The Role
Plans and conducts PCI DSS assessments, risk analyses, and gap assessments; gathers evidence, identifies non-compliance, prepares audit reports, and supports remediation. Coordinates with stakeholders and Qualified Security Assessors, maintains PCI-related policies and controls, monitors regulatory changes, and provides PCI DSS training and guidance.
Summary Generated by Built In
Job Summary:
We are seeking a knowledgeable and detail-oriented PCI DSS Auditor to join our compliance and information security team. The auditor will be responsible for planning, executing, and managing audits to ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS). The ideal candidate will have deep knowledge of PCI DSS requirements and a strong background in IT security, risk management, and regulatory compliance.
Key Responsibilities:
- Plan, coordinate, and perform internal and external PCI DSS assessments.
- Conduct risk assessments and gap analyses against PCI DSS requirements.
- Work with stakeholders across departments to gather evidence and validate compliance.
- Identify areas of non-compliance and develop recommendations for remediation.
- Prepare formal audit reports and present findings to management.
- Liaise with Qualified Security Assessors (QSAs) and support formal PCI DSS validation efforts.
- Maintain documentation of security policies, procedures, and controls as they relate to PCI DSS.
- Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
- Provide training and guidance to internal teams on PCI DSS requirements and best practices.
- Assist in the remediation of audit findings and track progress until closure.
Required Qualifications:
- Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field.
- Minimum of 3–5 years of experience in IT auditing, security assessment, or compliance.
- In-depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits.
- Familiarity with information security frameworks (e.g., NIST, ISO 27001).
- Strong understanding of network security, encryption, access control, and vulnerability management.
Preferred Qualifications:
- Certification such as PCI ISA, PCI QSA, CISA, CISSP, or CISM.
- Experience working in regulated industries (e.g., finance, healthcare, e-commerce).
- Experience with audit tools, GRC platforms, or compliance tracking systems.
- Excellent verbal and written communication skills.
Skills Required
- Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field
- 3-5 years of experience in IT auditing, security assessment, or compliance
- In-depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits
- Familiarity with information security frameworks such as NIST and ISO 27001
- Strong understanding of network security, encryption, access control, and vulnerability management
- PCI ISA, PCI QSA, CISA, CISSP, or CISM certification
- Experience working in regulated industries such as finance, healthcare, or e-commerce
- Experience with audit tools, GRC platforms, or compliance tracking systems
- Excellent verbal and written communication skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
