PCI DSS Consultant (M/F)

SecuLabs SA; Genf, Lausanne; Remote; CHF 110,000 - 150,000; Full time

Job summary

SecuLabs SA is seeking a PCI DSS Consultant to support clients in Geneva and/or Lausanne with compliance, audit, and securing environments handling payment card data. The role involves delivering PCI DSS programs for French-speaking Switzerland, including merchants, PSPs, acquirers, issuers and banks, from SMEs to multinationals, in both private and public sectors.

You will work on assignments with strong functional and/or technical content, liaising with IT, development and operations teams to

Qualifications

• Degree from an engineering school, business school or university (Master's, HES Bachelor's or equivalent).
• Experience in PCI DSS compliance; a QSA or ISA certification, or PCI DSS training, is a plus.
• Experience with PCI DSS, ISO 27001, ISO 27002 and NIST standards.
• Proficiency in French and English.

Responsibilities

• Define and validate the PCI DSS scope, the Cardholder Data Environment (CDE), and support network segmentation.
• Carry out gap analyses and compliance assessments against the PCI DSS v4.0 standard.
• Write and implement security policies and procedures that meet PCI DSS requirements.
• Support the technical teams (IT, development and operations) in implementing the required security controls.
• Track remediation plans and assess compensating controls.
• Support the preparation and follow-up of PCI DSS certification audits with QSAs.
• Manage the quarterly ASV vulnerability scans and the annual penetration tests.
• Write and review the SAQ self-assessment questionnaires and ROC/AOC compliance reports.
• Take part in campaigns that raise teams' awareness of payment data security requirements.

Skills

French

English

Education

Engineering degree

Business/University degree

Job description

SecuLabs is looking for a PCI DSS Consultant to support its clients in Geneva and/or Lausanne with compliance, audit and the securing of environments that handle payment card data.

You work on assignments and projects with a strong functional and/or technical content, supporting SecuLabs clients in achieving PCI DSS (Payment Card Industry Data Security Standard) compliance in French-speaking Switzerland, in Geneva and/or Lausanne.

The environments are varied: merchants, payment service providers, acquirers, issuers and banks, in the private sector, from SMEs to multinationals, as well as in the public sector.

• Define and validate the PCI DSS scope, the Cardholder Data Environment (CDE), and support network segmentation.
• Carry out gap analyses and compliance assessments against the PCI DSS v4.0 standard.
• Write and implement security policies and procedures that meet PCI DSS requirements.
• Support the technical teams (IT, development and operations) in implementing the required security controls.
• Track remediation plans and assess compensating controls.
• Support the preparation and follow-up of PCI DSS certification audits with the QSAs (Qualified Security Assessors).
• Manage the quarterly ASV vulnerability scans and the annual penetration tests.
• Write and review the SAQ self-assessment questionnaires and the ROC/AOC compliance reports.
• Take part in campaigns that raise teams' awareness of payment data security requirements.
• A degree from an engineering school, business school or university, preferably specialising in information security and/or IS audit (Master's, HES Bachelor's or equivalent).
• Experience in PCI DSS compliance; a QSA or ISA certification, or PCI DSS training, is a plus.
• Experience with the PCI DSS, ISO 27001, ISO 27002 and NIST standards.
• Adaptability and curiosity about new problems, methodologies and tools.
• Rigour, autonomy, strong interpersonal skills and good writing ability.
• A wish to contribute to excellent client service and to join a motivated, dynamic and fast-growing team.
• Proficiency in French and English.

PCI DSS & security frameworks

• PCI DSS v4.0
• ISO 27001
• ISO 27002
• NIST

Audit, compliance & certification

You work across the whole compliance cycle, from scoping the CDE to preparing for certification.

• CDE
• Gap analysis
• QSA
• ASV
• SAQ
• ROC / AOC
• Remediation

QSA, ISA or PCI DSS training: a real plus. A specialised PCI DSS certification or training is appreciated and adds weight to experience already gained on compliance programmes.

Your PCI DSS expertise can support demanding projects in French-speaking Switzerland.