PCI & SOX Compliance Specialist

Responsibilities

• Own vulnerability remediation loops by tracking quarterly PCI ASV scans and penetration testing cycles
• Lead the integration pipeline by conducting gap analyses and mapping security controls during infrastructure mergers
• Drive SOX 404 controls through testing and validating IT General Controls (ITGCs), specifically access management and secure code deployment
• Partner with engineering teams to automate evidence gathering and translate compliance requirements into actionable JIRA tickets
• Manage the risk register and remediation tracking lifecycle from identification to final verification
• Collaborate with US-based audit firms, requiring occasional flexibility for evening shifts to align with US time zones

Requirements

• 3+ years of hands-on, corporate operational experience in information security compliance
• Practical exposure executing PCI DSS and SOX 404 ITGC frameworks in transactional environments
• Proficiency with tracking platforms such as JIRA, ServiceNow GRC, or AuditBoard
• Technical background in Computer Science, Systems Administration, or IT support
• Full proficiency in English
• Ability to work in a hybrid model out of the London office (4 days a week)

Preferred Qualifications

• Certifications such as CompTIA Security+ or ISO 27001 Internal Auditor

Benefits

• Comprehensive healthcare coverage and insurance offerings
• Retirement savings programs and equity participation opportunities
• Flexible time off and paid parental leave
• Mental health resources and travel-related perks

About the Company

Navan is the global AI-powered business travel and expense management platform that makes travel easy for frequent travelers. Powering travel programs at more than 10,000 companies, Navan simplifies travel, payments, and expense management with intuitive tools and automated workflows.