An Australia-based fintech company initiated a strategic cybersecurity and compliance program to achieve PCI DSS v4.1 Level 2 compliance while strengthening the security of its AWS cloud environment and payment processing infrastructure. As the organization processed sensitive cardholder data through a cloud-native API architecture, ensuring compliance with evolving PCI DSS requirements became a critical business objective. The engagement focused on securing the Cardholder Data Environment (CDE), hardening AWS infrastructure, validating API security, remediating vulnerabilities, and preparing the organization for a successful Qualified Security Assessor (QSA) certification audit. The project also ensured that enhanced security controls were implemented without impacting the performance of AI-driven workloads.