RCA PCI Consultant

U.S. Bank•Englewood, CO

3d•Hybrid

About The Position

Responsible for leading and advancing the organization’s Payment Card Industry (PCI) compliance and assessment program through strategic risk management, independent oversight, and subject matter expertise. This role operates within a Second Line of Defense (2LOD) model, providing credible challenge, governance, and alignment to enterprise risk management objectives. The RCA Professional serves as an expert responsible for driving PCI compliance strategy, influencing policy and control design, and ensuring the organization maintains regulatory alignment while enabling business outcomes. This role partners with stakeholders across business lines, technology, and risk functions to proactively identify risks, guide remediation, and strengthen the overall control environment.

Requirements

Bachelor's degree, or equivalent work experience
Typically more than eight years of applicable experience
Advanced knowledge of PCI compliance frameworks and regulatory expectations
Experience leading complex regulatory assessments and working with assessors
Ability to articulate complex technical and regulatory concepts in a clear and concise manner
Considerable knowledge of applicable laws, regulations, financial services, and regulatory trends that impact their assigned line of business
Considerable understanding of the business line’s operations, products/services, systems, and associated risks/controls
Thorough knowledge of Risk/Compliance/Audit competencies
Strong analytical, process facilitation and project management skills
Effective presentation, interpersonal, written and verbal communication skills
Effective relationship building and negotiation skills
Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations
Applicable professional certifications

Responsibilities

Leading and advancing the organization’s Payment Card Industry (PCI) compliance and assessment program through strategic risk management, independent oversight, and subject matter expertise.
Operating within a Second Line of Defense (2LOD) model, providing credible challenge, governance, and alignment to enterprise risk management objectives.
Driving PCI compliance strategy, influencing policy and control design, and ensuring the organization maintains regulatory alignment while enabling business outcomes.
Partnering with stakeholders across business lines, technology, and risk functions to proactively identify risks, guide remediation, and strengthen the overall control environment.

Benefits

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension