Description
Job Description: PCI Analyst (Contractor)
Location: Colombia

Role Summary
The PCI Analyst (Contractor) will support client Cybersecurity’s Payment Card Industry (PCI) compliance program by assisting with assessments, control validation, remediation tracking, and audit readiness. This role collaborates with Security Operations, Infrastructure, Applications, Risk & Compliance, and external partners to ensure PCI DSS requirements are implemented and maintained.
Additionally, the role supports user access governance activities, including periodic access reviews, entitlement validation, and ensuring compliance with client cybersecurity standards.
This position requires independent management of moderately complex compliance assignments, analytical problem-solving, and cross-team collaboration. It aligns with Yum Level 7 expectations for intermediate professional contributors.

Key Responsibilities
PCI Compliance Operations
- Support PCI DSS assessments, evidence collection, and documentation reviews.
- Maintain PCI compliance artifacts (network diagrams, data flows,



inventories, control matrices).
- Track remediation activities and coordinate follow-ups with stakeholders.
- Validate PCI security controls across systems, applications, and infrastructure.

Governance, Risk & Audit Support
- Partner with internal audit, external assessors, and security teams during PCI audits.
- Monitor compliance gaps and escalate risks impacting certification timelines.
- Assist with policy and standard updates aligned with PCI DSS.
- Contribute to risk assessments and exception management for cardholder data environments.
- Coordinate periodic user access reviews for PCI in-scope systems.
- Identify and remediate inappropriate or unauthorized access privileges.
- Validate segregation of duties and least-privilege requirements.
- Track remediation of access-related findings and ensure timely closure.

Technical & Operational Support
- Analyze logs, vulnerabilities, and config

📌 PCI Analyst (Bogotá)
🏢 Lancesoft
📍 Bogotá