About The Position

We are seeking a highly skilled PCI Compliance & Audit Governance Manager to serve as the dedicated end-to-end compliance owner for 2-3 assigned business units within our organization. In this critical role, you will act as the subject matter expert and primary point of accountability for Payment Card Industry Data Security Standard (PCI-DSS) compliance across your assigned scopes from day-to-day control monitoring through annual recertification and third-party audit management. This position bridges the gap between technical security requirements and business operations, requiring a practitioner who can translate PCI-DSS mandates into actionable controls, work cross-functionally with IT, finance, legal, and business leadership, and drive a culture of sustained compliance across their assigned accounts.

Requirements

  • Bachelor’s degree in information security, Computer Science, Information Systems, or a related field; combined 5 plus years professional experience considered.
  • 5+ years of hands-on experience in PCI-DSS compliance, information security, or IT audit roles.
  • Minimum 2 years of direct experience managing PCI-DSS assessments (QSA engagement, ROC/SAQ preparation) as a primary owner.
  • Demonstrated experience managing compliance obligations for multiple business units or organizational scopes simultaneously.
  • 2 plus years working knowledge of PCI-DSS v4.0 requirements, SAQ types, and ROC/AOC processes.
  • 2 plus years Strong understanding of network security concepts, segmentation controls, and cardholder data environment (CDE) scoping methodologies.
  • Familiarity with vulnerability management processes, penetration testing oversight, and security monitoring in payment card environments.
  • Experience with GRC platforms for audit and compliance management.
  • Working knowledge of cloud environments (AWS, Azure, GCP) in PCI-scoped contexts.

Nice To Haves

  • Experience in financial services, payments, retail, or e-commerce industries with large-scale PCI scopes.
  • Prior experience working directly as or alongside a Qualified Security Assessor (QSA).
  • Familiarity with related frameworks (SOC 2, ISO 27001, NIST CSF) and control mapping across standards.
  • Experience managing service provider PCI compliance oversight and third-party risk programs.
  • Exposure to tokenization, point-to-point encryption (P2PE), and other PCI scope-reduction technologies.
  • Scripting or automation experience to streamline evidence collection and monitor workflows.

Responsibilities

  • End-to-End Compliance Governance
  • Annual PCI-DSS Recertification
  • Audit Management
  • Control Monitoring & Continuous Compliance
  • Stakeholder Engagement & Advisory

Benefits

  • Health and Welfare Benefits: Our health and welfare benefits can be tailored to fit you and your family's needs and start on the first day of employment.
  • Retirement Savings: We will support you as you save for your future.
  • Employee Discounts: We offer you access to a vast selection of global, national, and local discounts on merchandise, services, travel, and more.
  • Career Growth Opportunities: We help you thrive, so together, we can grow. We provide opportunities to advance your career with a vast portfolio of businesses and a global footprint.
  • Paid Training: Earn while you learn and continue to grow with access to award-winning learning platforms throughout your Conduent career.
  • Paid time off: We provide attractive paid time off packages designed for you to enjoy your life away from work.
  • Great Work Environment: We are proud of our award-winning culture and the recognition we’ve received for our diversity efforts.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service