Remote Director, Information Security & PCI Compliance

American Express; Sacramento (CA); Remote; USD 28,000 - 41,000; Full time

Benefits offered by this job

Competitive base pay

Bonus

6% 401(k) match

Health, dental, vision, and disability

Job summary

American Express in Sacramento, CA seeks a Director of Information Security to lead data security program governance and PCI DSS compliance. You will partner with the PCI PMO, CTO, and audit teams to oversee MRAs, findings, and remediation across multiple lines of business.

Strong leadership and cross-functional collaboration are essential. The role emphasizes end-to-end security program management, reporting, and ensuring adherence to PCI DSS requirements while coordinating with internal risk,

Qualifications

• Bachelor's degree and security certifications preferred.
• Experience with controllers in complex managed services.
• Experience with PCI DSS requirements.
• Broad understanding of data security disciplines.
• Strong risk management skills.
• Strong written communication abilities.
• Experience defining and measuring project metrics.
• Ability to work with cross-functional teams under tight deadlines.
• Proven leadership and cross-functional teamwork.

Responsibilities

• Comprehend, implement, and complete lifecycle parts of MRAs and related findings.
• Collaborate with internal audit and CTRRO partners to align data for reporting.
• Track and report status of open discoveries, MRAs, and findings across lines of business.
• Present results, findings, and action plans to drive remediation.
• Drive PCI DSS program and PCI PMO governance across initiatives.
• Coordinate space changes and ensure timely delivery of requirements and milestones.
• Provide timely updates to leadership on accreditation status.
• Lead IT risk and compliance practices for PCI DSS compliance exercises.

Skills

Leadership

Risk management

Security governance

PCI DSS knowledge

Education

Bachelor's degree or higher

Job description

American Express in Sacramento, CA seeks a Director of Information Security to lead data security program governance and PCI DSS compliance. You will partner with the PCI PMO, CTO, and audit teams to oversee MRAs, findings, and remediation across multiple lines of business.

Strong leadership and cross-functional collaboration are essential. The role emphasizes end-to-end security program management, reporting, and ensuring adherence to PCI DSS requirements while coordinating with internal risk,