Senior Consultant, PCI QSA

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the complete cycle of audits and assessments, which includes preparing audit plans, reviewing documentation and evidence, evaluating procedures, and conducting client interviews.

• Draft, review, and authorize assessment reports.

• Coordinate priorities, tasks, and hours on projects alongside the project manager to meet delivery utilization targets.

• Ensure quality is maintained throughout the engagement, offering direct coaching and revisions to work products.

• Guarantee that quality products and services are delivered punctually.

• Promptly escalate client and project issues to management to engage the necessary resources for resolution.

• Mentor team members in the areas of audit, assessment, technical review, and writing.

• Engage with clients throughout the entire engagement, interacting with all levels of client organizations to build and maintain positive, collaborative relationships.

• Pursue continuous professional development to maintain industry-specific certifications, ensuring strong knowledge in the practice area.

• Collaborate with project managers, quality management, sales, and other delivery team members to enhance customer satisfaction and fulfill project deliverables.

• Develop account relationships while identifying upsell and cross-sell opportunities to escalate to sales.

• Willingness to travel 25-50%.

• Proven ability to succeed while working remotely.

⛳️ Requirements

• Preferred: Current PCI-QSA certification (consideration for former QSA will be made).

• Required: One of the following Information Security certifications: CISSP, CISM, or ISO 27001 Lead Implementer.

• Required: One of the following Audit certifications: CISA, GSNA, CIA, IRCA ISMS Auditor or higher, or ISO 27001 Lead Auditor.

• Familiarity with various IT Audit frameworks such as SOC 2, ISO 27001, FedRAMP, HITRUST, etc.

• Bachelor's degree (four-year college or university) or an equivalent combination of education and work experience.

• In-depth knowledge of PCI-DSS security standards.

• A minimum of 5 years of experience in an IT Security Audit and/or Compliance role.

• Experience in preparing and presenting Tier 1 and Tier 2 Reports on Compliance (ROCs).

• Proven experience in conducting IT security risk assessments and gap analyses.

• Proficient Excel skills with the ability to create worksheets that incorporate complex formulas.

• Experience engaging with management in a consultative capacity.

• Strong understanding of IT regarding networks, servers, workstations, and applications.

• Exceptional communication and presentation skills, able to facilitate meetings for both small and large groups.

• Strong written and verbal communication abilities, including the capability to explain technical subjects to a non-technical audience.

• Robust consulting skills with executive leadership and technical professionals; capable of advising and challenging the status quo while fostering strong relationships.

• A positive attitude.

• Diplomatic and open-minded.

• Capacity to establish high-trust relationships and credibility swiftly, both internally and externally.

• Keen attention to detail, along with strong problem-solving, decision-making, organizational, and analytical skills.

• Ability to prioritize and manage multiple initiatives and projects effectively.

• Self-driven with a strong initiative to work independently.

🏝️ Benefits

• Paid parental leave

• Flexible time off

• Certification and training reimbursement

• Digital mental health and wellbeing support membership

• Comprehensive insurance options