Senior Security Compliance Analyst: PCI DSS & SOC 2 Expert

Entrust Corporation; Field (KY); On-site; USD 120,000 - 160,000; Full time

Job summary

Entrust Corporation is seeking a Senior Security Compliance Analyst to lead and sustain compliance for PCI DSS environments and to support the SOC 2 program. The role designs and executes continuous monitoring, identifies gaps, and drives remediation.

It coordinates third-party audits and measures control effectiveness across cloud, on-prem, and hybrid environments. The ideal candidate has deep PCI DSS expertise, SOC 2 familiarity, and modern GRC experience.

Qualifications

• 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls.
• Hands-on technical and audit experience with PCI DSS and SOC 2.
• Ability to work across multiple time zones with virtual global teams.

Responsibilities

• Lead end-to-end compliance efforts across multiple environments (readiness, audits, continuous monitoring).
• Manage PCI DSS compliance activities and certification processes.
• Support SOC 2 program development, including control design, testing, and evidence collection.
• Maintain evidence artifacts and ensure traceability of evidence.
• Coordinate with security, engineering, product, and third-party providers to align controls with requirements and expectations.

Skills

PCI DSS

SOC 2

GRC

Auditing

Job description

Entrust Corporation is seeking a Senior Security Compliance Analyst to lead and sustain compliance for PCI DSS environments and to support the SOC 2 program. The role designs and executes continuous monitoring, identifies gaps, and drives remediation.

It coordinates third-party audits and measures control effectiveness across cloud, on-prem, and hybrid environments. The ideal candidate has deep PCI DSS expertise, SOC 2 familiarity, and modern GRC experience.