Take on a key role as a Data Security Specialist where you'll help safeguard enterprise systems and data while driving security, risk, and compliance initiatives. In this position, you'll collaborate with a dedicated cybersecurity team to develop and enforce security policies, proactively identify vulnerabilities, and ensure strict adherence to Payment Card Industry (PCI) standards. You'll be instrumental in managing risk, preparing for audits, and performing technical analyses, all within a dynamic, team-oriented atmosphere.
Required Skills & Experience 3-5 years' experience in IT and information security roles (including systems analysis, app development, database administration)
3-4 years' experience with information security, risk, and compliance
Strong hands-on knowledge of PCI compliance (certification a plus)
Understanding of credit card processing regulations and technology footprints across cloud/servers
Ability to write and analyze SQL queries for security and audit purposes
Experience tracking and remediating vulnerabilities with system owners and stakeholders
Comfort managing large datasets (20K+ assets)
Experience with industry security tools (CrowdStrike or similar security technology)
Desired Mindset & Skills Proactive, results-driven attitude, aiming for spotless compliance reports
Strong communication, able to facilitate audits and collaborate with internal/external stakeholders
Experience with evidence review and documentation submission for audits
What You Will Be Doing
Tech Breakdown 40% Security policy enforcement, incident response, vulnerability tracking
30% PCI compliance audits, evidence review, documentation submission
20% Technical analysis, SQL querying, support of in-house security tools
10% Stakeholder communication and collaboration
Daily Responsibilities Plan, design, and enforce enterprise data security policies and procedures
Audit and assess compliance with PCI regulations, track issues and coordinate remediation
Analyze technical configurations, run security queries, and report findings
Liaise with system owners and facilitate audit meetings
Review and document evidence for annual attestations and submit for audit review
Maintain awareness of evolving security technologies and recommend adaptions