PCI Compliance & Access Review Specialist (Security Engineer)

Teso Life•New York, NY

27d•$100,000 - $150,000•Onsite

About The Position

This specialist guards both the company’s defenses and its compliance cadence, building and operating the security toolchain while managing the PCI calendar, access reviews, and evidence. This role does not set company-level security strategy (owned by the Digital Information Manager); it lands controls onto systems and endpoints and keeps compliance continuously attained.

Requirements

Bachelor’s degree or above; cybersecurity or computer science preferred.
4+ years in security engineering/operations; PCI or GRC experience preferred.
EDR/SIEM/vulnerability tooling; PCI-DSS controls and IAM concepts; Python scripting.
Fast responder with strong evidence discipline; principled; switches fluently between technical and compliance work.

Responsibilities

Build/operate EDR, email security, identity security, logging; land MFA and 802.1X.
Run vulnerability scans and remediation; manage store and cloud baselines.
Run quarterly scans, annual assessment, SAQ/ROC prep; drive remediation to closure.
Maintain the evidence repository; support QSA and external audits.
Review business-system, cloud, and MSP access periodically.
Manage third-party access (incl. warehouse-vendor remote access) onboarding, approval, revocation.
Investigate, contain, and review security incidents.
Provide security review for infrastructure and system changes.