Cybersecurity PCI Analyst – Compliance Contractor

About the role

The PCI Analyst (Contractor) supports the Cybersecurity team in maintaining Payment Card Industry (PCI) DSS compliance. Working across Security Operations, Infrastructure, Application, Risk & Compliance and external partners, the role ensures that PCI requirements are implemented, monitored and continuously improved.

Key responsibilities

• Support PCI DSS compliance assessments, evidence collection and documentation reviews.
• Maintain PCI artifacts such as network diagrams, data flow diagrams, inventories and control matrices.
• Track remediation activities, coordinate follow‑ups with technical and business stakeholders, and validate control implementation.
• Partner with internal audit, external assessors and security teams during PCI audits and readiness reviews.
• Monitor compliance gaps, escalate risks and assist with policy and standard updates.
• Coordinate periodic user access reviews for PCI‑in‑scope systems and validate segregation of duties and least‑privilege requirements.
• Analyze security logs, vulnerability findings and configuration reports relevant to PCI compliance.
• Support continuous compliance monitoring and periodic control testing.

Required profile

• Proven experience managing PCI compliance activities and remediation tracking.
• Strong understanding of PCI DSS requirements and related governance processes.
• Ability to work cross‑functionally with security, infrastructure, application and risk teams.
• Experience coordinating user access reviews and validating access controls.
• Analytical mindset for reviewing security logs, vulnerability data and configuration reports.

Required skills