Information Security

Sr. Security Compliance Analyst - PCI DSS & SOC 2

Entrust

Remote · Oregon · United States

Join us at Entrust

At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.
Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.
Entrust is seeking a highly skilled Senior Security Compliance Analyst to lead and sustain compliance for multiple PCI DSS environments while supporting the maturity and execution of our SOC 2 program.
This role is responsible for designing and executing continuous compliance monitoring activities, identifying gaps and leading associated remediation efforts, planning and leading third-party audits, and measuring control effectiveness across cloud-based, on-prem and hybrid environments. The ideal candidate brings deep PCI DSS expertise, strong SOC 2 familiarity, and modern GRC experience that enable scalable, automated, and evidence-driven compliance operations.
This position partners closely with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned to business, statutory and regulatory expectations.
Lead and support end-to-end compliance efforts across multiple environments, including readiness assessments, audits, and continuous monitoring activities to ensure sustained security posture and audit readiness. Leading PCI DSS compliance-related activities and certification;
Supporting the evolution and execution of the SOC 2 program, including control design, testing, and evidence collection;
Interpreting and operationalizing security and compliance requirements into actionable control activities for engineering and operations;
Serving as SME for PCI DSS and SOC 2 compliance, advising internal teams and customers;
Partnering with control owners to ensure controls meet PCI DSS requirements and Trust Services Criteria (Security, Availability, Confidentiality, etc.);
Supporting external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation;
Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year;
Identifying, assessing, and communicating compliance and security risks to stakeholders;
Identifying, tracking, and driving closure of audit findings and control deficiencies; Contributing to the development and maintenance of security policies, standards, and procedures.
5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls, including how they support one another
~ Hands-on technical and audit experience with PCI DSS and SOC 2 compliance
~ Ability to work across multiple time zones with virtual global teams
~ Cloud environments and shared responsibility models
~ Access control, change management, logging and altering, and vulnerability management and other security domains

Experience working in SaaS or cloud-native environments
Experience supporting multiple compliance frameworks (PCI DSS, PCI CP, SOC 2, FedRAMP, ISO 27001, etc.)
Experience with modern GRC platforms and control automation
Familiarity with continuous compliance / continuous monitoring models
based candidates and will be fully remote.
Entrust technologies and expertise help government agencies, enterprises and financial institutions in more than 150 countries, serve and safeguard citizens, employees and consumers. For more information, visit

Follow us on, LinkedIn, Facebook, Instagram, and YouTube
Entrust Corporation is an EOE/AA/Veteran/People with Disabilities employer.
NO AGENCIES, NO RELOCATION

Whether you’re remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.

~ Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we’re creating a community where everyone is encouraged to be themselves.

Follow us on,

LinkedIn

,

Facebook

,

Instagram

, and

YouTube
In addition to your pay, Entrust offers eligible colleagues and their dependents comprehensive health and well-being programs which include medical, vision, dental, a generous 401(k) matching contribution, life and disability insurance, mental health coaching, virtual fitness programs, paid personal time off plus 12 paid holidays, parental leave and education reimbursement. Entrust is an EEO/AA/Disabled/Veterans Employer
Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.

Reference: WJ-4487_22365417

Apply now

Continue on the employer's official application - the same link they use for every candidate.

More jobs

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.