Principal Specialist, PCI DSS Compliance
$31,200–$31,200 year
HybridLodz, Greater Poland Voivodeship, Republic of Poland
Job Summary
Facilitate the global PCI DSS compliance program across HARMAN environments, ensuring consistent implementation and alignment with business and technology teams. Conduct PCI DSS gap assessments and risk evaluations for in-scope systems, define remediation priorities, and oversee the closure of identified gaps. Lead internal and external PCI DSS assessments as the primary liaison for QSAs, while enhancing governance through control frameworks, policies, and procedures. Provide expert guidance to business, IT, and product teams on secure payment handling and support second-line functions for internal and external SOX audits. This role requires a Bachelor's or Master's degree, 5+ years in cybersecurity compliance, and strong cloud and identity management experience. Travel up to 5% is required, with domestic or international options available.
Required Qualifications
- Bachelor's or Master's degree in information security, IT, or related field
- 5+ years of experience in cybersecurity, risk or compliance roles
- Strong hands-on experience with PCI DSS
- Proven experience managing audits (internal/external) and remediation programs
- Strong understanding of cloud environments, network security and segmentation, identity and access management, encryption and key management
- Ability to effectively communicate in English, including reading, writing and speaking
- Be willing to travel up to 5%, domestic only OR domestic and international travel
- Successfully complete a background investigation and drug screen as a condition of employment
Desired Qualifications
- Industry certifications (CISSP, CISM, CISA, ISO 27001 LI/LA)
- PCI certifications (PCIP, ISA)
- Experience with payment gateways, tokenization solutions, or e-commerce platforms
- Experience operating in a global enterprise with distributed environments
- Strong ownership mindset and ability to drive compliance programs end-to-end
- Ability to translate regulatory requirements into actionable technical controls
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.