Senior Security Engineer - GRC (PCI)
Core
Focal point for assigned certification scope, interpreting requirements, executing recurring tests, and managing action plans for audit findings to ensure compliance with regulations and frameworks like PCI DSS.
Role type
Senior GRC Security Engineer (PCI DSS)
Builds
Operational support for security certifications and audit processes
Domain
Financial services / Cybersecurity compliance
Required skills
PCI DSS, SOC2, DORA, NIST, internal controls, cloud environments (AWS, GCP, Azure), audit management, evidence collection, action plan tracking, regulatory interpretation
Preferred skills
PCI ISA, PCIP, CISA, CISM, CISSP, regulated fintech experience, multi-country certification programs
Technologies
AWS, GCP, Azure
Responsibilities
Interpret certification requirements and execute recurring tests; Register, manage, and track action plans from audit findings; Maintain interface with audited and external teams on control implementation; Propose and implement improvements in internal certification processes; Build partnerships with product, engineering, and IT teams to integrate compliance requirements
Seniority
Senior, hands-on IC
