Pci compliance engineer | Alabaster, AL

Detailed Information

  • Location: Mirrormont

and has won many awards for its philanthropy. The company joins with its employees to take an active role in volunteering by sponsoring many opportunities to help others. In 2021, Costco contributed over $58 million to organizations such as United Way and Children's Miracle Network Hospitals.

Is this the role you are looking for If so read on for more details, and make sure to apply today. Costco IT is responsible for the technical future of Costco Wholesale , the third largest retailer in the world with wholesale operations in fourteen countries. Despite our size and explosive international expansion, we continue to provide a family, employee centric atmosphere in which our employees

thrive and succeed. As proof, Costco ranks seventh in Forbes " World's Best Employers"The IT Compliance Engineer is a key member of the IT PCI Compliance team reporting to the Manager of PCI Compliance.

This position will be focused on all aspects of security risk management, privacy, and other industry or regulatory compliance that impact the Costco Wholesale IS infrastructure. In addition, the role will be responsible for working with all groups within Costco Wholesale payment channels globally to ensure overall security policy framework, especially PCI is in place and operating. The Compliance Engineer will work very closely with the IS Security and other IS leadership and

management team members to build and maintain a strong security, risk and compliance program.

The role requires a mix of broad, business and technical acumen with strong people-management skills, and the ability to inspire and influence decisions around security risk management with the business. As such, the position works closely with key global business units such as IS, Legal, Audit, Regional Managers and Senior Management, requiring the ability to balance business needs and security risks. If you want to be a part of one of the worldwide BEST companies " to work for" simply apply and let your career be reimagined. ROLE Provides leadership/mentoring to team members, implements development efficiencies, creates appropriate documentation, drives operational efficiencies and technical growth within the team, and supports the release model.

Provides technical leadership in implementation of applications, strategic planning sessions, and documentation of requirements, tool implementation, database query languages, and programming languages. Serves as a subject matter expert for governance and compliance frameworks for IS and business process regulations/compliance within IS Security GRC. Provides governance for the identification, validation and remediation of information technology controls required by Payment Cardholder Information Data Security Standards (PCI DSS), Personally Identifiable Information (PII) Ensures successful audits of these compliance programs.

Collaborates in the execution of risk management, information security, and data compliance corporate initiatives across all the business units globally. Oversees the development of required corrective action plans relating to data compliance issues. Manages the business relationships with the internal and external auditors backssors. Researches and evaluates new compliance requirements and works with other stakeholders and owners to ensure they are incorporated into the security policy framework, standards, and procedures.

Defines and implements a risk-based approach to identifying, monitoring, measuring and reporting various types of security risk and compliance issues in regards to financial reporting. Identifies and prioritizes risk management, information security, and compliance risks and recommends mitigating controls. Works with counterparts across Costco Wholesale to insure the development and communication of policies, procedures, and plans to internal stakeholders regarding security and risk management best practices and applicable laws and regulations.

Evaluates security and risk backssments of internal business units and external vendors and service providers. Assists in the analysis of compliance readiness backssment findings for California Privacy Law and will lead the identification of ownership, remediation planning and validation. Participates in lines of business and enterprise control functions compliance strategic planning. REQUIRED 5+ years' proven experience developing and executing global security risk management and compliance programs.

Deep understanding in all aspects of risk management, data compliance, information security strategy, technologies and tools. Prior experience supporting a Level 1 or Level 2 organization's PCI DSS compliance effort, working with an ISA or QSA, or serving as a ISA or QSA. Advanced knowledge of all requirements of the current PCI DSS, other significant PCI SSC guidance, and card security and compliance requirements from the major card brands. Advanced knowledge of five or more of the following technical areas: network segmentation, operating system security, encryption and key management, tokenization, antivirus and malware, secure system development, identity and access management, vulnerability management, physical access controls, penetration testing, file integrity monitoring, logging, and information security policy.

Able to scope, interpret and prioritize both application and network vulnerability test results. Ability to identify problems, analyze data and present conclusions effectively. Excellent communication skills, both oral and written, that can communicate security and compliance issues to executives, end users, and stakeholders in an effective and appropriate manner.

Excellent productivity tool skills (spreadsheets, slide decks, documents). Recommended Past or current certifications in one of the following areas: Security+, CISSP, ISA, QSA. Architectural level experience in information security, data compliance, and risk management. Experience managing and working with a variety of teams globally. Ability to propose creative solutions to successfully remediate identified compliance issues. Required Documents Cover Letter Resume California applicants, please click here to review the Costco Applicant Privacy Notice. Pay Ranges: Level 2 - $145,000 - $175,000 Bonus and Restricted Stock Unit (RSU) eligible Level 3 - $165,000 - $195,000 Bonus and Restricted Stock Unit (RSU) eligible Costco is committed to a diverse and inclusive workplace.

Costco is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard of race, national origin, gender, gender identity, interactionual orientation, protected veteran status, disability, age, or any other legally protected status. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to IT-Recruiting@If hired, you will be required to provide proof of authorization to work in the United States.

Applicants and employees for this position will not be sponsored for work authorization, including, but not limited to H1-B visas. PDN-993f786e-ff47-4c16-94cf-148d1bacd9ec For more details: jobs-search. org/finance_washington-r782089/pci-compliance-engineer-mirrormont_i1959027123

View Jobs by Category >>

Related Jobs