Remote PCI ASV Analyst: Compliance & Advisory

Tenable; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Tenable is seeking a PCI ASV Analyst to guide customers through the PCI DSS ASV external scanning process and ensure compliant outcomes. You will lead client-facing engagements, provide consultative advice on scan findings, and uphold PCI standards, collaborating with support teams to drive successful outcomes.

The role requires senior information security experience, familiarity with vulnerability assessments, and the ability to work across time zones.

Qualifications

• Five+ years in information security with vulnerabilities/assessments.
• Bachelor’s degree in IT, CS or equivalent work experience.
• Experience with Linux/Unix and Windows systems administration and securityPosturing.
• Knowledge of CVSS scoring and using NVD for CVE verification.

Responsibilities

• Analyze and validate client-submitted PCI ASV scans for attestation.
• Review evidence and recreate scenarios in lab to ensure fair resolution.
• Guide customers through PCI ASV submission process to achieve compliance.
• Collaborate with Technical Support Engineers to address PCI inquiries.
• Identify process improvements to enhance PCI ASV service.
• Maintain PCI ASV certifications and required CPE hours.
• Resolve escalated issues and recommend optimal solutions.

Skills

Information security

PCI DSS

Vulnerability scanning

Penetration testing

Network security

IT security auditing

Communication

Multitasking

Integrity & confidentiality

Time-zone flexibility

Education

Bachelor’s degree in IT/CS or related

Tools

Linux/Unix

Windows

CVSS/NVD basics

Job description

Tenable is seeking a PCI ASV Analyst to guide customers through the PCI DSS ASV external scanning process and ensure compliant outcomes. You will lead client-facing engagements, provide consultative advice on scan findings, and uphold PCI standards, collaborating with support teams to drive successful outcomes.

The role requires senior information security experience, familiarity with vulnerability assessments, and the ability to work across time zones.