PCI Data Risk Analyst

U.S. Bank•Minneapolis, MN

3h•Hybrid

About The Position

U.S. Bank is seeking a Payment Card Industry (PCI) Risk Analyst in Consumer and Business Banking (CBB) to lead PCI Data Security Standard compliance activities in partnership with business line partners. The role requires understanding PCI business processes, communicating PCI requirements, validating compliance, and coordinating the work needed to maintain ongoing compliance. Success is measured by understanding PCI business processes within CBB and effectively executing and overseeing required compliance activities. The analyst is responsible for business line adherence to enterprise policies, including Information Security and Data Protection and Privacy Policies. The role also serves as a business line subject matter expert, supports risk management initiatives, defines and documents the cardholder data environment and related systems and processes, coordinates compliance evidence and remediation work, and maintains documentation and reporting that demonstrate continued compliance. The position follows a hybrid/flexible schedule, with an in-office expectation of three or more days per week and flexibility to work outside the office for the other days.

Requirements

Bachelor's degree or equivalent work experience.
Typically more than six years of applicable experience.
Considerable knowledge of applicable laws, regulations, financial services, and regulatory trends that impact the assigned line of business.
Considerable understanding of the business line’s operations, products and services, systems, and associated risks and controls.
Thorough knowledge of Risk/Compliance/Audit competencies.
Strong analytical, process facilitation, and project management skills.
Effective presentation, interpersonal, written, and verbal communication skills.
Effective relationship-building and negotiation skills.
Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.

Nice To Haves

Applicable professional certifications.

Responsibilities

Act as a business line subject matter expert for PCI Data Security Standard requirements and escalate risks or non-compliance to enterprise partners.
Participate in risk management initiatives related to Data Protection and Information Security.
Work with business line partners to maintain continuous PCI compliance, including identifying and managing PCI processes, people, and technology.
Define and document the scope of the cardholder data environment (CDE), systems connected to the CDE, and business processes within each business unit.
Coordinate PCI compliance activities, including documentation, evidence collection, stakeholder follow-up, and remediation tracking.
Identify compliance gaps, determine necessary next steps, and work with accountable business and technology partners to drive actions through resolution.
Maintain documentation and reporting necessary to demonstrate ongoing PCI compliance.

Benefits

Healthcare coverage, including medical, dental, and vision.
Basic term and optional term life insurance.
Short-term and long-term disability insurance.
Pregnancy disability and parental leave.
401(k) and employer-funded retirement plan.
Paid vacation, from two to five weeks depending on salary grade and tenure.
Up to 11 paid holiday opportunities.
Adoption assistance.
Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
Incentive and recognition programs.
Equity stock purchase.