обновлено 21 день назад
Principal Specialist, PCI DSS Compliance (Cybersecurity)
18 000 000 - 26 400 000HUF
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Principal Specialist, PCI DSS Compliance (Cybersecurity): Facilitating a global PCI DSS compliance program across in-scope environments with an accent on risk assessments, audit readiness, control governance, and secure payment processes. Focus on leading internal and external assessments, remediating PCI findings, designing ITGC controls, and supporting second-line (K)SOX audits.
Location: Budapest, Hungary; hybrid work with most office-based roles onsite three days a week
Salary: Ft 18,000,000–Ft 26,400,000 annual gross base salary
Company
develops integrated automotive, lifestyle, and digital transformation technologies across a portfolio of recognized brands.
What you will do
- Facilitate the global PCI DSS compliance program across ’s in-scope environments.
- Conduct PCI DSS gap assessments and risk evaluations, then define risk-based remediation priorities.
- Lead internal and external PCI DSS assessments, coordinate with Qualified Security Assessors, and maintain audit readiness.
- Oversee remediation of PCI findings, including stakeholder coordination, progress tracking, and validation of closure.
- Provide guidance on secure payment handling, cloud and infrastructure controls, applications, and IT governance.
- Design and oversee ITGC control frameworks and support second-line (K)SOX audits.
Requirements
- Bachelor’s or Master’s degree in information security, IT, or a related field.
- At least 5 years of experience in cybersecurity, risk, or compliance roles.
- Strong hands-on PCI DSS experience and experience managing audits and remediation programs.
- Understanding of cloud environments, network security and segmentation, identity and access management, and encryption and key management.
- Ability to communicate effectively in English in reading, writing, and speaking.
- Baseline familiarity with using AI for efficiency, problem-solving, and quality.
Nice to have
- CISSP, CISM, CISA, ISO 27001 LI/LA, PCIP, or ISA certification.
- Experience with payment gateways, tokenization solutions, or e-commerce platforms.
- Experience in a global enterprise with distributed environments.
- Ability to translate regulatory requirements into actionable technical controls.
Culture & Benefits
- Hybrid work environment balancing flexibility with in-person collaboration.
- Employee discounts on and Samsung products.
- Learning and development through University programs.
- Inclusive environment supporting professional and personal development.
- Paid time off, holidays, sick and family leave, health and wellbeing support, and retirement or savings plans may be available depending on local arrangements.
- Up to 5% domestic or international travel may be required.
Hiring process
- Successful completion of a background investigation and drug screen is required as a condition of employment.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →