Назад
Company hidden
4 дня назад

Senior Information Security Consultant (QSA)

130 000$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Senior Information Security Consultant (QSA): Evaluating client business technology and operations against security frameworks with an accent on PCI DSS, NIST, and CMMC compliance. Focus on producing high-quality audit reports, mentoring consultants, and serving as a Subject Matter Expert to drive robust security program development.

Location: Remote (US). Role requires up to 50% travel to client sites and events.

Salary: Midpoint $130,000

Company

hirify.global is a professional services firm providing integrated solutions across consulting, technology, and compliance to public and private sector clients.

What you will do

  • Evaluate client business, technology, and operations against security standards like PCI DSS, NIST, and CMMC.
  • Produce detailed, high-quality reports for clients and industry third parties.
  • Take ownership of project work, including PCI DSS assessments, from start to finish.
  • Mentor and coach other consultants on PCI compliance and security best practices.
  • Serve as a Subject Matter Expert to assist customers in developing and maintaining security programs.
  • Execute control reviews across technology and business teams against frameworks like SOC2, CIS, and ISO27001.

Requirements

  • Bachelor's degree in computer science, information technology, or related field.
  • Minimum of three years’ experience performing security assessments for PCI compliance as a QSA.
  • Current QSA certification from the PCI Security Standards Council (or ability to obtain within one month).
  • Strong experience in assessing and implementing cybersecurity risk management programs.
  • Ability to present security concepts to both technical and functional audiences.
  • Willingness to travel up to 50% of the time to client sites.

Nice to have

  • Audit or security certifications such as CRISC, CRMP, CISSP, CISM, or CISA.
  • Membership in relevant organizations like OWASP, InfraGard, or ISSA.

Culture & Benefits

  • Flexible Time Off (FTO) policy activated on the first day.
  • Comprehensive insurance options including health, dental, vision, and life.
  • 401(k) plan with employer contributions.
  • HSA employer contribution and wellness program.
  • Paid parental bonding leave and nine paid holidays annually.
  • Tuition reimbursement and CPA bonus program.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →