Sr. Pci Internal Security Assessor

TransUnion's Job Applicant Privacy Notice

What We'll Bring:
At TransUnion, we have a welcoming and energetic environment that encourages collaboration and innovation. We're consistently exploring new technologies and tools to be agile. This environment gives our people the opportunity to hone current skills and build new capabilities, while discovering their genius.

Come be a part of our team - you'll work with great people, pioneering products and cutting-edge technology.

The Internal Security Assessor will be responsible for providing subject matter expertise in the area of PCI compliance requirements and working with all relevant stakeholders/departments to coordinate the gather supporting evidence related to annual PCI certification.

What You'll Bring:

• Experience with PCI certification assessments (current/previous QSA/ISA certification preferred)
• Experience with PCI certification assessments (current/previous QSA/ISA certification preferred)
• Ability to interpret PCI DSS compliance requirements and provide guidance and support to impacted business units
• Solid Information Security foundation and familiarity with various security frameworks (e.g. SSAE 18, ISO27002, HIPAA, etc.)
• Bachelor's degree in Computer Science or 7 years equivalent experience with PCI DSS controls
• Experience in certifying Amazon Web Service (AWS) cloud environments for PCI
• Active security certifications such as: CISSP, CISA, CRISC, etc.

We'd Love to See

• Design, lead and execute a compliance program focused on PCI security controls across the global organization
• Track, document and address PCI compliance gaps to ensure timely closure
• Lead security enhancement projects focused on new or changing PCI compliance requirements
• Knowledge and experience in driving compliance against all versions of the PCI-DSS standard, globally
• Continuously improve the PCI compliance program with new information, procedures, or documentation

Impact You'll Make:

• Participate in managing the annual PCI assessment including evidence gathering, quality assurance of evidence, coordinating meetings with subject matter experts, and other tasks required to successfully complete the assessment
• Promote the program's objectives in alignment with business needs and priorities
• Ability to manage multiple projects and adapt to changing priorities
• Understanding of and/or experience with a variety of GRC tools (i.e. Archer, SAP, etc.)
• Ensure PCI ASV scans and penetration testing efforts are conducted on defined frequency, and remediation activities are completed
• Reviewing existing internal policies and standards for alignment with PCI DSS controls

Benefits:

TransUnion provides flexible benefits including flexible time off for exempt associates, paid time off for non-exempt associates, tuition reimbursement, primary parental leave of at least 16 weeks, secondary parental leave of 4 weeks, adoption assistance, fertility planning coverage, spousal and domestic partner benefits, bonus incentives, charity gift matching, employee stock purchase plan, retirement contributions with employer match, organizational growth potential through our online learning platform with guided career tracks, and access to TransUnion's Employee Resource Groups.

We are committed to being a place where diversity is not only present, it is embraced. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, genetic information, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law.

TransUnion's Internal Job Title:
Sr Advisor, InfoSec Governance