PCI Penetration Testing Coordinator

NBCUniversal; New York (NY); Remote; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

Paid leave

Tuition reimbursement

Discounts on various services

Job summary

A leading media and entertainment company is seeking a PCI Scanning & Penetration Testing Coordinator to lead the organization’s PCI scanning and testing programs. This role involves managing scans, validating remediation efforts, and serving as the contact for external vendors while ensuring compliance with PCI DSS requirements. The ideal candidate will have a background in IT, 3-5 years of relevant experience, and strong technical skills. This position is fully remote and offers a competitive salary with benefits.

Qualifications

• Bachelor’s degree in an IT-related field or equivalent work experience.
• 3-5 years of experience in PCI compliance or penetration testing.
• Strong understanding of PCI DSS requirements.
• Proficiency in penetration testing methodologies (OWASP, NIST).
• Excellent organizational and communication skills.

Responsibilities

• Manage PCI ASV scan schedules across all business units.
• Track ad hoc scans ensuring timely execution.
• Validate remediation of vulnerabilities with technical teams.
• Act as the point of contact for ASV vendor issues.
• Coordinate annual and ad hoc PCI penetration tests.
• Perform manual and automated testing techniques.
• Analyze test results and provide remediation guidance.
• Maintain documentation of compliance evidence.
• Generate reports for internal stakeholders.
• Interface with business unit teams on findings.

Skills

PCI compliance

vulnerability management

penetration testing

communication skills

organizational skills

scripting (Python, Bash)

network protocols

web application architecture

project management

collaboration with vendors

Education

Bachelor’s Degree in an IT-related field

Tools

Burp Suite

Nmap

Nessus

Metasploit

Kali Linux

Job description

Base pay range

$100,000.00/yr - $140,000.00/yr

Company Overview

NBCUniversal is a leading media and entertainment company that distributes content across film, television, streaming and theme parks. It owns brands such as NBC, NBC News, NBC Sports, Telemundo, Peacock, Universal Pictures, DreamWorks Animation, and operates Universal Studios Hollywood and Or. The company values diversity, inclusion, and community impact.

Job Title

PCI Scanning & Penetration Testing Coordinator – Cyber Governance Risk and Compliance

Job Description

The Cyber Governance Risk and Compliance team is seeking a PCI Scanning & Penetration Testing Coordinator to lead and manage the organization’s PCI ASV scanning and penetration testing programs. This role serves as the central liaison between internal business units, technical teams, and external vendors, while also possessing the technical capability to conduct penetration tests independently when required. The successful candidate will ensure timely execution, remediation, and compliance with PCI DSS requirements across all business entities.

Responsibilities

• Managing and maintaining PCI ASV scan schedules across all business units.
• Initiating and tracking ad hoc scans, ensuring timely execution and reporting.
• Validating remediation of vulnerabilities and special notes, coordinating with technical teams and GRC.
• Acting as the single point of contact for the ASV vendor, resolving anomalies and portal issues.
• Negotiating false positives and scan disputes with the vendor on behalf of business units.
• Coordinating annual and ad hoc PCI penetration tests across applicable environments.
• Scoping, scheduling, and executing penetration tests internally when vendor support is unavailable or impractical.
• Performing manual and automated testing techniques including network, web application, and system-level assessments.
• Analyzing test results, documenting findings, and providing remediation guidance aligned with PCI DSS.
• Tracking remediation efforts and maintaining centralized documentation of test reports and compliance evidence.
• Generating and maintaining reports for internal stakeholders, auditors, and compliance attestations.
• Interfacing with business unit technical teams to ensure understanding and prioritization of findings.
• Providing guidance and support to teams with limited PCI knowledge or bandwidth.

Qualifications

• Bachelor’s Degree in an IT-related field and/or equivalent work experience.
• Minimum 3–5 years of experience in PCI compliance, vulnerability management, or penetration testing.
• Strong understanding of PCI DSS requirements, especially ASV scanning and penetration testing controls.
• Proficiency in penetration testing methodologies (OWASP, NIST SP 800-115, PTES).
• Experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Kali Linux, and scripting (Python, Bash).
• Working knowledge of network protocols, web application architecture, and common vulnerabilities.
• Experience working with external vendors and internal technical teams.
• Excellent organizational, communication, and documentation skills.
• Ability to manage multiple concurrent projects and deadlines.
• Certifications (at least one Required):
  • Offensive Security Certified Professional (OSCP)
  • GIAC Penetration Tester (GPEN)
  • Certified Ethical Hacker (CEH)
• Certifications (Preferred):
  • PCI Internal Security Assessor (ISA)
  • GIAC Web Application Penetration Tester (GWAPT)
  • CISSP or CISM for broader security leadership alignment

Additional Requirements

• Fully Remote: This position is designated as fully remote, meaning the employee may work from home or a remote location.

Benefits

This position is eligible for company-sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website.

Additional Information

NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing [e-mail].

For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.