About this role

The purpose of this role is to serve as a senior subject matter expert in information security with a primary focus on PCI DSS compliance. The role ensures the organization adheres to the information security group framework, manages non-compliance, conducts risk assessments during projects, manages reports on residual risks, and provides ad-hoc security consultancy.

The role is responsible for maintaining and advancing the organization's PCI DSS compliance posture, coordinating assessment activities, and ensuring the security of cardholder data environments (CDE) across all applicable systems and processes.

What you will do

Information Security (General)

- Ensures all regulatory, compliance, and internal standards are adhered to
- Acts as a point of contact to assist the business in ensuring it adheres to the information security group framework and manages any non-compliance
- Conducts risk assessments during projects and manages reports on residual risks; provides ad-hoc security consultancy on projects, both local and group initiatives
- Encourages and nurtures effective working relationships across IT, promoting the one team approach both across departments within IT (onshore and offshore) as well as engaging positively with the Business Community in pursuance of total business solutions
- Ensures that management and staff are made aware of Information Security Policies and Processes relevant to their general working environment and, where necessary, their specific job roles
- Ensures that management and staff are made aware of and understand the information security risks and associated mitigating controls that have been put in place to address them

PCI DSS Compliance

- Manages and maintains the organization's PCI DSS compliance program, ensuring adherence to the current PCI DSS standard (v4.0.1)
- Coordinates and leads the annual PCI DSS Self-Assessment Questionnaire (SAQ) process or Report on Compliance (ROC) activities
- Defines, documents, and maintains the Cardholder Data Environment (CDE) scope, including network segmentation validation
- Liaises with Qualified Security Assessors (QSAs) during external assessments and manages remediation of any findings
- Maintains and updates PCI DSS policies, procedures, and evidence documentation throughout the compliance cycle
- Conducts quarterly internal vulnerability scans and coordinates with Approved Scanning Vendors (ASVs) for external scans
- Monitors and ensures compliance with PCI DSS requirements across all 12 requirement domains
- Manages the PCI DSS compensating controls documentation and ensures controls remain valid and effective
- Coordinates penetration testing activities in alignment with PCI DSS requirements
- Tracks and reports on PCI compliance status to senior leadership and relevant governance committees
- Manages relationships with payment brands, acquiring banks, and third-party service providers regarding PCI compliance obligations
- Ensures new projects, systems, and vendors that interact with cardholder data are assessed for PCI DSS impact
- Leads incident response activities related to potential cardholder data breaches in coordination with the broader security team

What you will bring

- Solid understanding of information security control and governance frameworks (ISO 27001, NIST, COBIT)
- Minimum 3–5 years of direct PCI DSS compliance experience, including assessment coordination and evidence management
- Previous experience of conducting onsite information security audits
- Experience working with payment processors, acquiring banks, or card brands
- Significant information security experience in a regulated environment
- Experience managing third-party service provider compliance and conducting due diligence reviews

What we offer

Our employees play an integral part in our success as a business. We appreciate that each of our employees are unique and have unique needs, ambitions and we enjoy being a part of their journey.

We are there to empower and encourage you with your personal and professional development ensuring that you take control by offering a large variety of courses and targeted development programs. All that in a global environment where international mobility and career progression are encouraged. Caring for your health and wellbeing is key priority for us. This is why we build Work Well programs to providing you with peace of mind and give the flexibility in planning and arranging for a better work-life balance.

At Allianz we use some AI-assisted technology as part of our recruitment process to help match candidates to roles based on skills, experience, job title, and location. AI supports our recruiters by enhancing the efficiency and accuracy of candidate assessments and job recommendations, while all applications are reviewed by our recruitment team and final hiring decisions are made by humans.

This posting is for an existing vacancy.

Annualized base salary range is

- In the US (USD): $76,300 – $111,970
- In Canada (CAD): $66,400 – $97,350

Actual base salary may vary based upon factors such as relevant experience, qualifications, internal equity of peers, and geographic location. Employees may also qualify for performance based bonuses, merit increases, and other incentives based on individual and company performance. The availability and amount of these additional compensation elements are determined by company policy and may vary.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Great to have you on board. Let's care for tomorrow.