Principal Specialist, PCI DSS Compliance

About the role

HARMAN is looking for a PCI DSS Compliance Principal in Budapest to lead its PCI DSS compliance activities across all in-scope environments. The role protects cardholder data according to PCI DSS requirements, drives audit readiness and works with business, IT and third-party stakeholders to keep payment processes secure and compliant. It also contributes to the Digital Compliance function, covering IT governance, ITGC control oversight, policy and procedure management and second-line support for internal and external audits.

Key responsibilities

• Facilitate the global PCI DSS compliance program across HARMAN environments, ensuring consistent implementation with business and technology teams.
• Conduct PCI DSS gap assessments and risk evaluations for in-scope systems and define remediation priorities.
• Enhance PCI DSS governance, including control framework, policies, procedures and documentation.
• Lead internal and external PCI DSS assessments and act as the main contact for QSAs, keeping audit readiness high.
• Oversee remediation of PCI findings, coordinating stakeholders, tracking progress and validating closure of gaps.
• Advise business, IT and product teams on PCI DSS requirements, secure payment handling and control implementation across infrastructure, applications and cloud.
• Maintain the IT governance framework and design ITGC control frameworks that are risk-based and aligned with regulatory and audit expectations.
• Support internal and external (K)SOX audits from a second-line perspective, including control validation and evidence review.

Required profile

• Bachelor's or Master's degree in information security, IT or a related field.
• 5+ years of experience in cybersecurity, risk or compliance roles.
• Proven experience managing audits (internal and external) and remediation programs.
• Ability to communicate in English, including reading, writing and speaking.
• Willingness to travel up to 5% domestically, or domestically and internationally.
• Background investigation and drug screen required as a condition of employment.

Required skills

• Strong hands-on experience with PCI DSS.
• Understanding of cloud environments, network security and segmentation, identity and access management, encryption and key management.
• Ability to translate regulatory requirements into actionable technical controls.
• Familiarity with using AI to support efficiency and quality is expected.
• Bonus points for CISSP, CISM, CISA, ISO 27001 LI/LA, PCIP or ISA certifications, and for payment gateway, tokenization or e-commerce platform experience.

What we offer

• A hybrid work environment, with most office-based roles onsite three days a week.
• Employee discounts on HARMAN and Samsung products.
• Learning and development through HARMAN University programs.
• An inclusive, diverse workplace.