PCI Compliance Analyst [GRC SOC PCI-DSS SOC NIST]

PCI Compliance Analyst

Remote

Qualifications:

Background as a GRC Analyst as well

5+ years assessing multiple projects and product and infrastructure security risks and recommending mitigating controls

5+ years of security compliance framework experience

Expertise with security standards such as SOX, PCI-DSS, ISO27K, SOC or NIST (some combination of these is ideal)

Technical acumen required. Understanding of one or more of the following technologies/focus areas are ideal - cloud, open sourced distributed systems, security

Great at both collaboration and independent problem solving

Superb written communication and technical research skills

Ability to work in a fast-paced dynamic environment and work on multiple unrelated topics in any given week

Ability to develop relationships and work effectively with different teams at all levels and across functions relative to technical, policy, and business concerns

Experience working in global organizations with diversified cultural, language and time zone environment

Ability to resolve conflicts and drive issues to resolution

Work independently with little or no supervision while maintaining a high level of efficiency

Bachelor's Degree or equivalent experience preferred.

Preferred Qualifications

Current CISA, CISSP, CISM, CIPT or other related certifications

Experience with standards research and contributing to policy reform

Experience with light scripting, API integrations preferred

Demonstrated track record of dealing with ambiguity and complexity in achieving and sustaining compliance across technologies at scale