Qualified Security Assessor

Manchester, Lancashire
ECS Resource Group Limited

Qualified Security Assessor – PCI

Salary: £70k – £90k + car allowance

Location: Remote

Role Profile

As our dedicated PCI QSA, you’ll assess the secure handling of payment card information, provide guidance on compliance with the Payment Card Industry Data Security Standard (PCI DSS) and conduct thorough validation assessments for our valued customers.

Key responsibilities

• Conducting thorough assessments to validate PCI DSS compliance.
• Identifying vulnerabilities in payment card data handling processes and systems.
• Collaborating with clients, external vendors, and third-party entities for PCI compliance assessments.
• Providing expert guidance to stakeholders for implementing security measures.
• Preparing comprehensive reports on assessment findings, vulnerabilities, and remediation recommendations in PCI DSS compliance.
• Communicating assessment results clearly to relevant stakeholders.
• Staying updated on PCI DSS and relevant security standards.
• Sharing knowledge and contributing to clients’ security awareness programs within the team.

Preferred Skills & Experience

• Maintained QSA status for a minimum of 2 years.
• Extensive background in information security.
• Extensive knowledge and experience of assessing PCI DSS and its processes.
• Held roles such as information security analyst, IT auditor, cybersecurity consultant, or similar positions.
• Established track record in conducting thorough security assessments, audits, and compliance reviews.
• Demonstrated expertise in evaluating security controls, identifying vulnerabilities, and providing effective remediation recommendations.
• Solid understanding of the Payment Card Industry Data Security Standard (PCI DSS) and it’s application across environments.
• Knowledge of wider security frameworks such as ISO 27001, CIS and NIST.

Qualifications

• The PCI Qualified Security Assessor (QSA) certification, issued by the Payment Card Industry Security Standards Council (PCI SSC) is mandatory.
• A relevant bachelor’s degree (eg, information technology, computer science, cybersecurity) is preferred, but equivalent work experience or certifications may be considered.
• Supplementing qualifications with additional cybersecurity certifications, like CISSP, CISM, or CISA, preferred.

ECS Recruitment Group Ltd is acting as an Employment Agency in relation to this vacancy.