Director of Cybersecurity
Birmingham, AL · On-site
... risk across production systems. • Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). • Define and rehearse incident response plans, leading the ...
Director of Cybersecurity
Birmingham, AL · On-site
... risk across production systems. • Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). • Define and rehearse incident response plans, leading the ...
Director of Cybersecurity
Birmingham, AL · On-site +1
... risk across production systems. • Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). • Define and rehearse incident response plans, leading the ...
Director of Cybersecurity
Birmingham, AL · On-site +1
... risk across production systems. • Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). • Define and rehearse incident response plans, leading the ...
... risk across production systems. Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). Define and rehearse incident response plans, leading the organization ...
... risk across production systems. Establish and maintain a Security Operations Center (SOC ... PCI-DSS, CCPA, GDPR, etc.). Define and rehearse incident response plans, leading the organization ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
... 53, PCI-DSS, and customer requirements for data center physical security * Partners with the ... Strong background in risk assessment, threat analysis, crisis management, executive protection ...
Pci Dss Risk Assessment information
What is a PCI DSS risk assessment?
A PCI DSS risk assessment is a formal process required by the Payment Card Industry Data Security Standard (PCI DSS) to identify, evaluate, and address potential risks that could impact the security of cardholder data. It involves analyzing how sensitive payment information is handled, stored, and transmitted within an organization, and identifying any vulnerabilities that could lead to data breaches or non-compliance. Organizations use the findings from the assessment to implement security controls and processes that help protect cardholder data and maintain PCI DSS compliance.
What are the key skills and qualifications needed to thrive as a PCI DSS risk assessor, and why are they important?
To thrive as a PCI DSS Risk Assessor, you need expertise in information security, risk management, compliance frameworks, and ideally a degree in IT or cybersecurity. Familiarity with PCI DSS standards, risk assessment tools, vulnerability scanners, and certifications like PCI Professional (PCIP) or Certified Information Systems Auditor (CISA) is typically required. Strong analytical thinking, communication, and attention to detail are crucial soft skills for effective risk evaluation and reporting. These skills and qualifications are vital to ensure organizations maintain compliance, reduce risk, and protect sensitive payment card data.
What are some common challenges faced during PCI DSS risk assessments, and how can they be addressed?
A frequent challenge in PCI DSS risk assessments is ensuring comprehensive identification and documentation of all systems and processes that store, process, or transmit cardholder data. Overlooking assets or data flows can lead to compliance gaps. Additionally, coordinating with various departments to collect accurate information can be complex. These challenges can be addressed by establishing clear communication channels, using detailed data flow diagrams, and conducting regular cross-functional meetings to maintain up-to-date asset inventories and processes.
What is the difference between Pci Dss Risk Assessment vs Pci Dss Compliance Analyst?
| Aspect | Pci Dss Risk Assessment | Pci Dss Compliance Analyst |
|---|---|---|
| Primary Focus | Identifying and evaluating security risks related to PCI DSS requirements | Ensuring ongoing compliance with PCI DSS standards and policies |
| Responsibilities | Risk identification, vulnerability assessment, mitigation planning | Policy implementation, audit preparation, compliance documentation |
| Required Skills | Risk management, security assessment, knowledge of PCI DSS | Compliance auditing, documentation, regulatory knowledge |
| Work Environment | Security teams, risk management departments | Compliance teams, audit departments |
While both roles involve PCI DSS standards, the Pci Dss Risk Assessment focuses on identifying and evaluating security risks, whereas the Pci Dss Compliance Analyst concentrates on maintaining compliance and preparing for audits. Understanding these differences helps organizations assign the right responsibilities to ensure security and compliance.
What are popular job titles related to Pci Dss Risk Assessment jobs in Alabama?
For Pci Dss Risk Assessment jobs in Alabama, the most frequently searched job titles are:
What job categories do people searching Pci Dss Risk Assessment jobs in Alabama look for?
The top searched job categories for Pci Dss Risk Assessment jobs in Alabama are:
What cities in Alabama are hiring for Pci Dss Risk Assessment jobs?
Cities in Alabama with the most Pci Dss Risk Assessment job openings:
Full-time
Re-posted 10 days ago
Job description
Headquartered in Birmingham, Alabama, Moultrie (www.moultrie.com) is the leader in game feeders and cellular camera innovation, building products used by hunters, property owners, and others for real-time remote monitoring.
We take pride in developing deep user understanding, obsessing about the details, and going the extra mile to show our users we love them. Moultrie is customer-driven - hardware, software, marketing, and customer success teams collaborate to deliver a quality user experience.
