Consultant- PCI

Cdw; Atlanta (GA); On-site; USD 100,000 - 140,000; Full time

Job summary

CDW is seeking a PCI Advisory Consultant to perform PCI DSS audits, readiness assessments, and CSCF-based reviews, delivering clear findings and actionable recommendations to clients. You will develop security policies, prepare deliverables, and present complex results to business audiences with strong communication.

Requires 2+ years IT audit or PCI QSA experience or a 4-year degree in a related field; travel 10-20% in the US; open to anywhere in the US, including Georgia/Atlanta area.

Qualifications

• 2+ years of IT Audit or PCI QSA experience, or
• A 4-year degree in Computer Science, Information Systems, or analytical field
• Excellent written and oral communication skills
• Ability to translate complex technical results for business audiences
• Willingness to travel 10–20%
• Proficiency with Windows and Microsoft Office; basic Linux CLI

Responsibilities

• Perform detailed PCI audits against PCI DSS.
• Conduct PCI DSS Readiness or Gap Assessments.
• Perform CSCF-based SWIFT Assessments across architectures.
• Develop IT security policies and procedures.
• Provide trusted advisory services to reduce risk and improve cyber security posture.
• Prepare reports and deliverables and present findings to client management.

Skills

Communication skills

Presentation skills

Analytical thinking

Willingness to learn

Windows Office proficiency

Linux command line

Education

Bachelor's degree in MIS/CS/CIS or related field

Job description

The ideal PCI Advisory Consultant ("Consultant") will possess a broad skillset, demonstrating excellent communication and presentation skills, analytical thinking, and a desire for learning that will support sustainable career growth. The Consultant will assist with a variety of technical PCI assessments, including validation of applications, databases, servers, networking devices, and security tools and software. The Consultant will work closely with Senior Consultants, Managers, and Directors to accomplish the team's goals and deliver the highest quality work to our clients. The Consultant often interfaces directly with clients; therefore, the ability to clearly articulate complex and technical results to a general business audience is paramount.

What you will get to do:

• Perform detailed audits of Merchants and Service Providers against the Payment Card Industry (PCI) Data Security Standard (DSS).
• Perform PCI DSS Readiness or Gap Assessments to identify current compliance status and consult organizations on the proper path moving forward.
• Perform SWIFT Assessments using the Customer Security Controls Framework (CSCF) (All architecture types).
• Develop information technology and security policies and procedures.
• Provide clients with trusted advisory services and guidance that will reduce their organizational risk and improve their overall cyber security posture.
• Prepare reports and other deliverables containing strategy, technical analysis, and findings in connection with our Practice's advisory and assessment engagements, and communicate these results to multiple levels of clients' management.

What you’ll need to succeed:

Experience

2+ years of relevant experience in the field(s) of IT Audit or being a PCI QSA. Alternatively, a 4-year degree in a computer science, Information Systems, or an analytical field (e.g., engineering) – see Education Section Below.

Qualifications

• Strong written communication and organizational skills to capture notes during PCI interview sessions with clients.
• Strong critical thinking and analytical skills, demonstrating an ability to understand and communicate complex client-business processes.
• Personal qualities like professionalism, attention to detail, a team-oriented focus, dedication, resourcefulness, strong organizational skills, eagerness to learn and grow professionally.
• Ability to leverage available technical resources and tools (online and otherwise) to research and expand personal knowledge when needed.
• Proficiency with Microsoft Windows and the Microsoft Office suite of products (Excel, Word, Outlook).
• Basic knowledge of using a Linux command-line interface.

Technical Skills & Proficiency

• Basic knowledge and familiarity with the following technologies and concepts: IT governance, operations, and resource planning.
• Information system and security architecture, including:
  • Firewalls, routers, switches, and load balancers (e.g., Palo Alto, F5, Cisco).
  • Operating systems (e.g., Windows, Linux, Unix, iSeries).
  • Remote access systems (e.g., multi-factor authentication).
  • Databases (e.g., SQL, Oracle, DB2).
  • Symmetric and asymmetric cryptography.
  • Systems Development Life Cycle (SDLC) and change management.
  • Information system implementation processes.
  • Systems administration and computer operations.
  • Threat and vulnerability management.
  • Incident response preparation and management.
  • Data backup and recovery practices.
  • Logical access controls (e.g., Active Directory).
  • Physical security best practices.

Education

A 4+ year bachelor's degree (or greater) is required. Transcript will be requested for candidates without work experience. Fields may include Management Information Systems, Computer Information Systems, Computer Science, Cyber Security, or another field that demonstrates similarly extensive analytical coursework (e.g., mechanical engineering).

Travel and Location

Anywhere in the US, with travel averaging 10-20%.