PCI Compliance & Risk Management Lead

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.  We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

We are looking for a highly skilled IT professional with strong PCI and risk management expertise to own planning, coordinating and managing PCI assessments for Payments.  

Top Skills:

• PCI Compliance
• Archer
• Data Loss Prevention (DLP)
• Risk Management

Main Responsibilities include:

• Provides risk management support to line of business by identifying, documenting, and implementing consistent processes for monitoring controls to mitigate risk.
• Promotes general awareness of risk management policies and issues and coordinates efforts to foster awareness and understanding of key risk management concepts within the business line network.
• Works with business line management to help ensure the implementation of key risk management practices and procedures in the normal course of business operations.
• Ensures that controls used to mitigate business risks are properly designed, executed, and documented.
• Serves as a consult to ensure facilitation/oversight and response to inquiry/examination.
• Working with Technical Resources to ensure compliance with PCI Requirements
• Providing teams with guidance on multiple levels
• Direct Consulting to Sr Business Leaders
• Direct Consulting to Sr Technology LeadersCoaching Technology Leaders to understand ways to become compliant
• Challenging the interpretation of requirements as appropriate or applicable
• Building or Coaching Technology Teams on how to build Data Flow Diagrams and documentation
• Determining Scope and reducing Scope where appropriate
• Helping Technology teams as a solution provider and collaborator

Basic Qualifications

• Bachelor's degree, or equivalent work experience
• Seven or more years of experience with the processes, tools and techniques for assessing and controlling an organization's exposure to risk
• Four or more years of experience with a total Information Technology (IT) environment

Preferred Skills/Experience

• Experience with creating and maintaining a Compliance Program
• Strong understanding of Cloud Environments and the importance of being compliant with PCI DSS requirements
• Hands on PCI experience , Working with 4.0, assessors
• Experience developing Application Requirements Documents or Readiness Documents.
• Experience using a GRC application i.e. Archer, Service Now
• Experience with IAM, Entitlements, Roles and the impact to PCI and PCN
• Demonstrated ability to apply PCI Compliance across both On Prem and Cloud Environments
• Ability to interact with all levels of management
• Excellent presentation, verbal and written communication skills

If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Benefits: 

Our approach to benefits and total rewards considers our team members’ whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following (some may vary based on role, location or hours):

• Healthcare (medical, dental, vision)

• Basic term and optional term life insurance

• Short-term and long-term disability

• Pregnancy disability and parental leave

• 401(k) and employer-funded retirement pla