What You’ll Be Part Of
As a PCI DSS Compliance Principal, you will be responsible for facilitating HARMAN’s PCI DSS compliance activities across all in-scope environments. This role ensures that cardholder data is protected in line with PCI DSS requirements, drives audit readiness, and partners with business, IT, and third-party stakeholders to implement and maintain secure and compliant payment processes. In addition, you will contribute to the Digital Compliance function by supporting IT governance activities, including ITGC control oversight, policy and procedure management, and second-line support for internal and external audits.
How You’ll Make An Impact
- Facilitate the global PCI DSS compliance program across HARMAN environments, ensuring consistent implementation and alignment with business and technology teams.
- Conduct PCI DSS gap assessments and risk evaluations for in-scope systems, and define remediation priorities based on risk impact.
- Enhance PCI DSS governance, including control framework, policies, procedures, and required documentation.
- Lead internal and external PCI DSS assessments, acting as the primary liaison for QSAs and ensuring audit readiness at all times.
- Oversee remediation of PCI findings, including coordination with stakeholders, tracking progress, and validating closure of identified gaps.
- Provide expert guidance and advisory support to business, IT, and product teams on PCI DSS requirements, secure payment handling, and control implementation across infrastructure, applications, and cloud.
- Maintain and enhance IT governance framework, including development and lifecycle management of IT policies, standards, and procedures within the Digital Compliance domain.
- Design and oversee ITGC control frameworks, ensuring controls are risk-based, effectively implemented, and aligned with regulatory and audit expectations.
- Support internal and external (K)SOX audits from a 2nd line perspective, including control validation, evidence review, and stakeholder coordination.
What Makes You A Strong Fit
- Bachelor’s or Master’s degree in information security, IT, or related field.
- 5+ years of experience in cybersecurity, risk or compliance roles.
- Strong hands-on experience with PCI DSS.
- Proven experience managing audits (internal/external) and remediation programs.
- Strong understanding of cloud environments, network security and segmentation, identity and access management, encryption and key management.
- Ability to effectively communicate in English, including reading, writing and speaking.
- We see AI as an important part of how work gets done. While tools may vary, a baseline familiarity with using AI to support efficiency, problem-solving, and quality is expected.
Things To Know
- Be willing to travel up to 5%, domestic only OR domestic and international travel.
- Successfully complete a background investigation and drug screen as a condition of employment.
A Career at HARMAN
As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do every day.
Introduction: A Career at HARMAN Corporate
We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN Corporate, you are integral to our company’s award-winning success.
- Enrich your managerial and organizational talents – from finance, quality, and supply chain to human resources, IT, sales, and strategy
- Augment your comprehensive skillset with expert training across decision-making, change management, leadership, and business development
- Obtain 360-degree support throughout your career life cycle, from early-stage to seasoned leader