The Role
Plans and executes PCI DSS v4.0 assessments, risk assessments, gap analyses, and security control evaluations. Collects audit evidence, identifies non-compliance, prepares reports, recommends remediation, and tracks corrective actions. Coordinates with QSAs during certification exercises, maintains PCI DSS policies and documentation, monitors regulatory and threat developments, and provides compliance guidance and awareness training to internal stakeholders.
Summary Generated by Built In
Job Title: PCI DSS Auditor
We are looking for an experienced and detail-oriented PCI DSS Auditor to join our Information Security team. The ideal candidate will be responsible for planning, coordinating, and executing internal and external PCI DSS assessments to ensure compliance with PCI DSS v4.0 standards. The role involves conducting comprehensive risk assessments, performing gap analyses, evaluating security controls, and identifying areas of non-compliance across the organization's cardholder data environment.
The PCI DSS Auditor will work closely with cross-functional teams, including IT, Security, Infrastructure, and Business stakeholders, to collect audit evidence, validate technical and administrative controls, and recommend practical remediation plans. The candidate will prepare detailed audit reports, present findings and risk assessments to senior management, and support remediation activities by tracking corrective actions through to successful closure. The role also requires close coordination with Qualified Security Assessors (QSAs) during formal PCI DSS certification and validation exercises.
Additionally, the successful candidate will maintain and update security policies, procedures, standards, and control documentation related to PCI DSS compliance. They will stay informed about changes to PCI DSS requirements, emerging security threats, and industry best practices, ensuring the organization remains compliant and audit-ready. The role also includes conducting awareness sessions and providing guidance to internal teams on PCI DSS controls and compliance obligations.
Required Qualifications:
- Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field.
- 3–5 years of experience in IT auditing, cybersecurity, risk management, or compliance.
- Strong hands-on experience with PCI DSS v4.0 assessments and audit methodologies.
- Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls.
- Solid understanding of network security, encryption, identity and access management, vulnerability management, and security governance.
- Excellent analytical, communication, documentation, and stakeholder management skills.
Skills Required
- Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field
- 3-5 years of experience in IT auditing, cybersecurity, risk management, or compliance
- Hands-on experience with PCI DSS v4.0 assessments and audit methodologies
- Familiarity with NIST, ISO 27001, and CIS Controls
- Understanding of network security, encryption, identity and access management, vulnerability management, and security governance
- Strong analytical, communication, documentation, and stakeholder management skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
