Job Description

, India
Job Family Group: Information Technology (IT)
Worker Type: Regular
Posting Start Date: December 12, 2025
Business Unit: Projects and Technology
Experience Level: Experienced Professionals
:
What's the role
In a world where Shell increasingly relies on IDT solutions to accelerate energy transition, robust assurance of IDT services instils competitive advantage and contributes to powering progress. With more than 45,000 sites in around 80 countries, Shell is the world's largest mobility retailer and one of the largest single-branded retailers of any kind on the planet. Retail is the face of Shell, touching the lives of 30 million customers every single day. Serving all our customers is only possible if they trust Shell. Most customers use their credit card to pay for Shell products. It is our job to continue to earn the trust of our customers by ensuring credit card transactions are safe and secure.
In this role, you will serve as the PCI-DSS functional specialist for the Chief Information Security Office (CISO) within the Retail Class of Business (COB). You will be responsible for ensuring compliance with PCI-DSS standards and supporting risk management initiatives. Additionally, you will communicate effectively with stakeholders across IDT and the Business to promote understanding and alignment with assurance processes and risk management strategies.
What you'll be doing

• Accountable for driving PCI Level 2/3 assessments.

• Responsible for performing PCI self-assessments for Level 2 and 3 markets.

• Responsible for providing ad-hoc PCI assurance as required.

• Process owner and collaborator for the coordination and timely execution of PCI assurance for your scope areas.

• Execute, administer and report regularly on the progress and any issues identified from assurance performed in your scope areas.

• Work hand in hand with BISOs, IDT community and business orchestrating execution of PCI assurance queries.

• Work effectively with the PCI assurance team to drive and support continuous improvement, with a focus on value.

• Proactively review Shell's information security and related risks, threats and vulnerabilities, legal and regulatory and Payment Card Industry (PCI) compliance.

• Support in development of tooling to support Supply Chain Assurance (SCA) and PCI processes and ensure these are fit for purpose.

• Active participation in the Assurance and Architecture level discussions in the engagements

• Ensure and support that PCI Attestations of Compliance (AoC's) and Reports on Compliance (RoC's) are created and reviewed where relevant. This includes supporting Market Self-Assessment Questionnaires and external assessments where relevant.

• Actively participate across the CISO PCI natural team and PCI community meetings, representing SCA and Business interests in fit for purpose applying PCI relevant standards and policies for the Group and the businesses.

• Support maintenance and development of the PCI Control Framework and related processes and procedures.

• Stay updated with industry's best practices and integrate them into the organization's assurance strategies.

What you bring
Experience:

• Minimum 5 years' experience in Information Risk Management, Payment Security and Risk Advisory roles.

• Excellent understanding of Information security processes and frameworks covering risk management, project risk engagement, project assurance and audit & compliance management.

• Possess a basic understanding of digital and card payment security, relevant threat landscape and risk mitigation measures.

• Exposure to understand technical vulnerabilities and ability to recommend remediation solutions.

• Proven ability to communicate effectively with stakeholders in- and outside IT.

• Continuous improvement mindset and project management experience.

Education:

• Knowledge in PCI DSS 3.2.1, 4.0 & 4.0.1.

• Certification in ISO27001, PCI professional (PCIP) or PCI ISA/QSA.

• Bachelor's Degree related to IT or equivalent.

Technical Skills:

• Expert understanding of PCI DSS and payment card brand security standards, along with familiarity to other industry standards such as P2PE, PIN, PCI SSF, EMV, PSD.

• Fair understanding of project management and IT delivery.

• Knowledge of networking & firewall concepts, and access management best practices.

Soft Skills:

• Ability to deliver through others, work effectively with stakeholders in- and outside IT.

• Ability to influence senior leadership and team members to drive a security first mindset in a cost constrained environment.

• Self-driven and energetic with a willingness to learn new skills.

• Ability to document and describe cyber risk in the context of payment security. Communication skills are essential for this role, in particular being able to cut through complex issues and to explain those in easy Business language.

• Significant experience in conducting and communicating security evaluations and communicating cyber risk risk and impact (consequences) to all levels of stakeholders.

• A special challenge will be to stay on top of the many engagements while at the same time maintaining a deep understanding of payment security.

What we offer
You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You'll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You'll be able to balance your priorities as you become the best version of yourself.

• Progress as a person as we work on the energy transition together.

• Continuously grow the transferable skills you need to get ahead.

• Work at the forefront of technology, trends, and practices.

• Collaborate with experienced colleagues with unique expertise.

• Achieve your balance in a value-led culture that encourages you to be the best version of yourself.

• Benefit from flexible working hours, and the possibility of remote/mobile working.

• Perform at your best with a competitive starting salary and annual performance related salary increase - our pay and benefits packages are among the best in the world.

• Take advantage of paid parental leave, including for non-birthing parents.

• Join an organization to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply.

• Grow as you progress through diverse career opportunities in national and

• international teams.

• Gain access to a wide range of training and development programs.

We'd like you to know that Shell has a bold goal: to become one of the world's most diverse and inclusive companies. You can get to know more about how we're working towards that goal, .
IMPORTANT NOTE: After you submit your application, you will receive an email providing a link to an online assessment that is a mandatory part of the process. The email will come from HireVue - please check your spam/junk mailbox if you do not see the email. Once completed, your application will be reviewed to determine next steps. Thank you for your interest in Shell.
-
Shell in India
Shell is a diversified energy company in India with 13,000 employees, and presence in Integrated Gas, Downstream, Power, Renewable and Upstream. Additionally, we have deep capabilities in R&D, digitalization, and business operations.
Our global strategy, Powering Progress, is designed to generate value for our shareholders, customers, and the wider society, and focuses on creating more value with less emissions. The strategy supports our purpose of providing more and cleaner energy solutions, with the aim of profitably transforming Shell into a net-zero emissions energy business by 2050. As India moves towards its target of net-zero emissions by 2070, Shell India aims to play a leading role in securing vital energy for today, while investing in, and helping to build, the energy system of the future through strategic investments in the country.
Our Lubricants business serves over 50,000 consumers through a strong network of over 200 distributors, and operates an end-to-end value chain that spans conceptualization, development, and production at a world-class blending plant at Taloja. Through our 350-plus retail stations, we offer an integrated mobility experience including fuels, cafes, and convenience stores, with a prominent network of EV recharging facilities.
Shell owns and operates an LNG re-gasification terminal at Hazira, Surat, with a capacity of 5 MTPA and an LNG truck-loading unit that plays a crucial role in helping meet India's growing demand for gas across sectors. In 2022, Shell acquired Spring Energy in a $1.55 billion deal to build an integrated energy transition business in the country. Spring is a leading renewable energy company in India which develops and manages solar, wind, and hybrid power generation facilities and infrastructure.
Our three capability centers across Bangalore and Chennai serve as a technology and innovation powerhouse for Shell globally, working as a delivery engine for core technical, digital, and finance processes: pioneering digital innovation and cutting-edge technologies across the energy sector. We also have strong academic partnerships and collaborations with leading universities and technology institutes to accelerate decarbonization efforts within the energy sector.
We are committed to positively contributing to the communities in which we operate through programs on STEM Education, Skilling, and Livelihood across India. We nurture and invest in startups developing initiatives focused on accelerating energy innovation through programs such as Shell E4 and Shell Eco-marathon. We also have strategic investments in new energy companies such as Husk Power, d.light, Orb Energy, and Cleantech Solar.
DISCLAIMER: Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.

Skills Required