Senior PCI Analyst

CSI•Remote - Kentucky, KY

About The Position

We are seeking a highly skilled PCI Security Analyst to join our team. The analyst is responsible for ensuring organizational compliance with the Payment Card Industry Data Security Standard (PCI DSS) and related cybersecurity requirements. This role involves conducting compliance assessments, managing assessments, and mitigating risks associated with payment card data.

Requirements

Minimum of 5 years of experience in a PCI DSS compliance role.
At least one relevant certification (e.g., PCIP, QSA, CISSP, ISA) is required.

Nice To Haves

A senior level professional with in-depth body of knowledge, experience and expertise with the ability to resolve complex issues.
Excellent understanding of PCI DSS requirements and security frameworks (e.g., PCI DSS 4.0.1, NIST Cybersecurity Framework, ISO 27001).
Strong knowledge of network security, encryption, and secure system configurations.
Strong technical expertise in network security, encryption, vulnerability management, and secure system design.
Strong risk management capabilities including the ability to identify, assess, and mitigate compliance and security risks within payment card environments.
Demonstrated proficiency using compliance management platforms (e.g., Archer, Qualys, ServiceNow).

Responsibilities

Conducts PCI DSS compliance assessments to identify gaps and risks supporting ongoing security and compliance.
Develops, implements, and maintains PCI-related security policies, standards, and procedures to ensure consistent protection of cardholder data.
Monitors and validates compliance with PCI DSS requirements across systems and processes to maintain regulatory adherence.
Executes comprehensive validation of PCI DSS scope across enterprise environments, ensuring accurate identification and classification of in-scope systems, applications, and data flows.
Collaborates with cross-functional teams to assess segmentation controls, cardholder data locations, and business processes to confirm scope boundaries align with PCI DSS requirements.
Documents scope rationale and provides evidence-based recommendations to reduce scope where feasible, while maintaining compliance integrity.
Develops PCI related deliverables assigned to the Enterprise Information Security Services department.
Serves as an internal resource for all business units for PCI DSS compliance consultations.
May perform other job duties as assigned.