REMOTE PCI Qualified Security Assessor (QSA)

Insight Global; Hoover (AL); Remote; USD 120,000 - 180,000; Full time

Job summary

Insight Global is seeking a PCI Qualified Security Assessor (QSA) to lead formal PCI DSS assessments for organizations that store, process, or transmit cardholder data. You will identify gaps, guide audit readiness, and produce ROC/AOC reports, coordinating with client IT and security teams in a remote onshore capacity.

The role requires active QSA certification, knowledge of PCI QPA/P2PE, risk assessment and control testing, and experience with encryption and cardholder data environments, with

Qualifications

• Active PCI QSA certification
• At least one PCI QPA or P2PE certification
• Strong background in information security, cybersecurity, or IT audit/compliance
• Experience performing risk assessments and gap analyses
• Experience with PCI DSS assessments and audits
• Familiarity with encryption, payment systems, and cardholder data environments (CDEs)
• Experience with control validation and audit documentation
• Proficient in producing ROC/AOC and other audit reports

Responsibilities

• Perform end-to-end PCI DSS assessments for client environments handling cardholder data
• Conduct security audits using interviews, documentation reviews, system analysis, and control testing
• Evaluate compliance against PCI DSS standards and identify gaps, risks, and deficiencies
• Collect, review, and validate audit evidence to support findings
• Provide remediation guidance and recommendations to improve security posture
• Prepare and deliver formal assessment reports (ROC, AOC) for stakeholders
• Partner with client IT, security, and business teams to ensure readiness and certification
• Present findings and progress to internal leadership and client stakeholders

Skills

QSA certification

PCI QPA / P2PE knowledge

PCI DSS audits experience

information security / IT audit

risk assessment and gap analysis

control testing

encryption / CDE experience

GRC tools / audit reporting

Job description

Job Description

We are seeking a PCI Qualified Security Assessor (QSA) to support payment security compliance initiatives for organizations that store, process, or transmit credit card data. This role will be responsible for conducting formal PCI DSS assessments, identifying compliance gaps, and guiding clients through audit readiness and certification.

This position is remote (onshore) and will support a dedicated PCI practice, with interviews conducted by senior members of the PCI assessment team.

Key Responsibilities

• Perform end-to-end PCI DSS assessments for client environments, including systems, applications, and processes handling cardholder data
• Conduct security audits using interviews, documentation reviews, system analysis, and control testing
• Evaluate compliance against PCI DSS standards and identify gaps, risks, and control deficiencies
• Collect, review, and validate audit evidence to support compliance findings
• Provide remediation guidance and recommendations to improve security posture and achieve compliance
• Prepare and deliver formal assessment reports (e.g., ROC, AOC) for stakeholders
• Partner with client IT, security, and business teams to ensure audit readiness and successful certification
• Present assessment findings and progress updates to both internal leadership and client stakeholders

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Active certification as a PCI Qualified Security Assessor (QSA)
• Needs to have at least one of the PCI QPA & P2PE certifications (see in plusses)
• Must be listed and in good standing on the PCI Security Standards Council (PCI SSC) certification site
• Strong experience supporting PCI DSS compliance assessments and audits
• Background in information security, cybersecurity, or IT audit/compliance
• Experience performing risk assessments, gap analysis, and control validation PCI QPA (Qualified PIN Assessor) certification
• PCI P2PE (Point-to-Point Encryption) certification
• Experience with payment systems, encryption, and cardholder data environments (CDEs)
• Familiarity with GRC tools, audit documentation, and compliance reporting