Remote Senior PCI DSS & SOC 2 Compliance Leader

Entrust; Shakopee (MN); Remote; USD 119,000 - 175,000; Full time

Benefits offered by this job

Health and well-being programs

401(k) matching

Paid time off

Parental leave

Education reimbursement

Mental health coaching

Virtual fitness programs

Job summary

Entrust is seeking a Senior Security Compliance Analyst to lead and sustain compliance across PCI DSS environments and support the maturity and execution of the SOC 2 program. You will design and execute continuous compliance monitoring, identify gaps, coordinate audits, and drive remediation across cloud, on-prem, and hybrid setups.

This role partners with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned

Qualifications

• 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls.
• Hands-on technical and audit experience with PCI DSS and SOC 2 compliance.
• Ability to work across multiple time zones with virtual global teams.
• Strong technical understanding of: Cloud environments and shared responsibility models; Access control, change management, logging and altering, and vulnerability management and other security domains.
• Experience working in SaaS or cloud-native environments.
• Experience working cross-functionally with engineering and infrastructure teams.

Responsibilities

• Lead PCI DSS compliance-related activities and certification.
• Support the evolution and execution of the SOC 2 program, including control design, testing, and evidence collection.
• Maintain required evidence artifacts and ensure traceability of evidence.
• Interpret and operationalize security and compliance requirements into actionable control activities for engineering and operations.
• Serve as SME for PCI DSS and SOC 2 compliance, advising internal teams and customers.
• Partner with control owners to ensure controls meet PCI DSS requirements and Trust Services Criteria.
• Support external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation.
• Drive coordination with third parties to ensure shared control alignment.
• Ensure audit readiness through continuous proactive gap assessments and control testing throughout the year.
• Identify, assess, and communicate compliance and security risks to stakeholders.
• Identify, tracking, and driving closure of audit findings and control deficiencies; contribute to policy updates.

Skills

PCI DSS

SOC 2

GRC

Audit

Cloud environments

Cross-functional teamwork

Vulnerability management

Time zone coordination

Tools

GRC platforms

Evidence collection tools

Job description

Entrust is seeking a Senior Security Compliance Analyst to lead and sustain compliance across PCI DSS environments and support the maturity and execution of the SOC 2 program. You will design and execute continuous compliance monitoring, identify gaps, coordinate audits, and drive remediation across cloud, on-prem, and hybrid setups.

This role partners with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned