PCI DSS Auditor

Role overview

PCI DSS Auditor at SISA Information Security

Plan, coordinate, and perform internal and external PCI DSS assessments.

We are seeking a knowledgeable and detail-oriented PCI DSS Auditor to join our compliance and information security team.

Responsibilities

• Conduct risk assessments and gap analyses against PCI DSS requirements.
• Work with stakeholders across departments to gather evidence and validate compliance.
• Identify areas of non-compliance and develop recommendations for remediation.
• Prepare formal audit reports and present findings to management.
• Liaise with Qualified Security Assessors (QSAs) and support formal PCI DSS validation efforts.
• Maintain documentation of security policies, procedures, and controls as they relate to PCI DSS.
• Monitor changes to PCI DSS and related regulations to ensure ongoing compliance.
• Provide training and guidance to internal teams on PCI DSS requirements and best practices.
• Assist in the remediation of audit findings and track progress until closure.

Required qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field.
• Minimum of 3–5 years of experience in IT auditing, security assessment, or compliance.
• In-depth knowledge of PCI DSS v4.0 and prior experience conducting PCI audits.
• Familiarity with information security frameworks (e.g., NIST, ISO 27001).
• Strong understanding of network security, encryption, access control, and vulnerability management.

Preferred qualifications and skills

• Certification such as PCI ISA , PCI QSA , CISA , CISSP , or CISM .
• Experience working in regulated industries (e.g., finance, healthcare, e-commerce).
• Experience with audit tools, GRC platforms, or compliance tracking systems.
• Excellent verbal and written communication skills.

Employment details

• Location: Gurugram [DL] [India]

Additional role details

• The auditor will be responsible for planning, executing, and managing audits to ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS) .
• The ideal candidate will have deep knowledge of PCI DSS requirements and a strong background in IT security, risk management, and regulatory compliance.