Security Assurance & Compliance Snr Lead (PCI)

Job Description:

This position is part of a team at the forefront of securing Mars' global payment systems. In this critical role, you will be instrumental in ensuring Payment Card Industry (PCI) compliance across all Cardholder Data Environments (CDEs) worldwide. This multifaceted position involves both leading PCI audits to deliver attestations of compliance and acting as a key subject matter expert. You will leverage your expertise to advise and influence new projects, guiding them to achieve and maintain robust PCI compliance from inception

In this unique role, you will manage stakeholders across every segment and region, including MVH, SDX and new acquisitions.

What will be your key responsibilities?

• Lead end-to-end PCI DSS assessments, from initial scoping of the cardholder data environment (CDE) to final attestation, ensuring annual compliance and re-attestation for all business-as-usual (BAU) activities. Collaborate with key stakeholders, including CFOs and Mars Treasury, to collect evidence and secure the final Attestation of Compliance (AOC).

• Manage relationships with third-party Qualified Security Assessors (QSAs) for Level 1 PCI assessments, overseeing the annual Report on Compliance (ROC), gap analyses, and quarterly Authorized Scanning Vendor (ASV) scans.

• Serve as the lead technical expert on PCI compliance, guiding business and development teams to engineer secure, low-friction payment solutions that minimize compliance overhead.

• Own and advance the enterprise-wide PCI awareness and education program for all associates involved in card payment processes.

• Drive the strategic use of Archer as the single source of truth for PCI compliance, managing all assessment data and evidence within the platform and partnering with the GRC team on enhancements.