Practice Lead (PCI Security Compliance)

Key Responsibilities1) Client Delivery & Assessment Leadership

• Lead and deliver PCI DSS assessments (ROC/AOC) for complex Cardholder Data Environments (CDEs) across merchants, service providers, and fintechs.
• Define and manage scope, including network segmentation validation, sample selection, evidence requests, and stakeholder interviews.
• Assess control effectiveness across all applicable PCI DSS requirements, including policies, technical configurations, and operational processes.
• Produce high‑quality deliverables: Reports on Compliance (ROC), Attestations of Compliance (AOC), risk registers, remediation roadmaps, and executive briefings.
• Provide pragmatic remediation guidance and challenge assumptions to drive secure, sustainable compliance outcomes.

2) Technical Advisory

• Advise on secure network architecture, segmentation, tokenization, encryption & key management (HSM/KMS), IAM, logging/SIEM, vulnerability management, and incident response in the context of PCI DSS.
• Review and validate compensating controls, including documentation and risk analysis.
• Guide clients on PCI DSS v4.x transition, scoping strategies (incl. service provider models), and evidence readiness.
• Conduct design and configuration reviews for cloud CDEs (AWS/Azure/GCP), containerized workloads, and modern payment flows (e.g., PCI P2PE, PCI 3DS, PCI Secure Software-where relevant).

3) Engagement & Stakeholder Management

• Serve as the primary point of contact for client executives (CISO, CTO, CIO, Risk/Compliance Leads).
• Translate technical findings into business risk language and action‑oriented recommendations.
• Manage project plans, budgets, timelines, and risk/issue logs; ensure on‑time, on‑budget delivery with high client satisfaction.
• Uphold independence and integrity in all assessment activities.

4) Practice & People Leadership

• Coach and review the work of consultants and senior consultants; uplift methodology, templates, and QA standards.
• Contribute to thought leadership (whitepapers, webinars, client briefings) and pre‑sales support (scoping, SOWs, proposals).
• Identify opportunities to expand client relationships and adjacent service lines (e.g., ISO 27001, SOC 2, cloud security, IR readiness).