Senior PCI DSS & SOC 2 Compliance Lead - Remote

Entrust Corporation; United States; Remote; USD 119,078 - 174,648; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Fully remote

Job summary

Entrust Corporation is seeking a Sr. Security Compliance Analyst to lead PCI DSS and SOC 2 programs across diverse environments, including cloud, on-prem, and hybrid.

The role focuses on designing and operating continuous compliance, evidence collection, and remediation planning. You will partner with Security, Engineering, Product, and third-party providers to ensure controls meet Trust Services Criteria and regulatory expectations, while maintaining audit readiness and scalable governance

Qualifications

• 5+ years in security compliance, audit, or GRC with strong controls.
• Hands-on PCI DSS and SOC 2 experience.
• Experience with SaaS or cloud-native environments.
• Able to work across multiple time zones with virtual teams.
• US citizen.

Responsibilities

• Lead PCI DSS compliance activities and certification.
• Support SOC 2 program design, testing and evidence collection.
• Maintain evidence artifacts and traceability.
• Translate security and compliance requirements into actionable controls for engineering.
• Coordinate external audits and remediation.
• Collaborate with third-party providers to align controls.
• Drive audit readiness through continuous gap assessments.
• Identify and communicate compliance risks to stakeholders.

Skills

Security compliance

PCI DSS

SOC 2

GRC

Cloud security

Access control

Change management

Logging & monitoring

Vulnerability management

SaaS/cloud-native

Cross-functional collaboration

US citizenship

Tools

GRC platforms

Control automation

Job description

Entrust Corporation is seeking a Sr. Security Compliance Analyst to lead PCI DSS and SOC 2 programs across diverse environments, including cloud, on-prem, and hybrid.

The role focuses on designing and operating continuous compliance, evidence collection, and remediation planning. You will partner with Security, Engineering, Product, and third-party providers to ensure controls meet Trust Services Criteria and regulatory expectations, while maintaining audit readiness and scalable governance