Technical Payments Consultant ( QSA)

Tevora•Fairfax, VA

3d•$98,000 - $158,000

About The Position

Technical Payments Consultant (QSA) at Tevora Irvine, CA If you haven't heard of Tevora, it's because we've done our job! Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you. What's the role? As a Technical Payments Consultant and Qualified Security Assessor (QSA), you will play a critical role in providing expert guidance and technical expertise to clients in the payments industry. You will be responsible for assessing and ensuring the security and compliance of payment systems, applications, and processes. Your experience as a PCI QSA will be instrumental in evaluating, recommending, and implementing robust security measures to protect sensitive payment data and maintain regulatory compliance. A day in the life could include:

Requirements

Minimum of 1 year of experience as a PCI Qualified Security Assessor (QSA), conducting payment security assessments and ensuring compliance with industry standards such as PCI DSS.
Bachelor's degree in Computer Science, Information Security, or a related technical field in STEM.
Strong analytical and problem-solving skills, with the ability to identify security risks and recommend appropriate solutions.
Excellent communication and interpersonal skills, with the ability to convey technical concepts to both technical and non-technical audiences.
Proven ability to work independently and in cross-functional teams to achieve project objectives.
In-depth knowledge of payment security technologies, payment processing, encryption, and tokenization methods.
Familiarity with industry frameworks and standards, including PCI DSS, PA-DSS (or SSF), ISO 27001, and NIST Cybersecurity Framework.
A commitment to maintaining the highest level of confidentiality and professionalism.
Eligibility to work in the United States.

Responsibilities

Payment Security Assessments: Conduct comprehensive and detailed assessments of clients' payment systems, applications, and processes to identify potential security vulnerabilities and compliance gaps.
Evaluate and analyze payment architectures, technologies, and payment processing environments to ensure they meet industry standards and regulatory requirements.
Compliance and Certification: Leverage your expertise as a Qualified Security Assessor (QSA) to guide clients through the compliance process, ensuring adherence to relevant industry standards such as PCI DSS, PA-DSS (or SSF), and other payment-related regulations.
Assist clients in obtaining and maintaining relevant certifications and compliance reports.
Security Recommendations and Remediation: Provide clients with detailed recommendations and strategies to enhance the security posture of their payment systems and applications.
Collaborate with client teams to develop and implement effective remediation plans to address identified security vulnerabilities and compliance issues.
Technical Consultation: Offer technical expertise and guidance to clients on implementing secure payment technologies, encryption methods, secure data storage, and secure coding practices.
Advise clients on best practices for securing payment card data and sensitive financial information.
Client Relationship Management: Establish and maintain strong working relationships with clients, acting as a trusted advisor on payment security matters.
Serve as the primary point of contact for technical discussions and security-related inquiries.
Industry Awareness: Stay up-to-date with the latest trends, developments, and regulatory changes in the payments industry and cybersecurity domain.
Continuously improve your knowledge and skills to remain at the forefront of payment security practices.
Additional duties as assigned