Key Facts

Remote From:

Fixed term

Expert & Leadership (>10 years)

English

Hard Skills

PCI EXtensions For Instrumentation Clinical Auditing Conventional PCI Data Engineering Linux Infrastructure Architecture Encryption Data Lineage Remediation Systems Enterprise Integration Policy Development Microsoft Operating Systems Dependency Analysis Applications Architecture IBM Mainframe Software Security Data Security Cyberinfrastructure Budget Management Compliance Management Microsoft SQL Server Data Engine (MSDE) Good Documentation Practices Solution Architecture Engineering Documentation Conventional PCI Platform Design And Development Network Architecture Impact Assessment Inventory Management Java (Programming Language) Storage Architecture Oracle CRM Process Engineering .NET Key Management Text Manipulation COBOL (Programming Language) Travel Health Change Management Stakeholder Communications

Other Skills

•
Governance
•
Prioritization
•
Verbal Communication Skills

Roles & Responsibilities

Must be Certified PCI DSS QSA from PCI Security Standards Council.
10+ years of experience as an IT professional (infrastructure, security, data engineering, or multi-tiered complex application architecture).
5+ years of experience with PCI DSS audits.
Expert in PCI DSS standards and compliance requirements.

Requirements:

Work on client-identified PCI-related gaps in systems and processes and evangelize PCI compliance as a standard operating procedure.
Establish program framework, define organizational roles and responsibilities, and update critical processes (scope/descope).
Deploy automation for data lineage, dependency and impact analysis, and create program metrics and governance framework.
Define tokenization, encryption, and key management strategies and drive PCI scope reduction to align with PCI DSS 4 requirements.

Veracity Software Inc

About Veracity Software Inc

The definition of Veracity is accuracy and habitual truthfulness. This truly defines our brand in simplistic terms. At Veracity, we believe in doing everything in the ‘Right Way’, which means you have to challenge your own innovations and solutions all the time. Our strength lies in our employees, and with the right blend of business and technical expertise, we set the bar high for Veracity. From inception, Veracity focused on building cloud based SaaS solutions while using the latest and most advanced technology stack. We have delivered cloud based customized solutions and services to various clients across both North America and India. We have a global headquarter in Woodbridge, NJ while our offshore office is in Pune, India. We believe in bringing Global talent together, which helps us in delivering cost effective, yet highly scalable and efficient solutions. With the vision of trying to be one of the trusted IT partners as well as one of the most respected solution providers with an onsite/offshore model, Veracity is equipped with the right set of highly skilled individuals who have expertise in delivering the most effective business services and solutions for our clients. Veracity’s mission is to become the Trusted IT Partner for various businesses across globe.

Founded: 2018

Company size: 51 - 200

Website LinkedIn See all jobs →

Job description

Job Title: Qualified Security Assessor
Job Location: Remote
# Positions: 1
Employment Type: C2H (Must be willing to convert)

Key Technology: PCI Security, PCI DSS Audits

Job Responsibilities:

Work on Client identified PCI-related gaps in many of its systems and processes
Transform the enterprise to evangelize PCI Compliance as a standard operating procedure.
Establish Program Framework
Define organizational roles & responsibilities
Update critical processes, e.g. scope/descope
Work on FY26 plan & budget forecast
Client and Document Enterprise Landscape
Prioritize past audit findings
Establish Remediation Framework and plan
Deploy automation for data lineage, dependency and impact analysis
Create program metrics and governance framework
Build complete PCI / Non-PCI asset inventory
Elaborate PCI related policies and procedures
Initiate design and implementation for priority items
Define Tokenization, Encryption & Key Management Strategies
Ensure alignment with PCI 4 requirements
Transition to PCI as core discipline
Preform PCI Scope Reduction
Modernize and embed PCI Processes
Integrate enterprise compliance

Skills and Experience Required:

Required:

Must be Certified PCI DSS QSA from PCI Security Standards Council.
10+ years overall experience as an IT Professional – Infrastructure, Security, Data Engineering and/or Multi-tiered complex application architecture
5+ years of experience with PCI DSS audits
Expert in PCI DSS standards and compliance requirements
- Must be able to determine whether the system is subject to PCI audit
- Clear experience and ability to identify technical, process and documentation requirements to descope systems
Demonstrated experiences partnering with clients to remediate PCI findings including descoping systems, securing PCI data and ensuring documentation compliance
Experience establishing PCI compliance programs within complex organizations with a broad range of technology platforms
Banking, Payments and/or Financial Services experience
Experience with diverse technology platforms and heterogenous systems (Window/.Net, SQL Server, Java, Linux, Oracle, Cobol, Mainframe, AS400/I-Series, other)
Strong understanding of Infrastructure storage and network architecture and design for PCI compliance
Experience with designing/implementing Encryption, Tokenization and other data security mechanisms to either descope systems or bring into compliance
Excellent verbal and written communication skills
Must be able to travel for client meetings