What's the difference between PCI-DSS and ISO 27001 from SOC perspective?

PCI-DSS — payment card data security standard. SOC implications: cardholder data environment (CDE) requires extra logging, monitoring, daily review of security events. Specific requirements: log retention 1 year (90 days online), file integrity monitoring (FIM), quarterly internal vulnerability scans. ISO 27001 — broader Information Security Management System (ISMS) standard. SOC implications: documented incident response procedure, log review cadence, evidence collection for auditor review. Both require demonstration of SOC operational maturity. SOC L2/L3 roles often involve audit support — being able to walk auditor through 'how did you detect + respond to incident X' is interview gold.