Senior Security Consultant (Compliance)

Function:

The Senior Security Consultant will be primarily responsible for helping build the organizations customer base through delivery of PCI related engagements.


Position Purpose:

The purpose of this position is to provide our customers assistance with meeting their PCI compliance. This will be accomplished through a risk based, consultative approach.


MAJOR RESPONSIBILITIES/ACCOUNTABILITIES

Compliance Consulting

  • Perform onsite PCI assessments (DSS ROC, SAQ) for our clients on a national level
  • Take the lead in leveraging existing client relationships and identifying additional services available to the customer
  • Assessing, recommending, and implementing business and technical solutions to mitigate security risks for our clients
  • Delivery of information risk management engagements in areas such as, information security, e-Business risk management, application security, and project risk management
  • Targeting and presenting new compliance services to potential clients and advising them on their compliance requirements

PCI Approved Scanning Vendor Delivery

  • Assist with further developing the ASV service offering
  • Maintain primary lead with reviewing external and internal scans
  • Ensure remediation scans are scheduled and completed

Compliance Pre Sales Support

  • Validate scope of PCI engagements to oversee Level of Effort
  • Assist with customer meetings to provide insight into PCI compliance and what is required by the customer

Quality Assurance and Training

  • Contribute to the internal PCI team by providing QA of team member's PCI deliverables (ROC, SAQ)
  • Ensure PCI QSA certification is updated on an annual basis and attend PCI Community Meeting (as needed)
  • Cross train on additional Regulatory Compliance needs such as, HIPAA, SOX, FISMA, and NERC/FERC

Other responsibilities/accountabilities (marginal functions):

Support technical management team with time tracking and billing activities



KNOWLEDGE/SKILLS/ABILITIES REQUIRED

  • Must be a PCI Security Standard Qualified Security Assessor (QSA)
  • Strong client services orientation accustomed to taking an active role in executing engagements
  • Security knowledge related to (Audit, Design, Implementation, Testing, and Management)
  • Perform or lead detailed information security risk assessments
  • Policy and procedure review and implementation skills
  • A seasoned advisor with exceptional interpersonal skills who has demonstrated the ability to gain confidence and respect of senior executives
  • Highly motivated individual able to work unsupervised and have a professional demeanor with customers
  • Excellent documentation and deliverable creation skills
  • Bachelor's Degree or equivalent work experience
  • At least four years in an information security role or compliance background
  • CISSP, CISA, or CISM Preferred

Physical Requirements:

None


LOCATION

Southfield, MI



Click here to apply