Remote Senior PCI DSS & SOC 2 Compliance Lead

Entrust Corporation; United States; Remote; USD 119,000 - 175,000; Full time

Benefits offered by this job

Medical

Vision

Dental

401(k) matching

Life and disability insurance

Mental health coaching

Virtual fitness programs

Paid time off + holidays

Parental leave

Education reimbursement

Job summary

Entrust Corporation seeks a Senior Security Compliance Analyst to lead PCI DSS and SOC 2 compliance across multiple environments, including cloud, on-prem, and hybrid. You will design, implement, and monitor continuous compliance activities, develop evidence artifacts, and coordinate audits with internal teams and third parties.

The role emphasizes cross-functional collaboration with Security, Engineering, and Product, ensuring controls meet regulatory expectations and Trust Services Criteria.

Qualifications

• 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls.
• Hands-on technical and audit experience with PCI DSS and SOC 2 compliance.
• Ability to work across multiple time zones with virtual global teams.
• Strong technical understanding of cloud environments and shared responsibility models.
• Experience with access control, change management, logging, vulnerability management, and related domains.
• Experience in SaaS or cloud-native environments; cross-functional collaboration with engineering and infra teams.

Responsibilities

• Lead PCI DSS compliance-related activities and certification.
• Support the evolution and execution of the SOC 2 program, including control design, testing, and evidence collection.
• Maintain required evidence artifacts and ensure traceability of evidence.
• Interpret and operationalize security and compliance requirements into actionable control activities.
• Serve as SME for PCI DSS and SOC 2 compliance, advising internal teams and customers.
• Partner with control owners to ensure controls meet PCI DSS requirements and Trust Services Criteria.
• Support external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation.
• Drive coordination with third parties to ensure shared control alignment.
• Ensure audit readiness through continuous proactive gap assessments and control testing.
• Identify, assess, and communicate compliance and security risks to stakeholders.
• Identify, track, and drive closure of audit findings and control deficiencies.
• Contribute to development and maintenance of security policies, standards, and procedures.

Skills

Security compliance

PCI DSS

SOC 2

GRC

Audit coordination

Cloud environments

Cross-functional teams

Risk assessment

Job description

Entrust Corporation seeks a Senior Security Compliance Analyst to lead PCI DSS and SOC 2 compliance across multiple environments, including cloud, on-prem, and hybrid. You will design, implement, and monitor continuous compliance activities, develop evidence artifacts, and coordinate audits with internal teams and third parties.

The role emphasizes cross-functional collaboration with Security, Engineering, and Product, ensuring controls meet regulatory expectations and Trust Services Criteria.