Looking for PCI DSS Qualified Security Assessor (QSA) Consultant (Exp – 10+ years, CTC up to [...]

Rankskills Knowledge International Pvt Ltd; Mumbai; On-site; INR 2,000,000 - 2,300,000; Full time

Job summary

A top global audit firm is looking for a QSA Consultant based in Mumbai, India. The candidate must have over 10 years of experience in Information Security, including at least 5 years as a PCI QSA with audit experience. Key responsibilities include conducting PCI DSS audits, advising clients as a subject matter expert, and performing IT audits. Familiarity with ISO 27001 and various security technologies is essential. The role offers a budget of 20 – 23 LPA along with travel flexibility of 30-40%.

Qualifications

• Minimum 10 years of work experience in Information Security/IT Security.
• Minimum 5 years as a PCI QSA with PCI DSS audits.
• Experience in IT audits and IT Risk Management.

Responsibilities

• Conduct PCI DSS audits and provide remediation guidance.
• Lead assessments of client's infrastructure for compliance.
• Document results in a gap assessment report.

Skills

Information Security

PCI DSS auditing

ISO 27001 Standards

IT Risk Management

Technical workshops

Problem solving

Customer facing skills

Time management

Written and verbal communication

Education

PCI DSS QSA

CISA

CISM

CISSP

ISO 27001 Lead Auditor

ISO 27001 Lead Implementer

Job description

Our client is top global TCI Audit & Audit firm . They are looking for QSA Consultant for below role:

• Total Exp – 10 years
• Minimum 10 years of work experience in Information Security/ IT Security domain.
• Minimum 5 years of experience in working as a PCI QSA with demonstrable experience conducting PCI DSS audits.

Budget: 20 – 23 LPA

Notice Period - To be onboarded within a month

Job Description

• Experience in Information Security and related functions such as IT audits and IT Risk Management.
• Exposure to ISO 27001 Standards & Auditing. Perform or assist with internal IT Audit, Application Control Reviews, IT process reviews, IT Infrastructure Reviews, agreed-upon procedures, and developing Standard Operating Procedures.
• Excellent knowledge of Information Security technologies and methodologies particularly, including for example web server security/ firewalls/ networks/ encryption/ PKI/ TCP/ IP/ UNIX/ Windows/ Cloud infrastructure etc.
• Document the results in a gap assessment report and provide guidance and advice on the PCI DSS remediation roadmap.
• Advise clients/ stakeholders as a PCI DSS subject matter expert.
• Leading technical workshops to conduct assessments of client’s infrastructure and policies and procedures for compliance with PCI DSS (Including ROC, AOC, SAQ etc.)
• Flexibility to travel ranging from 30-40%.
• Professionalism, problem solving, customer facing and handling skills, time management, written and verbal communication, presentation skills, active listening, flexibility.

Certifications (desirable)

PCI DSS QSA/ CISA/ CISM/ CISSP/ ISO 27001 Lead Auditor/ISO 27001 Lead Implementer (Any 2 of these).