SISA Information Security - PCI-DSS Auditor

Job Title : PCI DSS Auditor We are looking for an experienced and detail-oriented PCI DSS Auditor to join our Information Security team. - The ideal candidate will be responsible for planning, coordinating, and executing internal and external PCI DSS assessments to ensure compliance with PCI DSS v4.0 standards. - The role involves conducting comprehensive risk assessments, performing gap analyses, evaluating security controls, and identifying areas of non-compliance across the organization's cardholder data environment. - The PCI DSS Auditor will work closely with cross-functional teams, including IT, Security, Infrastructure, and Business stakeholders, to collect audit evidence, validate technical and administrative controls, and recommend practical remediation plans. - The candidate will prepare detailed audit reports, present findings and risk assessments to senior management, and support remediation activities by tracking corrective actions through to successful closure. - The role also requires close coordination with Qualified Security Assessors (QSAs) during formal PCI DSS certification and validation exercises. - Additionally, the successful candidate will maintain and update security policies, procedures, standards, and control documentation related to PCI DSS compliance. - They will stay informed about changes to PCI DSS requirements, emerging security threats, and industry best practices, ensuring the organization remains compliant and audit-ready. - The role also includes conducting awareness sessions and providing guidance to internal teams on PCI DSS controls and compliance obligations. Required Qualifications : - Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field. - 35 years of experience in IT auditing, cybersecurity, risk management, or compliance. - Strong hands-on experience with PCI DSS v4.0 assessments and audit methodologies. - Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls. - Solid understanding of network security, encryption, identity and access management, vulnerability management, and security governance. - Excellent analytical, communication, documentation, and stakeholder management skills.