Senior Information Security Compliance Analyst

What you'll do

• Lead and support global PCI audits and assessments to ensure compliance with payment card industry requirements.
• Conduct risk analysis, control testing, and remediation of vulnerabilities related to PCI ASV scanning processes.
• Validate system requirements, workflows, and written procedures through testing to ensure regulatory compliance.
• Identify non-compliance areas and develop new controls or process improvements to mitigate security risks.
• Track the status of remediation plans for control deficiencies and report findings to executive leadership.
• Manage project plans, audit calendars, and key team documents to ensure all milestones are met.
• Develop metrics and reports to monitor the effectiveness of the compliance assessment process.
• Partner with global stakeholders to ensure business activities align with security policies and legal requirements.

What we're looking for

• Bachelor’s degree in computer science, business administration, or a related technical field.
• Experience working in audit or compliance environments in a corporate or consulting capacity.
• 3+ years of experience specifically in PCI regulatory assessments and requirements.
• Must hold a PCI Qualified Security Assessor (QSA) certification.
• Relevant professional certifications such as CISA, PCIP, CISM, or CISSP are required.
• Experience testing cloud controls across AWS, Azure, and GCP environments.
• Subject matter expertise in areas including PCI, Data Privacy, SSAE 18, Swift, and SOX.
• Ability to work a hybrid schedule requiring three days onsite at the Atlanta office.