Senior Security Consultant - Compliance Leader (Remote)

Remote Genie; Northern (KY); Hybrid; USD 130,000 - 155,000; Full time

Benefits offered by this job

Medical, dental, vision, disability, F

401(k) Plan

Paid time off & holidays

Job summary

Pondurance is seeking a Senior Security Consultant, Continuity and Compliance, to lead compliance‑focused engagements and advise clients on cybersecurity, risk, and regulatory requirements. You will guide assessments, remediation, and policy development across industries, working with executives and technical teams.

The role is remote within the United States, with a strong emphasis on PCI DSS and other frameworks, and a base salary in the advertised range.

Qualifications

• Bachelor’s degree and 5+ years of experience in information security compliance, auditing, and assessments; or 7+ years of demonstrated experience in a related information security discipline.
• Active PCI DSS Qualified Security Assessor (QSA) certification, with a professional certification such as CISSP, CISA, CMMC, or an equivalent credential required.
• Strong working knowledge of security and regulatory frameworks, including PCI DSS, NIST, HIPAA, and CMMC, with the ability to interpret requirements and apply them within client environments.
• Strong technical foundation in core IT and security concepts, including networking, databases, operating systems, and security controls, with the ability to evaluate technical environments for risk and compliance.
• Demonstrated critical‑thinking, problem‑solving, and advisory skills, including root cause analysis, sound professional judgment, and practical recommendations.
• Strong consulting, communication, and engagement‑management skills, with the ability to communicate effectively with technical teams, business stakeholders, and executive leaders while managing multiple priorities and client engagements.
• Preferred: Experience establishing, developing, or maturing information security programs.

Responsibilities

• Lead and execute multiple client consulting engagements concurrently, ensuring delivery aligns with scope, timelines, budgets, and quality standards.
• Lead annual PCI DSS compliance assessments, including SAQs, ROCs, and other validation activities per PCI SSC requirements.
• Serve as a SME for PCI DSS, NIST, HIPAA, and other security/compliance frameworks, providing accurate guidance.
• Assess client security programs, controls, and regulatory requirements to identify risks and gaps.
• Develop practical remediation strategies aligned with regulatory requirements and client needs.
• Own assigned engagements from initiation to completion, ensuring deliverables are accurate and ready.
• Conduct client interviews and workshops with leadership and teams to evaluate controls and findings.
• Establish and advise on client policies, procedures, and controls for compliance and risk management.
• Provide strategic guidance and professional judgment in complex client situations.
• Provide technical direction and mentorship to consultants to ensure consistency and quality.

Skills

QSA certification

Regulatory knowledge

Advisory skills

Risk assessment

Project management

Education

Bachelor’s degree in information security or related field

Tools

PCI DSS

NIST

HIPAA

CMMC

Job description

Pondurance is seeking a Senior Security Consultant, Continuity and Compliance, to lead compliance‑focused engagements and advise clients on cybersecurity, risk, and regulatory requirements. You will guide assessments, remediation, and policy development across industries, working with executives and technical teams.

The role is remote within the United States, with a strong emphasis on PCI DSS and other frameworks, and a base salary in the advertised range.