PCI Data Risk Analyst

U.S. Bank•Minneapolis, MN

2d•$105,400 - $124,000•Hybrid

About The Position

U.S. Bank is seeking a Payment Card Industry (PCI) Risk Analyst in Consumer and Business Banking (CBB) to lead PCI Data Security Standard compliance activities in partnership with business line partners. The role requires understanding PCI business processes, communicating requirements, validating compliance, and coordinating the work needed to maintain ongoing compliance. Success is measured by thorough knowledge of PCI business processes within Consumer and Business Banking and effective execution and oversight of compliance activities. The analyst is responsible for business-line adherence to enterprise policies, including Information Security and Data Protection and Privacy Policies. The position serves as a business-line subject matter expert, participates in data protection and information security risk initiatives, and coordinates compliance documentation, evidence gathering, remediation, and reporting. The role follows a hybrid/flexible schedule, with an in-office expectation of at least three days per week and flexibility to work outside the office for the remaining days.

Requirements

Bachelor's degree or equivalent work experience.
Typically more than six years of applicable experience.

Nice To Haves

Considerable knowledge of applicable laws, regulations, financial services, and regulatory trends that affect the assigned line of business.
Considerable understanding of the business line’s operations, products and services, systems, and associated risks and controls.
Thorough knowledge of Risk, Compliance, and Audit competencies.
Strong analytical, process facilitation, and project management skills.
Effective presentation, interpersonal, written, and verbal communication skills.
Effective relationship-building and negotiation skills.
Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.
Applicable professional certifications.

Responsibilities

Serve as a business-line subject matter expert on PCI Data Security Standard requirements and escalate risk or non-compliance matters to enterprise partners.
Participate in risk management initiatives related to Data Protection and Information Security.
Work with business-line partners to maintain continuous PCI compliance, including identifying and managing PCI processes, people, and technology.
Define and document the scope of the cardholder data environment (CDE), systems connected to the CDE, and business processes within each business unit.
Coordinate PCI compliance activities, including documentation, evidence collection, stakeholder follow-up, and remediation tracking.
Identify compliance gaps, determine necessary next steps, and work with accountable business and technology partners to resolve them.
Maintain documentation and reporting needed to demonstrate ongoing PCI compliance.

Benefits

Healthcare coverage, including medical, dental, and vision.
Basic term and optional term life insurance.
Short-term and long-term disability insurance.
Pregnancy disability and parental leave.
401(k) and employer-funded retirement plan.
Paid vacation of two to five weeks, depending on salary grade and tenure.
Up to 11 paid holiday opportunities.
Adoption assistance.
Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
Incentive and recognition programs.
Equity stock purchase, 401(k) contribution, and pension, subject to eligibility requirements.