Senior Security Consultant, Continuity and Compliance – PCI DSS QSA

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $130k - $155k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Pondurance's careers page, not through a job board

First seen by Remote Rocketship 2 minutes ago

Logo of Pondurance

Pondurance

51 - 200 employees

💼 Consulting

🏥 Healthcare

🛡️ Insurance

💰 Private Equity Round on 2020-10

Consulting • Healthcare • Insurance

Pondurance is a company that specializes in providing risk-based cybersecurity solutions. They offer managed detection and response (MDR) services, incident response, vulnerability management, and advisory services customized to meet the complex compliance and security demands of various industries. Known for their consultative and personalized approach, Pondurance empowers organizations to protect their valuable assets, reduce cyber risk, and maintain compliance. Their unique MDR solutions deliver ongoing risk assessments and cyber risk reduction reports through the MyCyberScorecard portal, making them a distinguished vendor in the Gartner 2024 Market Guide for Managed Detection and Response. By combining digital forensics and incident response expertise, Pondurance helps businesses navigate cybersecurity challenges with a tailored methodology and flexible pricing options.

📋 Description

• Lead annual PCI DSS compliance assessments, including SAQs, ROCs, and other validation activities • Serve as a PCI DSS subject-matter expert and trusted advisor throughout the assessment lifecycle • Assess client security programs, technical controls, and regulatory requirements to identify risks, vulnerabilities, compliance gaps, and improvement opportunities • Develop remediation strategies and recommendations aligned with regulations, frameworks, risk, and client business needs • Own consulting engagements from initiation through completion, including assessment deliverables • Conduct client interviews, advisory sessions, and workshops with executive, technical, and stakeholder groups • Establish, review, and advise on client policies, procedures, and controls • Provide strategic guidance on complex client security and compliance situations • Review other consultants’ work and provide technical guidance and mentorship • Support engagements involving NIST, HIPAA, CMMC, or related frameworks

🎯 Requirements

• Active or recently active PCI DSS Qualified Security Assessor (QSA) qualification • Bachelor’s degree and 5+ years of experience in information security compliance, auditing, and assessments; or 7+ years of demonstrated experience in a related information security discipline • Ability to satisfy applicable PCI SSC and Pondurance affiliation or requalification requirements • Demonstrated experience independently leading ROCs for Level 1 merchants, service providers, or similarly complex environments • Strong working knowledge of PCI DSS v4.0.1, including scoping, segmentation, evidence sampling, compensating controls, customized approaches, and reporting requirements • Experience evaluating payment environments, cardholder data flows, cloud infrastructure, networks, operating systems, databases, applications, identity controls, logging, vulnerability management, and security operations • Strong client-facing consulting skills and ability to communicate with technical and executive stakeholders • Ability to manage multiple assessments and produce accurate, timely, and defensible deliverables • Current or future U.S. work authorization requirements stated in application questions • Background and drug screenings required as part of the hiring process

🏖️ Benefits

• Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance • 401(k) Plan • PTO, sick leave, holidays, and parental leave • Bonus or other incentive compensation may be available • Inclusive culture of teamwork • Opportunity to apply expertise, take on new challenges, and help customers address security objectives • Access to office in McLean, VA for nearby remote employees

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 21 minutes ago

Nature's Way

501 - 1000

🏥 Healthcare

🍽️ Food & Beverage

🧘 Wellness

Cybersecurity Manager leading Nature’s Way’s enterprise security operations, risk, compliance, and Microsoft security capabilities. Improving incident response and protecting a holistic health products business.

🔥 47 minutes ago

Cyclotron, Inc.

51 - 200

💼 Consulting

🏥 Healthcare

📦 Logistics

Threat Protection Security Engineer deploying Microsoft Defender XDR and Sentinel for enterprise clients. Designing and implementing cloud and on-premises security solutions at Cyclotron, a Microsoft Solutions Partner.

🔥 47 minutes ago

Cyclotron, Inc.

51 - 200

💼 Consulting

🏥 Healthcare

📦 Logistics

Security Architect designing Microsoft Defender XDR and Sentinel deployments for Cyclotron’s enterprise clients. Improving cloud, endpoint, network, and Microsoft asset security across on-premises and cloud environments.

🔥 3 hours ago

Liftoff Mobile

501 - 1000

📣 Marketing

Senior Offensive Security Engineer protecting Liftoff’s AI-powered mobile app marketing platform. Leading penetration testing, continuous AI-assisted security testing, remediation, and incident-response improvements.

🔥 6 hours ago

TRM Labs

201 - 500

₿ Crypto

📋 Compliance

🤝 B2B

Deployment Strategist guiding U.S. defense and intelligence customers using TRM’s AI-powered intelligence solutions. Driving onboarding, mission adoption, renewals, and expansion.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok