Senior Security Assessor & Compliance Architect

Valid8 Financial, Inc.; Plano (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Specialized Security Services, Inc. is seeking a Senior Assessor to drive risk assessments, advise on security controls, and ensure projects meet PCI DSS, SOC 2, ISO, NIST, GDPR, and privacy requirements. You will guide clients, interpret standards, and help implement risk mitigations with a strong consulting component.

Ideal candidates bring PCI QSA familiarity, multiple security certifications, and 5+ years of information security governance, risk, and compliance experience.

Qualifications

• University degree in CS, Engineering or related field.
• Two security certifications from (ISC)2 CISSP, ISACA CISM, ISACA CISA, SANS GIAC/GSNA or ISO27001 Lead Implementer/auditor.
• PCI QSA certification or ability to obtain it is strongly preferred.

Responsibilities

• Assess existing controls to determine PCI DSS, SOC 2, ISO, HIPAA, GDPR, NIST, CMMC compliance level and risk.
• Support gap analyses and assessments for PCI-DSS, Risk, SOC 2, NIST, ISO, CMMC, FedRAMP, cyber security.
• Conduct SOC 2 Type I/II readiness assessments including control design review and evidence evaluation.
• Support privacy client engagements and familiarity with GDPR/CCPA frameworks.
• Assist sites in testing, documentation and issue resolution for cyber security programs.
• Perform threat/risk assessments and business impact analysis to identify countermeasures.
• Contribute to enterprise security architecture and security standards aligned with policies and regulations.
• Perform technical security reviews to ensure compliance with policies and standards.
• Maintain up-to-date certifications to address evolving cyber security landscape.

Education

Bachelor's degree in CS/Engineering

CISSP

CISM

CISA

GIAC/GSNA

ISO27001 Lead Auditor

PCI QSA

5+ years information security

Job description

Specialized Security Services, Inc. is seeking a Senior Assessor to drive risk assessments, advise on security controls, and ensure projects meet PCI DSS, SOC 2, ISO, NIST, GDPR, and privacy requirements. You will guide clients, interpret standards, and help implement risk mitigations with a strong consulting component.

Ideal candidates bring PCI QSA familiarity, multiple security certifications, and 5+ years of information security governance, risk, and compliance experience.