Job Title : PCI DSS Auditor

We are looking for an experienced and detail-oriented PCI DSS Auditor to join our Information Security team.

- The ideal candidate will be responsible for planning, coordinating, and executing internal and external PCI DSS assessments to ensure compliance with PCI DSS v4.0 standards.

- The role involves conducting comprehensive risk assessments, performing gap analyses, evaluating security controls, and identifying areas of non-compliance across the organization's cardholder data environment.

- The PCI DSS Auditor will work closely with cross-functional teams, including IT, Security, Infrastructure, and Business stakeholders, to collect audit evidence, validate technical and administrative controls, and recommend practical remediation plans.

- The candidate will prepare detailed audit reports, present findings and risk assessments to senior management, and support remediation activities by tracking corrective actions through to successful closure.

- The role also requires close coordination with Qualified Security Assessors (QSAs) during formal PCI DSS certification and validation exercises.

- Additionally, the successful candidate will maintain and update security policies, procedures, standards, and control documentation related to PCI DSS compliance.

- They will stay informed about changes to PCI DSS requirements, emerging security threats, and industry best practices, ensuring the organization remains compliant and audit-ready.

- The role also includes conducting awareness sessions and providing guidance to internal teams on PCI DSS controls and compliance obligations.

Required Qualifications :

- Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field.

- 35 years of experience in IT auditing, cybersecurity, risk management, or compliance.

- Strong hands-on experience with PCI DSS v4.0 assessments and audit methodologies.

- Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls.

- Solid understanding of network security, encryption, identity and access management, vulnerability management, and security governance.

- Excellent analytical, communication, documentation, and stakeholder management skills.