Reported successfully

Job Purpose (Open for Local/Expat Profile)

Payment Gateway Consultant, to drive the successful implementation and continuous compliance of our payment infrastructure. In this role, you will own both the end-to-end delivery of a centralized Payment Gateway project and the strategic alignment of our architecture, technical controls, and operational processes with the latest PCI DSS requirements. The ideal candidate blends strong technical project delivery skills with deep expertise in PCI DSS. You will lead the platform from initial design and rollout through continuous lifecycle management, ensuring the centralized gateway seamlessly serves our entire digital ecosystem while maintaining the successful attainment and annual renewal of the Attestation of Compliance (AOC) and Report on Compliance (ROC).

Key Responsibilities:

• Payment Gateway Project Delivery: Own the full lifecycle delivery of the payment gateway platform. Manage requirements, architectural design, and seamless integrations across diverse digital channels with a centralized payment hub. Successful, on-time rollout of the centralized payment gateway delivery milestones.
• PCI DSS Project Leadership: Act as the single point of contact and subject matter expert for PCI DSS compliance, ensuring all technical and operational milestones are met for both initial certification and ongoing annual renewals.
• Compliance Management: Drive the end-to-end PCI DSS compliance lifecycle, including infrastructure architecture, software compliance, scoping, gap analysis, remediation, and final assessment.
• Technical Advisory: Provide expert guidance on securing payment gateway components, CDE, Non-CDE, on-prem, and cloud infrastructure. Review and confirm technical designs to ensure the chosen approach minimizes scope and adheres to the "Right Approach" for long-term sustainability.
• Scope Reduction: Analyze network diagrams and data flows to identify opportunities for segmenting the network and securely reducing the overall CDE scope.
• Vulnerability & Risk: Oversee regular ASV (Approved Scanning Vendor) scans, internal vulnerability scans, and annual penetration testing, aligning with relevant stakeholders to close any identified gaps in a timely manner.
• Policy Development: Draft, review, update, and maintain security policies and operational procedures to align continuously with the latest PCI DSS standards.
• Evidence Collection & Audit Readiness: Maintain a continuous readiness dashboard and collect artifacts (logs, configs, training records) required for formal audits.
• Stakeholder & Vendor Management: Work closely with payment gateway vendors, development teams, PCI DSS support vendors, wallets, and banks to achieve delivery milestones and compliance goals on schedule.

Education

• Education: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a closely related field. A master’s degree is a plus.
• Certifications: ISA, PCIP, CISA, or CISSP. Experience with major Cloud provider certifications (e.g., Alibaba Cloud) is a plus.

Experience

• Minimum 6+ years in Information Security and Technical Project Delivery, with at least 3 years specifically focused on PCI DSS and infrastructure rollouts within a Payment Gateway, telecommunications, or FinTech environment.

Core Skills

• Hybrid Cloud Expertise: Proven experience securing hybrid environments, Cloud security stacks, and on-premises hardware/networking.
• End-to-End Delivery & Compliance Track Record: Proven success in leading at least one Payment Gateway project from the infrastructure build and integration phase through to launch, alongside obtaining and maintaining an AOC/ROC.
• Stakeholder Management: Exceptional ability to coordinate complex workflows between third-party vendors, wallets, banks, and internal cross-functional teams.
• Technical Deep-Dive: Strong knowledge of network segmentation, HSM integration, tokenization, and data-at-rest encryption within a hybrid framework.