PCI Assessment Specialist, Global Regulatory Assessments

What you'll do

• Manage concurrent PCI assessments, including timelines, documentation, and scope validation.
• Coordinate with QSAs and control owners to identify compliance gaps, guide remediation, and verify closure.
• Report risk and control findings, and use AI and automation to improve assessment processes.

What they ask for

• At least 5 years of experience in technology risk and controls, risk-based consulting, risk assessments, or audit and regulatory activities, with specific emphasis on PCI DSS.
• Comprehensive practical knowledge of PCI DSS requirements and technology infrastructure, including technology risk and controls and audit coordination.
• Experience driving remediation of PCI findings, validating control closure, and documenting compensating controls through the formal PCI SSC process.
• Strong analytical, communication, planning, coordination, and prioritization skills; ability to work across teams and influence without direct authority.

Nice to have

• Bachelor's degree or equivalent practical experience in a technology, business, or related discipline; financial services experience is preferred.
• Experience with vendor or third-party technical documentation, regulated financial services, IT risk frameworks, or applying AI and automation to compliance workflows.

Pay

USD 147,250.00-$200,000.00 base salary (Brooklyn, NY); USD 147,250.00-$200,000.00 base salary (Jersey City, NJ)

Tools

PCI DSS, COSO, COBIT, NIST CF, ITIL

AI focus

Leverage AI, automation, and emerging technologies to improve assessment efficiency, documentation quality, and risk identification.