Information Security Risk Manager - Bank

- Support in achieving PCI DSS 3.2.1 and PCI DSS 4.0 annual certification

- Support regulatory / compliance activities for card data security across Bank

- Support PCI PIN and PCI P2PE compliance activities across Bank

- Monitor and maintain Bank's Merchant, Service Provider and Aggregator's PCI DSS and PCI SSF certification

- Track and manage cardholder data discovery activities

- Monitor and manage team's assigned activities and goals

- Self and team's professional development For PCI DSS v3.2.1 and PCI DSS v4.0

- Fully compliant RoC and AoC each

- Project plan, escalation matrix for all stakeholders, MoM with stakeholders

- For regulatory / compliance activities and PCI PIN and P2PE

- Gap assessment tracker, stakeholders for all identified gaps, weekly updates, timely closure of all identified gaps

- For Merchant, SP and Aggregator Compliance

- Maintain updated list of Merchant and Service Providers

- Monitor and escalate merchant and SP compliance

- Cardholder data discovery

- Coordinate, track and escalate cardholder discovery scanning activities in timely manner

- Self and team development

- At least quarterly calls with team to review and monitor their KRA compliance

- Achieve at least one technical and one non- technical certification for self