PCI Compliance Analyst

Job Description

Job Description

PCI Compliance Analyst
Philadelphia, PA 19103 (hybrid)
Pay: $70,000-90,000Position Overview

We are seeking a Compliance Analyst to support cybersecurity and compliance initiatives focused on Payment Card Industry (PCI) requirements across a large, complex enterprise environment. This role will partner closely with cybersecurity teams, engineers, data teams, application owners, infrastructure teams, and business stakeholders to help ensure systems handling payment card data remain compliant with PCI standards and are prepared for internal and external audits.

The ideal candidate will possess a strong understanding of PCI compliance, payment card processing environments, and enterprise technology infrastructure. This individual will leverage data analysis, compliance reporting, and technical investigation skills to identify vulnerabilities, assess compliance gaps, and support remediation efforts across a large asset footprint.

• Support PCI compliance programs and initiatives across enterprise environments that process, transmit, or store payment card data.
• Assist in the preparation and execution of internal and external PCI assessments and attestation audits.
• Partner with cybersecurity, compliance, engineering, infrastructure, and application teams to ensure adherence to PCI requirements.
• Identify compliance gaps, vulnerabilities, and misconfigurations impacting PCI compliance.
• Analyze large datasets to validate compliance controls and support audit activities.
• Execute SQL queries and perform data analysis to support compliance investigations and reporting.
• Work with system owners to review findings and develop remediation plans.
• Track remediation efforts and provide status updates to stakeholders and leadership.
• Assess compliance scope across network devices, servers, cloud environments, applications, workstations, databases, and supporting infrastructure.
• Review technical documentation, system inventories, architecture diagrams, and control evidence.
• Support risk assessments and compliance reporting activities.
• Assist with policy, process, and control documentation related to PCI compliance requirements.
• Maintain accurate records of findings, remediation activities, and audit evidence.
• Monitor compliance trends and identify opportunities for process improvement and risk reduction.

• 3+ years of experience in compliance, cybersecurity, risk management, information security, audit support, or a related field.
• Strong understanding of PCI DSS compliance requirements.
• Experience supporting PCI audits, assessments, compliance reviews, or attestation activities.
• Knowledge of payment card processing environments and the technologies involved in handling payment card data.
• Strong SQL skills with the ability to query, analyze, and validate large datasets.
• Experience analyzing compliance data across large technology environments.
• Understanding of enterprise infrastructure, including:
  • Network devices
  • Servers
  • Applications
  • Databases
  • Cloud platforms
  • End-user workstations
• Experience identifying vulnerabilities, compliance gaps, and security control deficiencies.
• Ability to work with technical and non-technical stakeholders to drive remediation efforts.
• Strong analytical, investigative, and problem-solving skills.
• Excellent written and verbal communication skills.

• Experience working within a cybersecurity, governance, risk, and compliance (GRC), or audit organization.
• Familiarity with payment processing systems, merchant environments, and cardholder data environments (CDE).
• Experience supporting large-scale compliance programs involving thousands of technology assets.
• Knowledge of vulnerability management and remediation processes.
• Experience working with security assessment tools, reporting platforms, and compliance dashboards.
• Familiarity with cloud security and compliance frameworks.
• Experience working alongside external auditors and assessors.
• Knowledge of regulatory and industry security standards beyond PCI.

• Ability to analyze complex technical environments and identify areas of compliance risk.
• Strong data analysis and reporting capabilities.
• Comfortable working with large asset inventories and enterprise-scale environments.
• Ability to manage multiple projects and priorities simultaneously.
• Strong stakeholder management and collaboration skills.
• Detail-oriented mindset with a focus on accuracy and compliance.
• Ability to explain technical compliance issues to business and technology teams.
• Self-starter with a proactive approach to risk identification and problem resolution.

1. PCI compliance experience.
2. Understanding of payment card processing environments and supporting technologies.
3. Strong SQL skills for querying and analyzing compliance data.
4. Experience identifying vulnerabilities, compliance gaps, and audit findings.
5. Ability to collaborate with system owners to drive remediation and audit readiness.

The ideal candidate combines PCI compliance expertise with strong technical acumen and data analysis skills. They understand how payment card data flows through enterprise environments and can evaluate compliance across applications, networks, cloud infrastructure, servers, and endpoints. This individual is comfortable working with large datasets, identifying compliance risks, supporting audits, and partnering with technical teams to ensure successful remediation and ongoing compliance.