Senior PCI Analyst

CSI; United States; On-site; USD 80,000 - 120,000; Full time

Job summary

CSI is looking for a highly skilled PCI Security Analyst to join their team in the United States. This role involves ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS) through various assessments and risk management activities.

The ideal candidate should have at least 5 years of experience in a PCI DSS compliance role and relevant certifications. The position emphasizes a strong understanding of network security, encryption, and secure system configurations.

Qualifications

• Minimum of 5 years of experience in a PCI DSS compliance role.
• Strong understanding of PCI DSS requirements and frameworks.
• Demonstrated proficiency using compliance management platforms.

Responsibilities

• Conduct PCI DSS compliance assessments to identify gaps and risks.
• Develop, implement, and maintain PCI-related security policies.
• Monitor compliance with PCI DSS requirements.

Skills

PCI DSS compliance

Risk management

Network security

Compliance management platforms

Education

Relevant certification (e.g., PCIP, QSA, CISSP, ISA)

Tools

Archer

Qualys

ServiceNow

Job description

Job Description

We are seeking a highly skilled PCI Security Analyst to join our team. The analyst is responsible for ensuring organizational compliance with the Payment Card Industry Data Security Standard (PCI DSS) and related cybersecurity requirements. This role involves conducting compliance assessments, managing assessments, and mitigating risks associated with payment card data.

What You’ll Do

• Conduct PCI DSS compliance assessments to identify gaps and risks supporting ongoing security and compliance.
• Develop, implement, and maintain PCI-related security policies, standards, and procedures to ensure consistent protection of cardholder data.
• Monitor and validate compliance with PCI DSS requirements across systems and processes to maintain regulatory adherence.
• Execute comprehensive validation of PCI DSS scope across enterprise environments, ensuring accurate identification and classification of in-scope systems, applications, and data flows.
• Collaborate with cross-functional teams to assess segmentation controls, cardholder data locations, and business processes to confirm scope boundaries align with PCI DSS requirements.
• Document scope rationale and provide evidence-based recommendations to reduce scope where feasible, while maintaining compliance integrity.
• Develop PCI related deliverables assigned to the Enterprise Information Security Services department.
• Serve as an internal resource for all business units for PCI DSS compliance consultations.
• May perform other job duties as assigned.

What To Bring

• Minimum of 5 years of experience in a PCI DSS compliance role.
• At least one relevant certification (e.g., PCIP, QSA, CISSP, ISA) is required.

What Would Be Nice For You To Have

• A senior level professional with in-depth body of knowledge, experience and expertise with the ability to resolve complex issues.
• Excellent understanding of PCI DSS requirements and security frameworks (e.g., PCI DSS 4.0.1, NIST Cybersecurity Framework, ISO 27001).
• Strong knowledge of network security, encryption, and secure system configurations.
• Strong technical expertise in network security, encryption, vulnerability management, and secure system design.
• Strong risk management capabilities including the ability to identify, assess, and mitigate compliance and security risks within payment card environments.
• Demonstrated proficiency using compliance management platforms (e.g., Archer, Qualys, ServiceNow).

CSI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, physical and mental disability, marital status, veteran status, or any other characteristic protected by applicable law. If you need an accommodation during the recruitment process, please email us at [e-mail] and we will work with you to meet your accessibility needs.

Visa Sponsorship: We are unable to offer visa sponsorship for this position. Applicants must be authorized to work in the United States without the need for sponsorship now or in the future.