Senior PCI & Sensitive Data Compliance Lead

Forvis Mazars US; Houston (TX); On-site; USD 130,000 - 185,000; Full time

Job summary

Forvis Mazars LLP is seeking a Sensitive Data Compliance Lead Consultant to work with Cyber Compliance leadership to expand services and lead PCI DSS projects for enterprise clients, including international and DoD contractors.

The role requires hands-on assessments, risk management, and developing security plans, policies, and POAMs while coordinating across teams to deliver compliant solutions for diverse industries and clients.

Qualifications

• Bachelor's Degree in Cybersecurity, MIS, CS or similar.
• PCI QSA credential.
• Cybersecurity and/or privacy certifications (e.g. CISSP, CISA, CISM).
• Experience with federal cyber compliance frameworks (NIST 800-171, FISMA, FedRAMP).
• Working knowledge of cyber risk management frameworks (NIST CSF, NIST SP 800-53, FISMA, ISO 27001/27002).
• 5+ years in cybersecurity, IT audit, or GRC; 1-2 of PCI DSS, CSF, ISO 27001/27002, FedRAMP/StateRAMP, FISMA/NIST SP 800-53, CIS Controls

Responsibilities

• Lead and execute PCI compliance assessments for enterprise clients with reporting and recommendations.
• Assess IT environments against federal and government cyber frameworks (NIST 800-171, 800-53, FedRAMP, CSF).
• Identify gaps and document clear reporting with proof-of-concept and recommendations.
• Support IT Risk & Compliance teams on PCI and evolving frameworks and pursue continuing education.
• Assist clients on defining in-scope systems, creating SSPs, policies, and POAMs.
• Define and integrate solutions, tools, processes, and data flows to maintain compliance obligations.
• Effectively manage multiple projects concurrently, keeping them on schedule and within budget.

Skills

PCI QSA

CISSP

CISA

CISM

NIST CSF

NIST 800-171

FedRAMP

FISMA

ISO 27001/27002

5+ years cybersecurity

GRC experience

Education

Bachelor's Degree in Cybersecurity, MIS, CS or similar

Job description

Forvis Mazars LLP is seeking a Sensitive Data Compliance Lead Consultant to work with Cyber Compliance leadership to expand services and lead PCI DSS projects for enterprise clients, including international and DoD contractors.

The role requires hands-on assessments, risk management, and developing security plans, policies, and POAMs while coordinating across teams to deliver compliant solutions for diverse industries and clients.