Senior PCI Security Analyst
Jack Henry & Associates, Inc.
Job Description
We are seeking a highly skilled PCI Security Analyst to join our team. The analyst is responsible for ensuring organizational compliance with the Payment Card Industry Data Security Standard (PCI DSS) and related cybersecurity requirements. This role involves conducting compliance assessments, managing audits, implementing security controls, and mitigating risks associated with payment card data.
Remote flexibility is offered within a 70‑mile radius of our office locations in Allen, TX; Birmingham, AL; Cedar Falls, IA; Charlotte, NC; Lenexa, KS; Louisville, KY; Springfield, MO; or Monett, MO. Salary range: $110,000–$125,000, determined by location and experience level. All positions may require an onsite interview or in‑person onboarding to verify identity.
Responsibilities Conduct PCI DSS compliance assessments to identify gaps and risks supporting ongoing security and compliance. Develop, implement, and maintain PCI‑related security policies, standards, and procedures to ensure consistent protection of cardholder data. Monitor and validate compliance with PCI DSS requirements across systems and processes to maintain regulatory adherence.
Execute comprehensive validation of PCI DSS scope across enterprise environments, ensuring accurate identification and classification of in‑scope systems, applications, and data flows. Collaborate with cross‑functional teams to assess segmentation controls, cardholder data locations, and business processes to confirm scope boundaries align with PCI DSS requirements. Document scope rationale and provide evidence‑based recommendations to reduce scope where feasible, while maintaining compliance integrity.
Validate vulnerability assessments and penetration testing to ensure secure configurations. Validate encryption, key management, and secure transmission of cardholder data to protect sensitive information. Support incident response and forensic investigations involving payment card data to enable rapid resolution.
May perform other job duties as assigned. Qualifications Minimum of 6 years of experience in a PCI DSS compliance role. At least one relevant certification (e.g., PCIP, QSA, CISSP, ISA) is required.
Nice to Have A senior level professional with in‑depth body of knowledge, experience, and expertise with the ability to resolve complex issues. Excellent understanding of PCI DSS requirements and security frameworks (e.g., PCI 4.x, NIST, ISO 27001). Strong knowledge of network security, encryption, and secure system configurations.
Strong technical expertise in network security, encryption, vulnerability management, and secure system design. Strong risk management capabilities including the ability to identify, assess, and mitigate compliance and security risks within payment card environments. Demonstrated proficiency using compliance management platforms (e.g., Archer, Qualys, Trustwave), SIEM, and vulnerability scanning tools to support PCI DSS compliance and cybersecurity initiatives.
Equal Employment Opportunity At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business—and our society—stronger.
Jack Henry is an equal‑opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. #J-18808-Ljbffr