PCI & SOX Compliance Specialist
Core
Drive compliance integration between Navan and Reed & Mackay by managing transaction compliance, technical evidence pipelines, and security control mapping for global travel and expense platforms.
Role type
Senior IC PCI & SOX Compliance Specialist
Builds
Production compliance controls and evidence pipelines for Navan's travel and expense platforms
Domain
Financial Services / Cybersecurity Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
PCI DSS technical mechanics, SOX 404 ITGCs, vulnerability remediation, gap analysis, JIRA ticket management, risk register management, access control management, secure code deployment oversight, SAQ execution
Preferred skills
CompTIA Security+, ISO 27001 Internal Auditor
Technologies
JIRA, ServiceNow GRC, AuditBoard
Responsibilities
Oversee quarterly PCI ASV scans and penetration testing cycles; conduct continuous gap analyses and map security controls during infrastructure integration; test and validate IT General Controls under Sarbanes-Oxley Section 404; partner with development teams to automate manual evidence gathering; manage the risk register and remediation tracking lifecycle; collaborate with US-based audit firms and compliance bodies.
Seniority
Senior, hands-on IC