What are the responsibilities and job description for the PCI Analyst position at Lids?
About Our Company
Lids Sports Group is the largest licensed sports retailer in North America, selling fan and fashion-oriented headwear and apparel across the US and abroad. Operating out of Indianapolis, IN, our retail stores offer officially licensed headwear and apparel from collegiate and professional sports teams, plus top brands like Nike, New Era, Lululemon, and Mitchell & Ness. In addition to our wide assortment, we are the industry leader in on demand customization.
We currently operate 1,300 brick and mortar locations, including specialty concept stores for the NBA, NHL, Paris Saint-Germain, and the two largest MLB franchises, via our Yankees & Dodgers Clubhouse stores. Lids have built partnerships and collaborations with iconic global brands including Marvel/Disney, Playboy, Travis Scott’s Cactus Jack, and Post Malone, creating a community where fans, fashion, and culture collide.
General Position Summary
As a PCI Analyst, you will support Lids’ PCI DSS Level 1 compliance program by performing evidence collection, documentation, basic control testing, and process execution. This role is designed for someone early in their security/compliance career who can follow established procedures, learn quickly, and help keep the PCI program organized and audit ready.
Principle Duties and Responsibilities
- Maintains PCI artifacts, device inventories, and quarterly evidence packets to support Level 1 assessment requirements.
- Verifies store device inventories, coordinates tamper checks, and assists stores with PCI tasks following established playbooks.
- Tracks remediation tasks across Network, CloudOps, DevOps, and Store Ops; follows up on open items; prepares evidence for the QSA.
- Performs entry-level log validation (ensuring logs flow from stores/devices), identifies gaps, and escalates them to technical teams.
- Assists with quarterly compliance calendars, policy documentation, internal audit tasks, and administrative support across PCI and SOX programs
- Ad-Hoc Security & Compliance tasks to support various IT projects
Additional Principal Duties and Responsibilities
Job Required Knowledge & Skills
- 0–2 years of experience in IT, cybersecurity, audit, or related technical/analytical role.
- Ability to learn D365 concepts, SIEM tooling basics, and security principles quickly.
- Comfortable handling documentation, evidence collection, and follow-ups.
- High attention to detail especially around numbers, access, and audit checks.
- Ability to communicate to various stakeholders (Finance, IT, Ops, and HR, Auditors).
- Open to asking questions to build a clearer understanding of your role, our IT environment, and compliance needs
Preferred Job Required Knowledge & Skills
- Large retail or e-commerce experience in a high-volume environment
- Familiarity with D365 Security
- PCI DSS tooling or compliance experience
Education
Reports To