Senior Security Consultant – PCI-QSA | Remote | LATAM

Conviso Application Security; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Conviso Application Security is seeking a Senior Security Consultant with PCI-QSA expertise to lead compliance projects. This remote role requires strong analytical skills, relevant certifications, and the ability to work collaboratively with diverse teams. Join us in transforming application security and making a positive impact in the industry.

Qualifications

• Current PCI-QSA certification preferred.
• Experience in conducting IT security risk assessments.
• Intermediate English and Portuguese language skills.

Responsibilities

• Lead audits and assessments, preparing audit plans and evaluating procedures.
• Prepare and review assessment reports, ensuring quality delivery.
• Manage project priorities and collaborate with clients.

Skills

Analytical mindset

Critical thinking

Communication skills

Consulting skills

Problem-solving

Attention to detail

Education

CISSP

CISM

ISO 27001 Lead Implementer

CISA

ISO 27001 Lead Auditor

Job description

Senior Security Consultant – PCI-QSA | Remote | LATAM

Published on MAY 22, 2025

Applications open until JULY 21, 2025

Job type: Effective

Work model: Remote

Also for PwD

Transform the Future of Application Security with Conviso!

Our purpose is to empower developers to build more secure applications, helping companies achieve greater maturity in secure development, mitigate risks, and protect what matters most: their business. We are driven by innovation, investing in research and new technologies to transform the culture of application security around the world.

In 2025, Conviso acquired Matrix Cyber Security, a company recognized by the PCI Security Standards Council as a qualified organization to conduct official compliance audits. We are currently hiring for the position of Senior Security Consultant | PCI-QSA - LATAM, to contribute directly to assessment and compliance projects in information security.

In this role, you will act as an auditor and assessor, collaborating with internal teams and clients from various industries, depending on the nature of each project. We are looking for someone with a sharp analytical mindset and critical thinking skills, capable of evaluating environments, controls, and security processes with accuracy — ensuring compliance with required standards and the effectiveness of implemented practices.

Here at Conviso, we believe that great results come from people who are passionate about hacking and who share our commitment to making the world a safer place. Our culture is transparent, collaborative, and focused on continuous learning. We are also an anywhere office team, with people working from over 34 different cities — and every Insider (what we call our team members) has the freedom to grow from wherever they are.

Ready to turn challenges into solutions and grow with us?

Responsibilities and assignments

• Lead audits/assessments, including preparing the audit plan, reviewing documentation and evidence, evaluating procedures, and conducting client interviews.
• Prepare, review, and approve assessment reports.
• Manage priorities, tasks, and hours on projects in conjunction with the project manager to achieve utilization goals.
• Ensure that quality products and services are delivered on time.
• Escalate client and project issues to management in a timely manner to inform and involve the resources needed to resolve the problem.
• Interact with clients throughout the project, engaging with all levels of the client organization. Establish and maintain positive collaborative relationships with clients and stakeholders.
• Continuous professional development in maintaining industry-specific certifications. Maintain in-depth knowledge in the area of expertise.
• Collaborate with project managers, quality management, sales, and other delivery team members to increase client satisfaction and meet project requirements.
• Estimated travel around 30%.
• Current PCI-QSA certification is preferred (we will consider PCI-ISA, PCI Professional, and ex-QSA).
• One of the following information security certifications is required: CISSP, CISM, or ISO 27001 Lead Implementer.
• One of the following audit certifications is required: CISA, GSNA, CIA, IRCA ISMS Auditor or higher, or ISO 27001 Lead Auditor.
• Strong knowledge of PCI-DSS security standards.
• Experience in preparing Reports on Compliance.
• Experience in conducting IT security risk assessments and gap analysis.
• Experience interacting with management in a consultative manner.

Requirements and qualifications

• Ability to be successful when working remotely.
• Strong understanding of IT with respect to networks, servers, workstations, and applications.
• Excellent communication and presentation skills.
• Written and verbal communication skills, including the ability to explain technical subjects to a non-technical audience.
• Consulting skills with executive leadership and technical professionals.
• Ability to quickly build a relationship of high trust and credibility.
• Strong attention to detail, problem-solving, decision-making, organization, and analytical skills.
• Ability to prioritize and manage multiple initiatives/projects.
• Self-motivation and strong independent initiative.
• Intermediate English and Portuguese language skills for document, presentation, report development, and meetings.

Diversity matters! We value differences and the plurality of race, color, religion, gender and gender identity, nationality, sexual orientation, and age — because we believe in the importance of sharing diverse ideas and perspectives.

Every person matters — no one here is just a number.

Process stages

• Step 1: Registration
• Step 2: Chat with People Hacking
• Step 3: Chat with the Management
• Step 4: Chat with the Certification Director
• Step 5: Hiring

Remote first