Information Security Analyst, PCI

The Information Security Analyst will support Checkout.com’s PCI DSS Level 1 certification program and related payment card industry compliance initiatives by executing daily PCI DSS compliance activities. This includes coordinating with Qualified Security Assessors (QSA) and internal stakeholders for PCI DSS, PCI-SSF, and PCI3DS audits, assisting with evidence collection and submission, and maintaining PCI DSS runbooks, scope documentation, and data flow diagrams. The role involves participating in PCI DSS scope validation and segmentation testing, performing scheduled PCI DSS control checks, tracking remediation actions, and supporting quarterly and annual compliance activities such as penetration testing and vulnerability scanning. Responsibilities also include monitoring and documenting the operational effectiveness of PCI controls, keeping PCI DSS scope narratives and system diagrams updated, preparing PCI status reports, logging compliance exceptions, and responding to PCI DSS-related merchant and partner due diligence requests. Additionally, the analyst will provide PCI DSS awareness sessions to internal teams and promote a security-first culture.