Lead PCI Analyst

Bonterra

Lead PCI Compliance Analyst managing PCI DSS Level 1 certification and risk analysis at Bonterra. Collaborating with engineering teams and advising on payment security architecture.

Posted 6/22/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $139,991 - $174,009 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PCI DSSrisk analysisPCI control selectionevent managementremediation oversightgreenfield workstreamsISO 27001AI componentsmachine learningcloud native services

Soft Skills

analytical skillsorganizational skillscommunication skillsleadershipadvisory skills

Tools & Technologies

GRC platformsticketing systemssecurity tooling

Industry Keywords

PCI Level 1DSS v4.0.1QSA assessorsrisk acceptance trackingcompensating controls

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own end to end PCI DSS Level 1 readiness, certification activities, and coordination with QSA assessors
Advise Engineering and Product teams during the design phase on PCI control selection
Lead and manage response to PCI Level 1 events, including investigation and remediation oversight
Serve as a Senior Risk Analyst conducting in depth risk analysis on PCI security by design questions
Drive greenfield workstreams that establish new PCI controls or architectural patterns
Maintain scope documentation, evidence, and operational reports for PCI controls
Manage issues, exceptions, compensating controls, and risk acceptance tracking

Requirements

What you’ll need

7 or more years of PCI DSS program management experience with direct involvement in Level 1 merchant or service provider assessments under DSS v4.0.1
Demonstrated experience advising engineering teams during the design phase
Proven track record leading or coordinating PCI Level 1 events end to end
Senior risk analyst depth, ability to conduct independent risk analysis
Working understanding of AI and machine learning components in payment environments
Experience engaging QSAs from an authoritative posture
Hands on field experience working directly within engineering and infrastructure teams
Familiarity with ISO 27001 and cloud native service environments
Strong analytical, organizational, and communication skills
Experience with GRC platforms, ticketing systems, and security tooling

Benefits

Comp & perks

Comprehensive benefits package that supports your health, well-being and growth
Compensation and benefits for this role apply to full-time employees in the United States and may vary based on local standards, laws and norms.
Pay is determined by location, skills, experience, and education
May include bonuses, incentives, equity, and a comprehensive benefits program