Senior InfoSec Risk & PCI Compliance Analyst

Wawa Inc.; United States; Sur place; USD 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

ESOP

Tuition Reimbursement

401(k) Plan

Medical/Dental/Prescription Coverage

Flexible Spending Accounts

Employee Assistance & WellnessPrograms

Paid Time Off

Employee Resource Groups

Résumé du poste

Wawa Inc. is seeking an Information Security Risk and Compliance Senior Analyst in the United States to lead and support risk management and PCI DSS compliance activities.

The role manages the risk register, conducts risk assessments, and communicates risk conclusions to technology, business, and leadership teams. The Senior Analyst will contribute to PCI scope, evidence collection, and remediation tracking, and will lead portions of PCI assessments based on experience.

Qualifications

• Minimum 5 years of experience in incident response, information security and IT.

Responsabilités

• Maintain the Information Security Risk Register with proper ownership and remediation tracking.
• Lead technology and information security risk assessments for new initiatives and changes.
• Evaluate risk scenarios and document residual risk with risk methodology.
• Support PCI DSS assessments, scoping, evidence collection, control validation or remediation.
• Develop and deliver risk reporting for leadership and stakeholders.

Connaissances

Risk assessments

PCI DSS

Threat modeling

NIST 800-53

Communication

Formation

Bachelor's degree in information security or related field

CISSP or equivalent certification

Outils

Vulnerability scanners

PCI assessment tools

Description du poste

Wawa Inc. is seeking an Information Security Risk and Compliance Senior Analyst in the United States to lead and support risk management and PCI DSS compliance activities.

The role manages the risk register, conducts risk assessments, and communicates risk conclusions to technology, business, and leadership teams. The Senior Analyst will contribute to PCI scope, evidence collection, and remediation tracking, and will lead portions of PCI assessments based on experience.