PCI Quality Security Assessor (QSA)

Chad Management Group; Remote; CAD 90,000 - 120,000; Full time

Job summary

A security consulting firm in Canada is seeking a Qualified Security Assessor (QSA) to join their team. The role involves conducting compliance assessments, leading projects, and engaging with clients to enhance security. Ideal candidates will have over 5 years in IT and security, with a minimum of 2 years as a PCI QSA. This position offers a dynamic environment with opportunities for travel across Canada and the US.

Qualifications

• Minimum of 2 years of experience as a PCI QSA.
• 5-7 years in Information Technology and Information Security.
• Ability to lead PCI Reports on Compliance assessments.

Responsibilities

• Conduct various compliance assessments including ROC and SAQ.
• Lead meetings and engage with clients to complete projects.
• Create professional reports detailing assessment findings.

Skills

Leadership

Risk assessment

Communication

Technical consulting

Client engagement

Education

Degree in Information Security or related field

Tools

PCI compliance tools

Security products and technologies

Job description

We are in search of skilled and experienced Qualified Security Assessors (QSA) to join our team and contribute to our growth. If you are an Information Security Consultant who thrives in dynamic environments and has recent experience as a QSA, we have an outstanding opportunity for you. You will collaborate with highly proficient security consultants on diverse projects for prominent clients across various industries. Our work involves analyzing, assessing, and designing robust security controls to aid clients in achieving Payment Card Industry (PCI) compliance, privacy compliance, and enhancing overall enterprise security.

Responsibilities

• Conducting various compliance assessments, including Report on Compliance (ROC) and Self Assessment Questionnaire (SAQ), and providing advice and consultation, including risk assessments and gap analysis.
• Leading meetings, chairing conference calls, following up on action items, and actively engaging with clients to advance projects to completion.
• Creating professional reports detailing assessment findings and advice for clients.
• Consulting with clients to ensure comprehension of findings and explore remediation options.
• Offering advisory input on security architecture in relation to PCI.
• Assisting the sales team with pre-sales activities, proposal creation, needs analysis, and solution design.
• Participating in industry events and leading webinars.
• Crafting summaries and executive briefs.
• Traveling to company offices and client work sites across Canada and the United States.

Requirements

• Degree in Information Security or a related field is advantageous.
• Minimum of 2 years of standing as a PCI QSA.
• Minimum of 5-7 years of experience in Information Technology.
• Minimum of 5-7 years of experience in Information Security domains.
• Minimum of 5-7 years of experience in measuring security controls, IT auditing, business processes, providing advice, or related security consulting.
• Ability to lead PCI Reports on Compliance assessments individually or with a team.
• Experience with Information Technology systems.
• Experience with a variety of security products and technologies.
• Familiarity with industry best practices and standards such as CIS and NIST, including security hardening techniques.
• Good understanding of application architecture, software development lifecycle processes, including secure coding techniques.
• Good understanding of server virtualization technologies, including AIX, ZOS, and SAN storage systems.
• Certifications: PCI QSA, PCI PA-QSA, PCI P2PE, or PCI ISA.