Project Manager, PCI DSS Compliance

Calling all innovators – find your future at Fiserv.

We’re Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants, and consumers to one another millions of times a day – quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we’re involved. If you want to make an impact on a global scale, come make a difference at Fiserv.

Job Title

Project Manager, PCI DSS Compliance

What does a successful Project Manager, PCI DSS Compliance do at Fiserv?

The Project Manager, PCI DSS Compliance leads Payment Card Industry Data Security Standard (PCI DSS) initiatives across Commercial Middle Market, covering readiness, assessment support, governance, evidence collection, and control remediation. Partnering closely with compliance, security, technology, product, legal, operations, sales, implementation, and client-facing teams, this role translates regulatory requirements into executable work plans, clear deliverables, and sustainable operating practices while keeping risks, dependencies, and stakeholder commitments visible. As capacity permits, the role also manages prioritized Commercial Middle Market Operations projects to improve controls, processes, reporting, and execution.

What you will do: 

• Lead end-to-end project management for Commercial Middle Market initiatives involving PCI DSS compliance, readiness, assessments, remediation, and ongoing control sustainability.
• Apply strong working knowledge of PCI DSS requirements, testing expectations, evidence needs, control ownership, scoping considerations, and remediation practices to guide project planning and execution.
• Translate PCI DSS requirements and identified gaps into project charters, work breakdown structures, milestones, accountable owners, dependencies, risks, and measurable completion criteria.
• Coordinate readiness reviews, evidence collection, documentation, stakeholder responses, remediation plans, and validation activities in support of internal reviews and external assessments.
• Maintain clear governance through status reports, RAID logs, decision logs, action trackers, control-owner matrices, compliance calendars, and executive-ready milestone reporting.
• Facilitate cross-functional working sessions to confirm scope, interpret project impacts, resolve ownership gaps, track evidence and remediation, and drive timely decisions.
• Identify and escalate compliance risks, overdue actions, control deficiencies, and delivery blockers with clear business impact, options, and recommended actions.
• Partner with control owners to embed sustainable procedures, documentation, monitoring, and recurring governance that support continued PCI DSS compliance after project completion.
• Communicate PCI DSS project status, risks, dependencies, and required decisions clearly to senior leaders, technical teams, business partners, and other stakeholders.
• Secondarily, manage prioritized Commercial Middle Market Operations projects involving process improvement, reporting, implementation handoffs, governance, controls, and cross-functional execution.

What you need to have: 

• 6+ years of project or program management experience, including direct responsibility for information security, compliance, risk, audit, payments, or similarly regulated initiatives.
• High-level knowledge of PCI DSS, including requirements, scoping concepts, evidence expectations, control ownership, assessment readiness, remediation, and ongoing compliance obligations.
• Demonstrated experience managing complex, cross-functional compliance or technology projects with multiple stakeholders, dependencies, timelines, risks, and deliverables.
• Ability to translate technical and compliance requirements into clear business actions, accountable work plans, executive reporting, and sustainable operating processes.
• Strong experience creating project plans, RAID logs, remediation trackers, evidence inventories, governance materials, meeting recaps, and stakeholder communications.
• Proven ability to communicate compliance status, risks, findings, and recommendations clearly to senior leaders and technical and non-technical teams.
• Bachelor’s degree or equivalent work experience.

What would be nice to have: 

• Experience leading PCI DSS readiness, assessment, remediation, or compliance-sustainment initiatives within merchant services, payment processing, financial services, or fintech.
• PCI Professional, Internal Security Assessor, PCIP, or other relevant PCI Security Standards Council credential.
• PMP, Agile/Scrum, Lean Six Sigma, Prosci, or comparable project or change-management certification.
• Experience partnering with information security, technology, compliance, risk, audit, legal, product, and operations teams.
• Working knowledge of Jira, Smartsheet, MS Project, SharePoint, Excel, PowerPoint, Power BI, or similar project, evidence-management, and reporting tools.

This role is not eligible to be performed in Colorado, California, District of Columbia, Hawaii, Illinois, Massachusetts, Maryland, Minnesota, New Jersey, New York, Nevada, Rhode Island, Vermont, Virginia, Maine or Washington.

It is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.

Please note that salary ranges provided for this role on external job boards are salary estimates made by outside parties and may not be accurate.

Thank you for considering employment with Fiserv.  Please:

• Apply using your legal name
• Complete the step-by-step profile and attach your resume (either is acceptable, both are preferable).

Our commitment to Equal Opportunity:

Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.

Note to agencies:

Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.

Warning about fake job posts:

Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.