Senior Technical PCI Analyst (Hybrid - Seattle)
Core
Own the end-to-end PCI DSS v4.0 compliance program, including scoping, evidence collection, control testing, and QSA coordination, while building operational processes and tooling.
Role type
Senior IC PCI DSS compliance specialist (merchant)
Builds
Sustainable PCI compliance program, asset inventories, control testing libraries, and documentation for a retail e-commerce environment.
Domain
Retail e-commerce, payment security, PCI DSS compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
PCI DSS v4.0 expertise, network segmentation, cloud security (AWS/Azure/GCP), control testing, QSA coordination, GRC platform usage, scoping analysis
Preferred skills
PCI ISA certification, CISA, CISSP, CRISC, cloud security certifications, retail experience, Common Control Framework experience
Technologies
ServiceNow, Archer, Drata, Vanta, AWS, Azure, GCP
Responsibilities
Drive the full PCI DSS v4.0 compliance lifecycle from scoping to QSA coordination; Build and maintain the CDE asset inventory and network segmentation documentation; Design and run periodic control testing programs and evidence collection workflows; Lead scoping conversations with engineering teams to define CDE boundaries; Mentor compliance analysts and act as a trusted advisor to engineering and product teams.
Seniority
Senior, hands-on IC