PCI DSS Compliance Analyst - 12-month Fixed Term Contract

Team SummaryVisa Consulting & Analytics (VCA) Australia, New Zealand, and South Pacific (AUNZSP) is Visa's advisory division, working with Visa's clients (including card issuers, acquirers, and merchants) on a broad range of key business initiatives including strategy, operational optimisation, customer engagement and overall business profitability.VCA is made up of three services lines - Advisory, Data Science and Managed Services, the latter being the execution arm of VCA. Our Managed Services teams (also known as squads) are embedded on client sites leading long-term engagements and delivering value primarily through implementation and execution services. We deliver objectives from a shared value agenda but are also closely connected to the broader VCA team, sharing knowledge, and bringing the best of Visa to the client.We are looking for a dedicated Manager for the role of Payments Card Industry Data Security Standards (PCI DSS) Compliance Analyst embedded with one of our valued clients based in Auckland or Wellington. This role is a 12-month fixed term contract.Role SummaryAs a PCI DSS Compliance Analyst, you will be responsible for ensuring our clients’ adherence to the Payment Card Industry Data Security Standard (PCI DSS). You will assess security controls, manage compliance documentation, and support audit activities to safeguard payment card data. You will deliver work that will uplift compliance with PCI DSS obligations and reduce the risk that card data may be lost from the organisation. You will work collaboratively with both technical and business stakeholders.Key Responsibilities:The PCI DSS Compliance Analyst will work collaboratively with the Card Protect Manager to reduce the risk of card data loss by:· Assessing and managing alerts generated from monitoring software that blocks card data that could leave the organisation or be stored in non-compliant data repositories· Receiving and managing data that identifies where card data is held across LAN drives, including troubleshooting errors· Engaging with stakeholders owning identified card data and briefing them on options for remediation· Maintaining dashboards that show what card data has been identified; what stakeholders have been engaged with and what remedial uplift has been achieved· Providing ongoing reporting on progressThis is a hybrid position. Expectation of 3-days in the office and as confirmed by your Hiring Manager.