Manager (PCI QSA) – Advisory

Frazier-; Atlanta (GA); Hybrid; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

Frazier & Deeter is seeking an Advisory Manager to lead PCI DSS assessment engagements, overseeing teams that evaluate security controls to validate PCI DSS compliance and to guide remediation strategy.

You will serve as the primary client relationship owner, engaging with senior client stakeholders, managing risk, and driving compliance reporting. The role supports growth of the advisory practice and business development.

Qualifikationen

• 6–9 years of IT Audit, Cybersecurity, Risk Advisory, or PCI DSS assessments.
• Experience leading engagement teams in advisory projects.
• PCI QSA certification required; CISSP, CISA, CISM, CRISC, or ISO 27001 Lead Auditor preferred.
• Strong understanding of PCI DSS requirements and cardholder data security controls.

Aufgaben

• Manage PCI DSS assessments, gap analyses, and readiness reviews as engagement lead.
• Evaluate design/effectiveness of security controls around cardholder data environments (CDE).
• Review policies, procedures, configurations, and evidence to validate PCI DSS compliance.

Kenntnisse

PCI DSS knowledge

IT Audit

Cybersecurity

Leadership

Ausbildung

Bachelor’s degree in IT/CS/Cybersecurity

PCI QSA certification

Tools

ITGCs

P2PE

Vulnerability management

Jobbeschreibung

Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!

We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people.

At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.

Job Summary:

Frazier & Deeter is seeking an Advisory Manager to lead and manage PCI DSS assessment engagements, overseeing teams that evaluate security controls to validate compliance with payment card industry requirements. Direct the review of technical and process controls, oversee the identification of compliance gaps, and guide remediation strategy. Serve as the primary client relationship owner, engaging with senior client stakeholders and leadership to manage risk, review evidence, and drive compliance reporting. Oversee the delivery of advisory services that help organizations strengthen cardholder data security, sustain PCI DSS compliance, and contribute to the continued growth of the practice.

Duties & Responsibilities:

• Manage and oversee PCI DSS assessments, gap analyses, and readiness reviews for clients across various industries, serving as engagement lead.
• Direct the evaluation of the design and effectiveness of security controls related to cardholder data environments (CDE).
• Review and approve policies, procedures, configurations, and technical evidence to validate PCI DSS compliance.
• Oversee stakeholder interviews and walkthroughs performed by engagement teams, and personally lead discussions with senior client stakeholders on complex or high-risk matters.
• Develop and present risk-based recommendations and remediation plans, advising client leadership on PCI DSS strategy.
• Review and finalize assessment deliverables, including compliance reports, observations, and executive summaries, ensuring quality and accuracy prior to client delivery.
• Manage engagement economics, including budgets, staffing, timelines, and scope, and communicate engagement status to clients and firm leadership.
• Supervise, coach, and develop Seniors and Associates, including performance feedback, workpaper review, and career development support.
• Act as a trusted advisor to client executives on PCI DSS requirements, security best practices, and evolving compliance expectations.
• Support business development activities, including proposal development, client presentations, and identifying opportunities to expand services with existing and prospective clients.
• Contribute to practice development initiatives, including methodology enhancement, training content, and internal knowledge sharing.

Education & Experience:

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information Systems, or a related field; advanced degree a plus.
• 6-9 years of experience in IT Audit, Cybersecurity, Risk Advisory, Compliance, or PCI DSS assessments, including experience leading engagement teams.
• PCI QSA certification required; additional certifications such as CISA, CISSP, CISM, CRISC, or ISO 27001 Lead Auditor required or strongly preferred.
• Strong understanding of PCI DSS requirements, payment card processing environments, and cardholder data security controls.

Experience with PCI Point-to-Point Encryption (P2PE) environments, including validated P2PE solutions, assessment readiness, implementation reviews, or related compliance activities, is highly desirable.

• Extensive experience conducting and overseeing compliance assessments, control testing, gap assessments, and remediation validation activities.
• Familiarity with IT General Controls (ITGCs), access management, vulnerability management, network security, encryption, and logging/monitoring controls.
• Proven experience preparing and presenting assessment reports and executive summaries, and communicating findings to senior client stakeholders, executives, and boards.
• Demonstrated experience managing multiple concurrent engagements, including budgets, staffing, and client relationships.
• Experience supervising, mentoring, and developing staff, including formal performance management responsibilities.
• Experience contributing to business development, proposal writing, and client relationship expansion.
• Strong analytical, communication, stakeholder management, and project delivery skills with the ability to manage multiple engagements and teams simultaneously.

#LI - hybrid

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Frazier & Deeter’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.