We are guided by the following principles: Customer Obsession.; Excellence is the Standard.; Bias for Action.; Act Boldly.; Deliver Results.; Hire and Develop the Best.; Be Curious and Learn.; Win as a Team
Job Summary
We are looking for a seasoned Director of Cybersecurity to lead and mature our security program across the full breadth of our business. This is a senior leadership role responsible for protecting our subscription products and customer data, securing our software engineering and DevOps pipelines, and building a governance framework that scales with the company.
You will partner closely with Software Engineering, Product, Legal, and Executive leadership to make security an essential part of our business - not just a compliance checkbox.
Job Responsibilities
Subscription Business & Infrastructure Security
• Own the end-to-end security posture of the company's subscription platform, including customerfacing applications, APIs, and underlying cloud infrastructure.
• Define and enforce security architecture standards for cloud environments (AWS, Azure, GCP), ensuring proper network segmentation, identity and access management (IAM), and data protection controls.
• Lead vulnerability management, penetration testing, and red team exercises to proactively identify and remediate risk across production systems.
• Establish and maintain a Security Operations Center (SOC) capability - whether in-house, managed, or hybrid - to ensure continuous monitoring, threat detection, and incident response readiness.
• Oversee data security controls to protect subscriber PII and payment information in compliance with applicable regulations (PCI-DSS, CCPA, GDPR, etc.).
• Define and rehearse incident response plans, leading the organization through security events from detection through post-mortem.
Software Development & DevSecOps
• Embed security throughout the software development lifecycle (SDLC), partnering with Engineering and Product to shift security left without slowing delivery velocity.
• Own the security of CI/CD build pipelines, including secrets management, pipeline integrity, dependency scanning, and supply chain security controls.
• Drive adoption of SAST, DAST, SCA, and container/image scanning tools across development teams.
• Define and maintain secure coding standards, conducting regular developer security training and threat modeling workshops.
• Establish controls to detect and prevent dependency confusion, code injection, and software supply chain attacks in build and deployment processes.
• Partner with platform and infrastructure engineering teams to ensure IaC (Terraform, Pulumi, etc.) follows security best practices and is reviewed prior to deployment.
Governance, Risk & Compliance • Build and maintain a cybersecurity governance framework.
• Own the company's risk register for cybersecurity, providing clear, quantified risk reporting to executive leadership and the board as appropriate.
• Lead and manage third-party security assessments, customer security questionnaires, and audit responses (SOC 2 Type II, penetration test reports, etc.).
• Develop and enforce security policies, standards, and procedures across the organization.
• Drive vendor and third-party risk management, ensuring security requirements are embedded in procurement and contract processes.
• Maintain awareness of the evolving regulatory landscape and ensure the company's practices remain compliant with applicable laws and industry standards.
• Champion a culture of security awareness through company-wide training programs, phishing simulations, and ongoing communication.
Job Requirements
• 10+ years of progressive experience in cybersecurity, with at least three years in a leadership role managing security programs and teams.
• Deep technical expertise in cloud security (AWS, Azure, or GCP) and securing SaaS or subscription-based products.
• Proven experience implementing DevSecOps practices and securing CI/CD pipelines in modern engineering environments.
• Hands-on knowledge of security tooling: SIEM, EDR, SAST/DAST, vulnerability scanners, secrets management platforms, and cloud security posture management (CSPM) tools.
• Strong background in security governance frameworks (NIST CSF, ISO 27001, SOC 2) and working knowledge of compliance requirements (PCI-DSS, GDPR, CCPA).
• Experience leading incident response efforts, including communication with executives, legal, and external stakeholders.
• Excellent written and verbal communication skills - able to translate complex technical risk into clear, actionable business language.
Preferred Qualifications
• Relevant certifications: CISSP, CISM, CISA, AWS Security Specialty, or equivalent.
• Experience with software supply chain security frameworks (SLSA, SBOM generation, Sigstore, etc.).
• Familiarity with zero trust architecture and its practical application in enterprise environments. • Experience working in a subscription or SaaS business where availability and customer trust are directly tied to revenue. • Background scaling security programs at a growth-stage company.
Essential Job Function
We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex, pregnancy status, age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment.
We comply with the Americans with Disabilities Act (ADA), as amended by the ADA Amendments Act, and all applicable state or local law.
We take pride in developing deep user understanding, obsessing about the details, and going the extra mile to show our users we love them. Moultrie is customer-driven - hardware, software, marketing, and customer success teams collaborate to deliver a quality user experience.
