Security Compliance Manager

About the role

Andela is seeking a Security Compliance Manager to accelerate its information security compliance posture across IT and Digital Transformation. The role serves as the technical compliance arm of the InfoSec function, tracking, evidencing, and reporting remediation progress against the CBE Cybersecurity Framework, PCI DSS obligations, and internal controls.

Key responsibilities

• Maintain a live compliance tracker for all active CBE Cybersecurity Framework control domains (IAM, PAM, GRC, Container Security, etc.).
• Conduct regular technical walk‑throughs with IT and Digital Transformation teams to validate implementation status and close evidence gaps.
• Escalate risks and blockers to the Head of GRC and CISO using risk‑quantified language for Risk Committee reporting.
• Map remediation actions to OKR key results and track delivery against agreed timelines.
• Prepare compliance status reports for senior management and regulatory audiences.
• Own the end‑to‑end PCI DSS engagement cycle, including scoping, gap assessment, remediation tracking, QSA coordination, and readiness for Report on Compliance or Self‑Assessment Questionnaire.
• Coordinate across IT, Operations, and Digital teams to ensure cardholder data environment controls are implemented, evidenced, and maintained.
• Manage the relationship with the Qualified Security Assessor and act as the internal point of contact throughout the assessment cycle.
• Drive closure of PCI DSS findings and maintain a compensating controls register where technical controls are not yet feasible.

Required profile

• Proven experience in information security compliance, preferably within a technology‑focused organization.
• Strong understanding of the CBE Cybersecurity Framework and PCI DSS requirements.
• Ability to work cross‑functionally with IT, operations, and digital teams.
• Excellent communication skills for reporting to senior leadership and regulatory bodies.
• Detail‑oriented with a focus on evidence collection and risk quantification.

Required skills

• CBE Cybersecurity Framework
• PCI DSS
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Governance, Risk, and Compliance (GRC)
• Container Security
• Risk quantification and reporting

What we offer

• Full‑time remote‑first position with a global community of technologists.
• Opportunity to work on high‑impact security compliance initiatives.
• Access to Andela’s learning and career development resources.