Manager - Compliance & Infosec ( PCI DSS )

Job description
Lead the implementation of PCI DSS requirements across all relevant systems and processes.
Collaborate with IT, SRE, Development teams and vendors, and other stakeholders to ensure compliance with PCI DSS standards.
Develop and maintain policies, procedures, and technical controls to meet PCI DSS requirements.
Conduct regular internal audits/reviews to assess compliance with PCI DSS standards.
Ensure Vulnerability assessments and penetration tests are performed on systems handling cardholder data.
Lead efforts to remediate any identified vulnerabilities or gaps in PCI DSS compliance.
Monitor security systems and respond to security incidents related to cardholder data.
Maintain comprehensive documentation of PCI DSS compliance efforts, audit findings, and remediation plans.
Prepare and present reports on compliance status and improvement recommendations to management and stakeholders.
Provide training and awareness sessions on PCI DSS requirements and best practices to employees and stakeholders.
Identify and assess risks related to cardholder data and recommend mitigating controls.
Act as a subject matter expert on PCI DSS during internal and external discussions and audits.
What skills do I need
Atleast 8+ years of relevant experience in implementing, auditing, and managing PCI DSS certification
Strong knowledge of PCI DSS standards, requirements, and best practices.
Work as an Individual Contributor
Experience conducting PCI DSS audits
Experience working in a Payments environment
Familiarity with security technologies, including firewalls, encryption, intrusion detection/prevention systems, etc.
Excellent communication skills with the ability to explain technical concepts to non-technical audiences.
Be Proactive, organized, analytical, detail-oriented and persistent
Priori experience working as a PCI QSA or PCI ISA is highly desirable
Certifications preferred: CISA, CISM, CISSP
Previous Experience in a Product SaaS company is an advantage
Role: Risk Management & Compliance - Other
Industry Type: Software Product
Department: Risk Management & Compliance
Employment Type: Full Time, Permanent
Role Category: Risk Management & Compliance - Other
Education
UG: Any Graduate
PG: Any Postgraduate
Key Skills
CismPCI DSSremediationCisaEmployee managementAnalyticalCustomer retentionWellnessCRMAuditing