PCI Internal Security Assessor (ISA) - Caribbean

TheHiveCareers; United States; À distance; USD 90 000 - 150 000; Plein temps

Résumé du poste

TheHiveCareers is seeking a PCI Internal Security Assessor (ISA) to ensure PCI DSS compliance across banking-sector clients in the Caribbean region. You will assess, monitor, and enforce security controls to protect cardholder data and maintain PCI compliance across systems and processes.

Reporting to the CISO, you will lead internal assessments, coordinate with the QSA, develop policies, and prepare documentation and attestations. Occasional travel may be required for audits.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field.
• 3–5 years of information security or PCI compliance experience.
• ISA or QSA certifications preferred; other security certs are a plus.

Responsabilités

• Lead PCI DSS compliance management and internal assessments.
• Collaborate with QSA for annual PCI DSS certification audits.
• Develop PCI compliance policies, procedures and controls.
• Prepare documentation and reports for PCI DSS compliance.
• Provide PCI DSS training and guidance across departments.

Connaissances

PCI DSS knowledge

Security risk assessment

Project management

Communication

Analytical thinking

Formation

Bachelor's degree in Information Security

Outils

Vulnerability scanners

SIEM

Encryption

Firewalls

Description du poste

PCI Internal Security Assessor (ISA) - Caribbean

Job Description: PCI Internal Security Assessor (ISA)

Department: Enterprise Security & Technology Risk Management Location: Regionwide

Reports To: Chief Information Security Officer (CISO)

Employment Type: Full-time

Job Overview

The PCI Internal Security Assessor (ISA) is responsible for ensuring that our client from banking industry complies with the Payment Card Industry Data Security Standard (PCI DSS). The ISA will assess, monitor, and enforce the security measures necessary to protect cardholder data and maintain PCI compliance across all systems and processes. This role works closely with internal stakeholders and external parties to maintain a secure environment, mitigate risks, and improve overall security posture.

Key Responsibilities:

• PCI DSS Compliance Management:- Conduct regular internal assessments and audits to ensure the organization's compliance with PCI DSS.

Develop and implement PCI compliance policies, procedures, and controls.

Serve as the internal point of contact for PCI DSS-related matters and ensure all applicable security controls are in place.

Collaborate with the external Qualified Security Assessor (QSA) to facilitate annual PCI DSS certification audits.

Documentation and Reporting:

Prepare and maintain comprehensive documentation, including policies, procedures, and reports required for PCI DSS compliance.

Maintain comprehensive documentation of assessment findings, corrective actions, and compliance status.

Manage the submission of the Self-Assessment Questionnaires (SAQs) and Attestation of Compliance documents (AOCs) as needed.

Qualifications:

Education:

Bachelor’s degree in Information Security, Computer Science, or a related field (orequivalent work experience).

Experience:

Minimum of 3-5 years of experience in information security, PCI compliance, or a related field.

Previous experience as an ISA, QSA, or a similar role is highly desirable.

Certifications:- Certified PCI Internal Security Assessor (ISA) or Certified PCI Professional (PCIP) certifications preferred.

Additional certifications such as CISSP, CISM, CISA, or CEH are a plus.

Skills and Competencies:

Deep understanding of PCI DSS requirements and data security best practices.

Familiarity with security frameworks (NIST, ISO 27001, CIS Controls) and security technologies (firewalls, IDS/IPS, encryption, etc.).

Strong analytical, problem-solving, and project management skills.

Excellent communication and interpersonal skills with the ability to work cross- functionally.

Proficiency in using security assessment tools and techniques (e.g., vulnerability scanners, SIEM).

Other Requirements:

Ability to work independently and handle sensitive information confidentially.

Detail-oriented with strong organizational skills.

Occasional travel may be required for audits or compliance reviews.

Risk Assessment and Mitigation:

Identify and assess potential risks to cardholder data environments and provide recommendations for risk mitigation.

Implement and enforce necessary security controls to address gaps identified during assessments.

Ensure vulnerability scanning, penetration testing, and security reviews are conducted to identify weaknesses and ensure continuous compliance.

Training and Awareness:

Conduct internal PCI DSS training for staff to ensure a deep understanding of the importance of compliance and security measures.

Provide ongoing guidance and support to departments regarding security best practices related to PCI DSS.

Collaboration and Communication:

Work closely with projects, Enterprise Security, Technology, and other relevant departments to align PCI DSS compliance with overall security policies and practices.

Proactively identify and/or promptly escalation risks and issues affecting PCI compliance status.

Stay updated on changes in PCI DSS requirements and industry best practices to ensure our client from banking industry remains compliant.

Present PCI DSS compliance status reports to senior management and external stakeholders.

Act as a liaison where necessary between our client from banking industry and external vendors or service providers involved in processing or storing cardholder data.

Meet the team

TheHiveCareers

TheHiveCareers is an insurance organization that develops and manages comprehensive insurance products across life, health, and property & casualty lines. The company focuses on digital transformation, data-driven decision-making, and customer-centric product innovation to drive growth and competitive advantage. They operate with emphasis on regulatory compliance (including IFRS 17 standards), advanced analytics, and emerging technologies such as AI and embedded insurance solutions. The organization leverages analytics, automation, and digital channels to enhance operational efficiency and deliver seamless customer experiences across multiple distribution channels including agencies, bancassurance, and digital platforms.