Found Description
Overview
You will own PCI-DSS end to end: certification as a service provider, passing audits, and maintaining status year over year. This includes leading scoping, defining the cardholder data environment, driving remediation, and managing the relationship with the QSA. You translate compliance requirements into concrete technical or process changes with evidence that they work, collaborating with engineering and infrastructure to ensure lasting outcomes. You will also lead the broader GRC program, including risk, audits, and frameworks, reporting to the Group CISO with autonomy to run compliance as your own area.
Responsibilities- PCI-DSS certification and maintenance
- Own the PCI-DSS program end to end for a service provider: scoping, gap assessment, remediation, certification, and annual maintenance
- Define and minimize the cardholder data environment; drive segmentation and scope reduction with engineering and infrastructure
- Manage the QS...