PCI / GRC Consultant

Description

We are seeking an experienced person with knowledge and experience in the on-premise infrastructure and cloud field.

The successful candidate will play a key role in assessing and validating our organization's compliance with the Payment Card Industry Data Security Standard (PCI DSS).

The PCI DSS Auditor will conduct thorough audits, provide detailed reports, and collaborate with cross-functional teams to ensure the secure handling of payment card information.

Responsibilities:

• Conduct comprehensive assessments for Comsec customer's information systems, processes, and controls to ensure compliance with PCI DSS standards.
• Execute audits efficiently, covering all relevant aspects of cardholder data security.
• Generate detailed reports outlining assessment findings, including areas of compliance and non-compliance.
• Provide clear and actionable recommendations for remediation.

Requirements

• Proven experience in information security, risk management, or compliance roles.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaboratively in a team environment.
• Attention to detail and analytical mindset.
• Familiarity with risk management principles.

Preferred Skills:

• Knowledge or Experience with compliance frameworks (e.g ISO 27001, GDPR, HIPAA)
• Knowledge of encryption technologies, network security, and access controls.
• Two years of experience in on-premise and cloud (AWS\AZURE\GCP) infrastructure systems
• Familiarity with development processes

Nice to Have