PCI DSS Auditor

• • Plan, coordinate, and perform internal and external PCI DSS assessments.
  • Conduct risk assessments and gap analyses against PCI DSS requirements.
  • Work with stakeholders across departments to gather evidence and validate compliance.
  • Identify areas of non-compliance and develop recommendations for remediation.
  • Prepare formal audit reports and present findings to management.
  • Liaise with Qualified Security Assessors (QSAs) and support formal PCI DSS validation efforts.
  • Maintain documentation of security policies, procedures, and controls as they relate to PCI DSS.
  • Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
  • Provide training and guidance to internal teams on PCI DSS requirements and best practices.
  • Assist in the remediation of audit findings and track progress until closure.

• • Bachelor s degree in Information Security, Computer Science, Information Systems, or related field.
  • Minimum of 3-5 years of experience in IT auditing, security assessment, or compliance.
  • In-depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits.
  • Familiarity with information security frameworks (e.g., NIST, ISO 27001).
  • Strong understanding of network security, encryption, access control, and vulnerability management.

• • Certification such as PCI ISA, PCI QSA, CISA, CISSP, or CISM.
  • Experience working in regulated industries (e.g., finance, healthcare, e-commerce).
  • Experience with audit tools, GRC platforms, or compliance tracking systems.
  • Excellent verbal and written communication skills.

Required Skills