Senior IT Compliance Leader: PCI-DSS & Risk

Hyatt; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

Hyatt Hotels Corporation seeks a Senior Manager, IT Compliance to lead the PCI DSS program across cybersecurity, technology, and business units. Collaborate with internal audit, risk management, and IT teams to protect cardholder data and ensure ongoing PCI compliance.

This role requires 8+ years in IT compliance and 4+ years managing PCI programs, with knowledge of COBIT, CIS, ISO27001, and NIST CSF 2.0. Lead controls, assessments, and evidence collection while guiding a growing team.

Qualifications

• 8+ years IT compliance, IT audit, cybersecurity, or risk management.
• 4+ years leading PCI DSS programs or teams.
• Knowledge of PCI DSS, IT risk frameworks, COBIT, CIS, ISO27001, and NIST CSF 2.0.

Responsibilities

• Manage the organization’s PCI DSS compliance program and annual certification activities.
• Coordinate annual PCI assessments, SAQs, and ROC activities for multiple units.
• Define and validate the Cardholder Data Environment (CDE) and data flows.
• Ensure PCI controls are implemented across in-scope systems.
• Direct PCI DSS assessments and annual penetration testing with QSAs.
• Monitor evidence collection, remediation, and ongoing control monitoring.
• Partner with Cybersecurity, Infrastructure, Dev, and Ops teams for PCI alignment.
• Develop and manage teams, resource levels, and career growth.
• Provide input to annual operating budget and capital plans.

Skills

PCI DSS

IT risk management

COBIT

ISO27001

NIST CSF 2.0

Internal/External Audit collaboration

Documentation & PM

Stakeholder communication

Education

Bachelor’s degree in information security or related field

Tools

LogicGate

Auditboard/Optro

OneTrust

Job description

Hyatt Hotels Corporation seeks a Senior Manager, IT Compliance to lead the PCI DSS program across cybersecurity, technology, and business units. Collaborate with internal audit, risk management, and IT teams to protect cardholder data and ensure ongoing PCI compliance.

This role requires 8+ years in IT compliance and 4+ years managing PCI programs, with knowledge of COBIT, CIS, ISO27001, and NIST CSF 2.0. Lead controls, assessments, and evidence collection while guiding a growing team.