Information Security Assessor – QSA Certified (W2, FT)

RSI Security; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

A leading cybersecurity firm is seeking an Information Security Assessor to lead PCI DSS assessments and provide advisory services across various compliance frameworks. The ideal candidate will have an active PCI QSA certification and 3–5+ years of experience in security assessments. This is a fully remote position with opportunities for professional development and a collaborative team culture.

Benefits

Competitive salary and commission/bonus opportunities

100% remote work flexibility

Professional development opportunities

Qualifications

• 3–5+ years of experience in security assessments, compliance, or consulting.
• Demonstrated experience with ROC/AOC development and delivery.
• Familiarity with frameworks: SOC 2, ISO 27001, NIST, HIPAA, HITRUST.

Responsibilities

• Lead formal PCI DSS assessments including audits and readiness assessments.
• Draft and deliver comprehensive Reports on Compliance (ROCs) and Attestations of Compliance (AOCs).
• Mentor junior team members in PCI methodology and cybersecurity best practices.

Skills

Active PCI QSA certification

Security assessments

Consulting

Technical communication

Report writing

Organizational skills

Education

Bachelor's degree in cybersecurity or information systems

Job description

WE ARE HIRING

Information Security Assessor - QSA Certified

Location: Remote – USA

Type: Full Time (W-2 or equivalent)

Compensation: Competitive salary + commission eligibility

Travel: Potential travel to client sites as required

About Us

RSI Security is a trusted leader in cybersecurity compliance and assessment, dedicated to helping organizations navigate complex security frameworks and safeguard their operations. We are committed to operational excellence, leveraging innovation and expertise to deliver tailored solutions that empower businesses to thrive in a rapidly evolving digital landscape. Our culture emphasizes collaboration, continuous improvement, and professional growth, offering our team members the opportunity to contribute meaningfully to impactful projects in a supportive and forward-thinking environment.

About the Role

The Information Security Assessor leads and delivers formal assessments and consulting services across multiple cybersecurity frameworks, with a primary focus on PCI DSS. This role requires hands‑on experience conducting QSA-led assessments, drafting compliance documentation, and guiding clients through full assessment lifecycles.

The ideal candidate holds an active PCI QSA certification, has a strong background in compliance and information security, and excels in independent execution as well as collaborative client engagement.

What You’ll Do

• Lead formal PCI DSS assessments, including audits, readiness assessments, and gap analyses.
• Conduct evidence reviews, stakeholder interviews, technical validation, and documentation sampling.
• Draft and deliver comprehensive Reports on Compliance (ROCs) and Attestations of Compliance (AOCs).
• Provide advisory services for clients navigating PCI, SOC 2, ISO 27001, HIPAA, NIST, and HITRUST initiatives.
• Collaborate cross‑functionally with advisory and technical teams to support integrated engagements.
• Mentor junior team members in PCI methodology and cybersecurity best practices.
• Stay current with evolving standards and updates from the PCI Security Standards Council (SSC).
• Represent RSI Security in client meetings and contribute to long‑term client success.

What You’ll Bring

• Active PCI QSA certification - required.
• Bachelor's degree in cybersecurity, information systems, or equivalent experience.
• 3–5+ years of experience in security assessments, compliance, or consulting.
• Demonstrated experience with ROC/AOC development and delivery.
• Familiarity with additional frameworks: SOC 2, ISO 27001, NIST, HIPAA, HITRUST.
• Ability to perform gap analyses, risk assessments, and control evaluations.
• Strong technical and written communication skills, including report writing and presentations.
• Self‑driven with the ability to manage multiple engagements independently.
• Strong organizational and time management skills.

Mindset We Value

• Ownership and accountability — drive results without micromanagement.
• Client‑first attitude with a solutions‑oriented mindset.
• Calm and focused under pressure; flexible with shifting priorities.
• Continuous improvement and proactive problem‑solving mindset.
• Team collaboration and knowledge sharing.
• Humility, integrity, and professionalism in all client interactions.

What We Offer

• Competitive salary and commission/bonus opportunities.
• 100 % remote work flexibility.
• Collaborative and inclusive team culture.
• Professional development and upskilling opportunities.
• Opportunity to work on diverse and impactful cybersecurity engagements.

RSI Security is proud to be an Equal Opportunity Employer. We value equity, inclusion, and diversity as part of our broader commitment to respecting fundamental human rights across our value chain. The Company will consider qualified applicants with arrest and conviction records, consistent with applicable laws.

For more information on RSI Security, please visit www.rsisecurity.com or our LinkedIn page. On our career site, you will also find the steps guiding you through our hiring process.