Location: Rocklin, CA (Preferred)
Work Arrangement: Onsite Monday Thursday, remote Friday
Other Eligible Office Locations: San Francisco, CA; San Jose, CA; The Colony, TX; Olive Branch, MS; Brooklyn, NY; South Brunswick, NJ; Portland, OR
Employment Type: Contract-to-Hire
Duration: 6 months initially, with potential for long-term extension
Bill Rate: $70/hr -$85/hr W2 negotiable
Work Authorization: No restrictions
Start Date: ASAP
Job Summary
We are seeking an experienced PCI Lead / Sr. Security Compliance Manager to lead internal PCI-DSS assessments and support organization-wide compliance initiatives. The ideal candidate will have strong experience reviewing security controls and documentation, identifying compliance gaps, coordinating remediation with technical teams, defining PCI assessment scope, and communicating compliance status to management.
Key Responsibilities
Plan and conduct internal PCI-DSS assessments and establish remediation plans.
Review PCI compliance checklists, security controls, and supporting documentation to identify gaps.
Evaluate business-unit compliance and report findings and compliance status to management.
Recommend improvements to procedures, processes, and assessment scope to maintain compliance.
Guide technical teams in remediating PCI-DSS gaps and implementing sustainable solutions.
Help prioritize remediation activities based on risk and business impact.
Define and refine PCI scope, including remote scoping practices to reduce the overall PCI-DSS environment where possible.
Leverage GRC and security tools to streamline evidence collection and analysis.
Support external PCI-DSS compliance validation across in-scope business units.
Provide PCI-DSS education, training, and mentorship to internal teams.
Build effective working relationships with technical teams, business units, and senior management.
Required Qualifications
Bachelor's degree or equivalent experience.
7+ years of experience in information security.
5+ years of experience in a PCI support or engineering role.
Relevant certification such as CISSP, CISM, CISA, or equivalent.
Extensive knowledge of PCI-DSS, risk assessment, and risk analysis.
Familiarity with security standards and frameworks, including ISO 9000 series, COBIT, Sarbanes-Oxley (SOX), HIPAA, and other relevant security standards.
Strong analytical, communication, and problem-solving skills.
Experience identifying compliance gaps and coordinating remediation activities.
Preferred Qualifications