Senior PCI DSS / SOC 2 Compliance Lead (Remote)

Entrust; Minnesota; Remote; USD 120,000 - 180,000; Full time

Job summary

Entrust is seeking a Senior Security Compliance Analyst to lead PCI DSS environments and support SOC 2 maturity across cloud, on-prem, and hybrid setups. The role collaborates with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively and operating as intended.

The ideal candidate has deep PCI DSS expertise, strong SOC 2 familiarity, and modern GRC experience for scalable, automated compliance operations, with readiness for audits and remediation

Qualifications

• 5+ years in security compliance/audits
• Experience with PCI DSS and SOC 2
• Experience SaaS or cloud-native environments
• US citizenship required

Responsibilities

• Lead PCI DSS compliance-related activities and certification
• Support the evolution and execution of the SOC 2 program, including control design, testing, and evidence collection
• Maintain evidence artifacts and ensure traceability of evidence
• Interpret security and compliance requirements into actionable control activities for engineering and operations
• Serve as SME for PCI DSS and SOC 2 compliance, advising internal teams and customers
• Partner with control owners to ensure controls meet PCI DSS and Trust Services Criteria
• Support external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation
• Drive coordination with third parties to ensure shared control alignment
• Ensure audit readiness through continuous proactive gap assessments and control testing
• Identify and communicate compliance risks to stakeholders

Skills

Security compliance

PCI DSS

SOC 2

GRC

Auditing

Tools

GRC platforms

Audit tooling

Job description

Entrust is seeking a Senior Security Compliance Analyst to lead PCI DSS environments and support SOC 2 maturity across cloud, on-prem, and hybrid setups. The role collaborates with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively and operating as intended.

The ideal candidate has deep PCI DSS expertise, strong SOC 2 familiarity, and modern GRC experience for scalable, automated compliance operations, with readiness for audits and remediation