Bachelor's degree in Information Security, Information Technology, Cybersecurity or related field.
One or more Information Security / compliance related certifications are preferred, such as Certified Information Systems Security Practitioner (CISSP), Certified Information Systems Auditor (CISA), Procurement Card Industry Internal Security Assessor (PCI ISA), PCI Professional (PCIP), Certified Information Security Manager (CISM).
Practical knowledge of PCI DSS requirements.
Practical knowledge of governance, risk, and compliance (GRC) platforms.
Familiarity with security processes such as Vulnerability management, Access management, Logging and monitoring, Encryption technologies, Network segmentation, Security incident management.
Understanding of security frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS.
2 or more years of experience in PCI or other regulatory IT compliance, information security efforts.
Experience in financial services, payments, retail, healthcare, or other regulated industries.
Experience in a similar governance, risk and compliance role for a large-scale organization.
Equivalent combination of education and experience will be considered sufficient.
