for enterprise clients, documenting risks with clear reporting and recommendations.
Assess IT environments against federal and other government cyber frameworks (NIST, FedRAMP, CSF).
Identify gaps and document reporting with proof-of-concept and recommendations.
Maintain leading PCI and other cybersecurity compliance solutions and pursue continuing education.
On consulting teams with large enterprise clients to define in-scope systems and develop SSPs, policies, POAMs.
Define and integrate tools, processes, and data flows to maintain compliance and reduce risk.
Manage multiple projects concurrently, driving schedules and budgets.