We are guided by the following principles: Customer Obsession.; Excellence is the Standard.; Bias for Action.; Act Boldly.; Deliver Results.; Hire and Develop the Best.; Be Curious and Learn.; Win as a Team
Job Summary
We are looking for a seasoned Director of Cybersecurity to lead and mature our security program across the full breadth of our business. This is a senior leadership role responsible for protecting our subscription products and customer data, securing our software engineering and DevOps pipelines, and building a governance framework that scales with the company.
You will partner closely with Software Engineering, Product, Legal, and Executive leadership to make security an essential part of our business - not just a compliance checkbox.
Job Responsibilities
Subscription Business & Infrastructure Security
• Own the end-to-end security posture of the company's subscription platform, including customerfacing applications, APIs, and underlying cloud infrastructure.
• Define and enforce security architecture standards for cloud environments (AWS, Azure, GCP), ensuring proper network segmentation, identity and access management (IAM), and data protection controls.
• Lead vulnerability management, penetration testing, and red team exercises to proactively identify and remediate risk across production systems.
• Establish and maintain a Security Operations Center (SOC) capability - whether in-house, managed, or hybrid - to ensure continuous monitoring, threat detection, and incident response readiness.
• Oversee data security controls to protect subscriber PII and payment information in compliance with applicable regulations (PCI-DSS, CCPA, GDPR, etc.).
• Define and rehearse incident response plans, leading the organization through security events from detection through post-mortem.
Software Development & DevSecOps
• Embed security throughout the software development lifecycle (SDLC), partnering with Engineering and Product to shift security left without slowing delivery velocity.
• Own the security of CI/CD build pipelines, including secrets management, pipeline integrity, dependency scanning, and supply chain security controls.
• Drive adoption of SAST, DAST, SCA, and container/image scanning tools across development teams.
• Define and maintain secure coding standards, conducting regular developer security training and threat modeling workshops.
• Establish controls to detect and prevent dependency confusion, code injection, and software supply chain attacks in build and deployment processes.
• Partner with platform and infrastructure engineering teams to ensure IaC (Terraform, Pulumi, etc.) follows security best practices and is reviewed prior to deployment.
Governance, Risk & Compliance • Build and maintain a cybersecurity governance framework.
• Own the company's risk register for cybersecurity, providing clear, quantified risk reporting to executive leadership and the board as appropriate.
• Lead and manage third-party security assessments, customer security questionnaires, and audit responses (SOC 2 Type II, penetration test reports, etc.).
• Develop and enforce security policies, standards, and procedures across the organization.
• Drive vendor and third-party risk management, ensuring security requirements are embedded in procurement and contract processes.
• Maintain awareness of the evolving regulatory landscape and ensure the company's practices remain compliant with applicable laws and industry standards.
• Champion a culture of security awareness through company-wide training programs, phishing simulations, and ongoing communication.
Job Requirements
• 10+ years of progressive experience in cybersecurity, with at least three years in a leadership role managing security programs and teams.
• Deep technical expertise in cloud security (AWS, Azure, or GCP) and securing SaaS or subscription-based products.
• Proven experience implementing DevSecOps practices and securing CI/CD pipelines in modern engineering environments.
• Hands-on knowledge of security tooling: SIEM, EDR, SAST/DAST, vulnerability scanners, secrets management platforms, and cloud security posture management (CSPM) tools.
• Strong background in security governance frameworks (NIST CSF, ISO 27001, SOC 2) and working knowledge of compliance requirements (PCI-DSS, GDPR, CCPA).
• Experience leading incident response efforts, including communication with executives, legal, and external stakeholders.
• Excellent written and verbal communication skills - able to translate complex technical risk into clear, actionable business language.
Preferred Qualifications
• Relevant certifications: CISSP, CISM, CISA, AWS Security Specialty, or equivalent.
• Experience with software supply chain security frameworks (SLSA, SBOM generation, Sigstore, etc.).
• Familiarity with zero trust architecture and its practical application in enterprise environments. • Experience working in a subscription or SaaS business where availability and customer trust are directly tied to revenue. • Background scaling security programs at a growth-stage company.
Essential Job Function
We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex, pregnancy status, age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment.
We comply with the Americans with Disabilities Act (ADA), as amended by the ADA Amendments Act, and all applicable state or local law.
About EBSCO Information Services
Sourced by ZipRecruiter
Industry
Library and information services
Company size
1,001 - 5,000 Employees
Headquarters location
Ipswich, MA, US
Year founded
1944