Senior PCI DSS Consultant – Enterprise Compliance

About the role

ARCO is seeking a Senior PCI DSS Consultant to lead a long‑term enterprise compliance engagement for a complex municipal payment environment. The consultant will manage a portfolio of approximately 165 merchant accounts across nine locations and multiple payment channels, ensuring full alignment with PCI DSS 4.x requirements.

Key responsibilities

• Lead annual PCI DSS scoping, assessment planning and SAQ‑D programme for the enterprise.
• Produce merchant‑location gap analysis reports and develop remediation road‑maps.
• Prepare SAQ‑D and Attestation of Compliance (AOC) documentation.
• Review ASV scans, vulnerability assessments, penetration‑test and segmentation‑test results.
• Evaluate PCI policies, procedures, evidence and vendor documentation.
• Conduct monthly advisory meetings and provide ad‑hoc PCI guidance to stakeholders.
• Stay current on evolving PCI DSS requirements and card‑brand recommendations.

Required profile

• Strong hands‑on knowledge of PCI DSS 4.0 / 4.0.1.
• Proven experience delivering enterprise‑wide SAQ‑D and AOC engagements.
• Experience assessing multi‑location, multi‑channel payment environments.
• Excellent communication, documentation and stakeholder‑management skills.
• Ability to provide at least three relevant client references.

Required skills

• PCI DSS 4.0
• PCI DSS 4.0.1
• SAQ‑D assessment
• Attestation of Compliance (AOC) preparation
• ASV scanning
• Vulnerability scanning
• Penetration testing
• Segmentation testing
• QSA certification (preferred)
• Experience with CyberSource, Paymentus, Elavon or US Bank platforms

What we offer

• Primarily remote work with limited, risk‑based onsite support when required.