Security Analyst I (PCI)

Boardroom Appointments; Cape Town; On-site; ZAR 480,000 - 620,000; Full time

Job summary

Boardroom Appointments seeks a Security Analyst I (PCI) to meticulously analyse existing security controls and devise fortified measures to protect payment card data.

You will design and implement strategies to enhance PCI compliance, work with cross-functional teams, and help strengthen the organization's security posture in a fast-paced environment.

Strong analytical skills, PCI DSS knowledge, and the ability to document threats are essential.

Qualifications

• Diploma or degree in computer science, cybersecurity or related field.
• Certifications such as PCIP, CISSP, or CISM.
• +2 years of cybersecurity experience with various security products such as firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption.
• Hands-on knowledge of security standards, architecture, and models.
• Experience in Incident Response including documenting threats and coordinating remediation.
• Familiar with NIST CSF, ISO standards, MITRE framework and risk management methodologies.
• Experience in PCI compliance and payment card data protection.
• Solid understanding of PCI DSS requirements and their application.
• Proficiency with security tools for vulnerability assessment, intrusion detection, and incident response.
• Excellent communication and collaboration with internal teams and external partners.

Responsibilities

• Analyse existing security controls and devise fortified security measures.
• Develop and implement strategies to enhance PCI compliance and mitigate payment card data risk.
• Collaborate with cross-functional teams to execute large-scale cybersecurity initiatives.
• Support incident detection, response, and remediation activities.
• Maintain knowledge of current threats and industry best practices.

Skills

Security analysis

Incident response

PCI DSS knowledge

NIST/ISO risk management

Communication

Education

Diploma / Degree in CS or cybersecurity

Tools

Firewalls

EDR

SIEM

WAF

IAM

PAM

DLP

Encryption

Job description

• Diploma / Degree in computer science, cybersecurity, or any related field.
  
• Recognised industry certifications in cybersecurity such as PCI Professional (PCIP), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).
• +2 years of experience in cybersecurity, with solid experience across a variety of security products including firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption solutions.
• Hands on knowledge of Information Security standards, architecture, and models.
• Experience in Incident Response: including the ability to document security threats, resolve technical faults and allocate resources to deliver the applicable solutions.
• Solid understanding of security frameworks (NIST Cybersecurity Framework, ISO Standards and MITRE Framework) and risk management methodologies.
• Demonstrated experience in information security, with a focus on PCI compliance and payment card data protection.
• Strong understanding of PCI DSS requirements and their application in different organisational contexts.
• Proficiency in security tools and technologies for vulnerability assessment, intrusion detection, and incident response.
• Excellent communication and collaboration skills to work effectively with internal teams and external partners.

Responsibilities:

• The purpose of the Security Analyst I (PCI) role is to meticulously analyse existing security controls and devise novel and fortified security measures.
• These measures are designed to proactively safeguard sensitive payment card data against evolving security threats and ensure compliance with Payment Card.
• Industry Data Security Standard (PCI DSS) requirements.
• The role entails the development and implementation of comprehensive strategies to enhance PCI compliance and mitigate risks associated with payment card data handling.
• Additionally, the Security Analyst I (PCI) collaborate closely with cross functional teams to execute large-scale initiatives aimed at bolstering the organization's overall cybersecurity posture.
• Success in this role requires a professional with exceptional analytical and problem solving skills, adept at navigating a dynamic and fast-paced environment.
• Moreover, the ideal candidate possesses a genuine passion for cybersecurity and demonstrates proficiency in related technologies and methodologies.