Senior PCI DSS Compliance Analyst (Hybrid/Remote)

BP PLC; Chicago (IL); On-site; USD 112,000 - 208,000; Full time

Job summary

BP plc is seeking a PCI Compliance Analyst for North America to support the PCI DSS program, coordinate with business units, technology delivery, the security team, and external assessors to ensure ongoing compliance. You will manage evidence collection, remediation, scope documentation, and governance reviews across teams.

You will also prepare documentation for assessors, train teams, and provide guidance to customers on PCI requirements while maintaining dashboards and reporting for

Qualifications

• Bachelor's degree in Information Security, IT, Cybersecurity or related field.
• One or more Information Security / compliance related certifications preferred (e.g., CISSP, CISA, PCI ISA, PCIP, CISM).
• Practical knowledge of PCI DSS requirements.
• Familiarity with governance, risk, and compliance (GRC) platforms.
• Knowledge of security processes such as vulnerability management, access management, logging and monitoring, encryption, network segmentation, and security incident management.
• Understanding of security frameworks such as NIST CSF, ISO 27001, CIS.

Responsibilities

• Support PCI DSS compliance program and annual assessment activities.
• Drive PCI DSS documentation alignment with security policy and procedures.
• Create and maintain PCI scope docs, network and data flow diagrams.
• Conduct governance reviews across business, technology and security teams.
• Identify compliance gaps and recommend corrective actions; supervise remediation.
• Coordinate collection and validation of evidence for assessments.
• Prepare documentation for QSA reviews, Self-Assessment Questionnaires, and audits.
• Provide guidance and interpretation of PCI requirements to customers.
• Develop awareness and training initiatives related to PCI compliance.
• Develop and maintain PCI compliance dashboards and reports.

Skills

Consulting

Incident investigation

Incident Management

Information Assurance

Information Security

Security behavior change

Risk Management

Stakeholder Management

Supplier Relationship Management

Supplier security management

Education

Bachelor's degree in Information Security / IT / Cybersecurity

Certifications: CISSP, CISA, PCI ISA, PCIP, CISM

Tools

GRC platforms

Job description

BP plc is seeking a PCI Compliance Analyst for North America to support the PCI DSS program, coordinate with business units, technology delivery, the security team, and external assessors to ensure ongoing compliance. You will manage evidence collection, remediation, scope documentation, and governance reviews across teams.

You will also prepare documentation for assessors, train teams, and provide guidance to customers on PCI requirements while maintaining dashboards and reporting for