Responsibilities include, but are not limited to: Leading PCI DSS compliance-related activities and certification; Supporting U.S. Federal readiness efforts, including gap assessments against NIST SP 800-53 and tracking remediation activities (POA&M); Maintaining required evidence artifacts and ensuring traceability of evidence; Interpreting and operationalizing compliance requirements into actionable control activities for engineering and operations; Serving as SME for PCI DSS and NIST 800-53 compliance, advising internal teams and customers; Supporting development of FedRAMP artifacts (e.g., SSP, control narratives, shared responsibility matrices); Partnering with control owners to ensure controls meet PCI DSS and NIST 800-53 requirements; Supporting external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation; Driving coordination with third parties (e.g., service providers, hosting partners) to ensure shared control alignment; Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year; Identifying, assessing, and communicating compliance and security risks to stakeholders; Identifying, tracking, and driving closure of audit findings and control deficiencies; and. The ideal candidate brings deep PCI DSS expertise, strong knowledge of the Risk Management Framework, FedRAMP and NIST 800-53 frameworks, and modern GRC experience that enables scalable, automated, and evidence-driven compliance operations.