Qualified Security Assessor
ID: JR0031908
Job Title:
Qualified Security Assessor
Role Overview:
As a Qualified Security Assessor (QSA) in the Payment Card Industry (PCI) this role will support the Lead QSA and team with assessments and consulting to our customers.
About You:
Responsibilities
- As a Qualified Security Assessor (QSA) in the Payment Card Industry (PCI) you will support the Lead QSA and team with assessments and consulting to our customers
- At times, you may be the lead on a project with peers or junior consultants supporting you
- The work done every day makes a difference in making electronic payments more secure globally
- Identifying, collecting, organizing, and reviewing pertinent evidence across multiple platforms and applications to determine compliance with relevant PCI DSS controls
- Scheduling and leading technical interviews with various customer groups and subject matter experts
- Support the team in providing reports and metrics to client on gaps, remediation efforts, clarifications, etc
- Providing/supporting direction and mentorship to junior PCI consultants
- Partake or writing detailed technical reports and supporting documentation for the customer
- Support creating and presenting executive reports across multiple organization leadership levels
- Supporting in developing executive presentations or status communications for multiple organization roles
- Demonstrated effective communication skills both written and verbal
- Effective presentation skills
- Demonstrated ability to work independently as well as in a team to meet delivery obligations
- Support and/or manage escalation and enforcement for unresolved noncompliance issues
- Support/participate and perform the due diligence and security compliance validation with 3rd party IT solution providers
- Support and enforce Information Security Policy, Standards, and Guidelines for business operations and technology implementations
- Actively looks for opportunities to develop new ideas to positively impact existing methods, services, or products
- Actively accepts individual and team responsibilities and meet commitments
Qualifications
- Strong experience working with Microsoft Excel, SharePoint, GRC tools, etc
- Bachelor’s degree or four or more years of work experience
- Three (3) to Four (4) or more years as a Qualified Security Assessor actively performing PCI assessments and/or remediation engagements
- Certification in Information Security such as a Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified ISO 27001 Lead Implementer
- An audit certification – Payment Application Qualified Assessor (PA-DSS QSA)
- Understanding of information systems and networking diagrams;
- Experience evaluating the security infrastructure for large enterprise merchants or service providers;
- Working knowledge of the financial industry and the lifecycle of payment card transactions;
- Working experience with software development methodologies and practices;
- Working knowledge of audit methodologies and security assessment tools;
- Methodical and organized; able to manage multiple opportunities, projects, and partners concurrently;
- Excellent written and oral communication skills, can express thoughts clearly, knows how to listen and is able to contribute in a team environment;
- Able to multi-task and work independently with minimum supervision to meet firm deadlines;
- Flexible, proactive, quick to learn and possessing a can-do attitude;
- A blend of curiosity, creativity, persistence, commitment, passion and optimism.
Strong Preference given to those with experience:
- As a QA resource for a PCI DSS project(s);
- As a PCI Qualified Security Assessor
- Evaluating various information systems, networks and/or payment applications
- understanding of ASV requirements and ability to interpret both vulnerability scanning and penetration testing reports
- Testing and documenting software security lifecycle from development to deployment
- Demonstrating writing skills (e.g. QA reports, Report on Compliance (ROC), whitepapers, etc.)
- Demonstrating project management skills
- Working with a diverse group of security professionals with various roles and responsibilities
- Understanding the financial and payment card processing industries
Additional Information
Location: Remote
Willingness to travel up to 25%
Compensation:
Base Pay Range: $112,000 – 208,000. Actual base pay within this range will depend on varying circumstances, including the work location, individual qualifications, company budget and other operational business needs. Compensation may also include annual bonuses and long-term incentives, subject to various metrics and company policy.
Company Benefits and Perks:
We work hard to embrace diversity and inclusion and encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.
- Pension and Retirement Plans
- Medical, Dental and Vision Coverage
- Paid Time Off
- Paid Parental Leave
- Support for Community Involvement
We're serious about our commitment to diversity which is why we prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.