Security Assurance & Compliance Snr Lead (PCI)

Job Description:

This position is part of a team at the forefront of securing Mars' global payment systems. In this critical role, you will be instrumental in ensuring Payment Card Industry (PCI) compliance across all Cardholder Data Environments (CDEs) worldwide. This multifaceted position involves both leading PCI audits to deliver attestations of compliance and acting as a key subject matter expert. You will leverage your expertise to advise and influence new projects, guiding them to achieve and maintain robust PCI compliance from inception

In this unique role, you will manage stakeholders across every segment and region, including MVH, SDX and new acquisitions.

What will be your key responsibilities?

• Lead end-to-end PCI DSS assessments, from initial scoping of the cardholder data environment (CDE) to final attestation, ensuring annual compliance and re-attestation for all business-as-usual (BAU) activities. Collaborate with key stakeholders, including CFOs and Mars Treasury, to collect evidence and secure the final Attestation of Compliance (AOC).

• Manage relationships with third-party Qualified Security Assessors (QSAs) for Level 1 PCI assessments, overseeing the annual Report on Compliance (ROC), gap analyses, and quarterly Authorized Scanning Vendor (ASV) scans.

• Serve as the lead technical expert on PCI compliance, guiding business and development teams to engineer secure, low-friction payment solutions that minimize compliance overhead.

• Own and advance the enterprise-wide PCI awareness and education program for all associates involved in card payment processes.

• Drive the strategic use of Archer as the single source of truth for PCI compliance, managing all assessment data and evidence within the platform and partnering with the GRC team on enhancements.

• Lead the integration of newly acquired businesses into the Mars PCI Compliance program, ensuring timely and successful completion of their initial compliance attestations.

• Continuously mature the PCI program by identifying and implementing improvements to testing methodologies, compliance reporting, and overall program efficiency.

Scope

• As a critical Individual Contributor within our Global PCI Compliance team, you will partner directly with business teams, Mars Treasury, and CFOs across our segments to drive and execute annual PCI DSS assessments. In this highly visible role, you will perform technical scoping, collect vital compliance evidence, and leverage Archer as our enterprise single source of truth. Additionally, you will act as a trusted advisor, educating and training project teams to design PCI-compliant solutions from the ground up.

• Strategic Stakeholder Collaboration: Partner closely with business units, Mars Treasury, and segment CFOs to fulfill complex annual regulatory PCI assessment requirements.

• Assessments & Scoping: Conduct end-to-end PCI scoping and technical assessments; gather, validate, and maintain evidence files within Archer to preserve our single source of truth.

• Metrics & Reporting: Develop, track, and visualize compliance metrics and trend analyses to clearly communicate Mars Inc.'s PCI posture to executive leadership.

• Enablement & Training: Deliver proactive education, guidelines, and training to global project teams onboarding new initiatives within PCI scope.

#TBdigital