Security Consultant, PCI QSA

Role Overview

• The Security Consultant (PCI QSA) will lead security consultancy and assessment engagements and pre-sales processes with clients within financial services and payment card industries.
• Focusing on delivery of Payment Compliance services, which include but are not limited to: PCI data security standard assessments, Support in PCI Specialized assessments (PCI PIN, PCI P2PE, etc.), SWIFT Gap Analysis, Policy and procedure review, Advisory for audit preparation and remediation
• Pre-Sales: Independently carry out the estimate of the effort required to deliver a security service, reporting the result to the regional lead for approval.
• Lead customer engagements and provide senior cyber security advice and services.
• Provide detailed analytical reporting, internal reporting metrics and program management.
• Provide leadership and mentorship to Junior consultants.
• Prepare, organize and support delivery by team members of engagements onsite and offsite
• Assess compliance related documentation including policies, procedures, standards and legislative directives.
• Provide remediation support and guidance on the security aspects of the administration and maintenance of processes and documentation
• Deliver detailed reports following Integrity360’s reporting best practice and templates.
• Ensure QA process for Payments Compliance standards is initiated and applied for relevant projects.
• Establish new standards and reviews of existing documentation to ensure the correct application of the processes.
• Provide regular status update to internal stakeholders.

Requirements

• Relevant Experience in Fintech industry and security standards and directives consultancy services (e.g. PCI DSS, PSD2, ISO 27001, SWIFT, etc.)
• Cryptographic techniques including algorithms, key management, and key lifecycle.
• Physical security techniques for high-security areas
• Authentication methods and techniques
• Security integrity controls
• Computer Networking (routing, switching, firewall network filtering)
• Operating Systems hardening and administration (Linux/Unix, Windows).
• Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA)
• Hardware security modules (HSMs) operations, policies, and procedures
• POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT

Tech Stack

• Cyber Security
• Linux
• Swift
• Switching
• Unix

Benefits

• Professional development opportunities
• Remote work options