PCI Qualified Security Assessor - Home or Hybrid

  • Full-time

Company Description

Who are we?

We’ve been providing high quality end-to-end IT solutions since 2001 and are now one of the largest providers of Communications and IT solutions in the UK.  Think of us an extension to our customers’ IT departments, helping them to optimise their technology. We provide a wide range of solutions and services which makes us an ideal choice, regardless of where our customers stand in their digital journeys or the scale of their requirements. We are also 100% committed to building and maintaining exceptional relationships with our customers and strive to consistently improve and develop in all aspects of our business.

What’s it like to work for us?

We don’t just focus on our customers; we also spend time investing in our colleagues and aim to be as people centric as possible.  We do this by fostering an inclusive and supportive culture where our colleagues feel valued and appreciated. In fact, in our most recent Colleague Engagement Survey, 90% agreed that their manager genuinely cares about them as a person and consistently takes an honest and open approach to communication.

We care about our colleagues and strive to give them the support they need to be the best version of themselves.  We ensure that work works for you by offering flexible working, hybrid/home-based working styles (where possible), holiday purchase schemes, health & wellbeing programs, free day of annual leave for birthdays and more.

Job Description

What’s on offer?

  • Location:                           Home or Hybrid
  • Salary:                               £70k - £90k per annum DoE
  • Car Allowance:                 £5k per annum
  • Contract Type:                 Permanent, Full Time (37.5 hrs per week)
  • Hours:                               08:30 – 17:00 , Mon – Fri

As our dedicated PCI QSA, you’ll assess the secure handling of payment card information, provide guidance on compliance with the Payment Card Industry Data Security Standard (PCI DSS) and conduct thorough validation assessments for our valued customers.

You will also prepare detailed reports on assessment findings, vulnerabilities, and recommendations.  Once the reports are generated, you will present the data to various stakeholders to help drive improvement.

As an expert in your field, you will naturally stay updated on PCI DSS and related security standards and share your knowledge to enhance security awareness within the team. You will also regularly collaborate with various customers and their internal teams, external vendors and third parties to provide expert guidance to all stakeholders, ensuring consistency and overall improvement of our customers’ security posture. 

This is a fantastic opportunity with a forward-thinking company that can offer a healthy work-life balance.  You will have the option to be fully remote (with some travel required to various sites) or work on a hybrid basis from one of our many office locations across the UK.

Please note: Following our recent acquisition of ECSC, we are in the process of porting our license with the PCI Security Standards Council.  We anticipate the license to be in place by March 2024.

Some of the key responsibilities include:

  • Conducting thorough assessments to validate PCI DSS compliance.
  • Identifying vulnerabilities in payment card data handling processes and systems.
  • Collaborating with clients, external vendors, and third-party entities for PCI compliance assessments.
  • Providing expert guidance to stakeholders for implementing security measures.
  • Preparing comprehensive reports on assessment findings, vulnerabilities, and remediation recommendations in PCI DSS compliance.
  • Communicating assessment results clearly to relevant stakeholders.
  • Staying updated on PCI DSS and relevant security standards.
  • Sharing knowledge and contributing to clients' security awareness programs within the team.

Qualifications

Preferred Skills & Experience

  • Maintained QSA status for a minimum of 2 years.
  • Extensive background in information security.
  • Extensive knowledge and experience of assessing PCI DSS and its processes.
  • Held roles such as information security analyst, IT auditor, cybersecurity consultant, or similar positions.
  • Established track record in conducting thorough security assessments, audits, and compliance reviews.
  • Demonstrated expertise in evaluating security controls, identifying vulnerabilities, and providing effective remediation recommendations.
  • Solid understanding of the Payment Card Industry Data Security Standard (PCI DSS) and it's application across environments.
  • Knowledge of wider security frameworks such as ISO 27001, CIS and NIST.

Qualifications

  • The PCI Qualified Security Assessor (QSA) certification, issued by the Payment Card Industry Security Standards Council (PCI SSC) is mandatory.
  • A relevant bachelor's degree (e.g., information technology, computer science, cybersecurity) is preferred, but equivalent work experience or certifications may be considered.
  • Supplementing qualifications with additional cybersecurity certifications, like CISSP, CISM, or CISA, preferred.

Additional Information

Did we mention the perks?

  • Holiday – Starting at 25 (increasing to up to 30 days for each year you stay with us) + a holiday purchase scheme!
  • Free Days – Free day of annual leave for birthdays and weddings.
  • Daisy Grow and Apprenticeships – Giving you the opportunity to expand your skills and knowledge whilst you work for us.
  • Hybrid Working, to ensure work WORKS for you!
  • Enhanced family friendly policies – We are here to look after you and your nearest and dearest.
  • Health & Wellbeing offering – Including discounted membership for health plans + Eye Care Scheme, Employee Assistance Programme, and an in-house Wellbeing team.
  • The Exchange – Online discount platform for more than 1,200 retailers.

Ready for the challenge?  Apply today or contact our friendly Talent Acquisition Team for more information.

Privacy Policy