Senior Network Security Engineer – GRC & PCI DSS

About the role

We are looking for a Senior Network Security Engineer with deep expertise in Governance, Risk, and Compliance (GRC) and PCI DSS. You will lead client engagements, assess security controls, and ensure regulatory compliance while protecting our organization’s systems and data.

Key responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Lead PCI DSS assessments, including scoping, control validation, and delivery of Reports on Compliance (ROC), Attestations of Compliance (AOC), and Self‑Assessment Questionnaires (SAQ).
• Coordinate with internal teams and external auditors during PCI DSS audits and certification processes.
• Conduct risk assessments, identify gaps, and recommend mitigation plans.
• Produce clear, evidence‑based compliance reports and advisory documentation for clients.
• Support the creation and review of security governance frameworks, policies, and procedures.

Required profile

• Bachelor’s degree in Computer Science, IT, or a related field.
• 3+ years of experience in information security, GRC, or a similar role.
• Excellent written and spoken English.
• Strong analytical, documentation, and stakeholder‑management skills.

Required skills

• PCI DSS compliance and audit experience.
• Governance, Risk, and Compliance (GRC) frameworks.
• Risk assessment and mitigation planning.
• Information security policy development.