Senior Consultant, PCI QSA

Responsibilities

• Lead full-cycle audits and assessments, including audit plan preparation, documentation review, and client interviews
• Prepare, review, and approve assessment reports and Reports on Compliance (ROCs)
• Manage project priorities, tasks, and timelines in collaboration with Project Managers to meet delivery targets
• Provide quality control, peer reviews, and direct coaching to team members to ensure high-quality work products
• Interface with clients at all organizational levels to establish and maintain collaborative relationships
• Perform IT security risk assessments and gap analyses
• Mentor junior staff in audit, assessment, technical review, and professional writing
• Travel 25-50% as required for client engagements

Requirements

• 5+ years of experience in an IT Security Audit and/or Compliance role
• One of the following Information Security certifications: CISSP, CISM, or ISO 27001 Lead Implementer
• One of the following Audit certifications: CISA, GSNA, CIA, IRCA ISMS Auditor, or ISO 27001 Lead Auditor
• Strong knowledge of PCI-DSS security standards and experience with Tier 1 and Tier 2 ROCs
• Familiarity with common IT Audit frameworks such as SOC 2, ISO 27001, FedRAMP, or HITRUST
• Bachelor's degree or an equivalent combination of education and work experience
• Strong Excel skills, including the ability to develop worksheets with complex formulas
• Excellent communication skills with the ability to explain technical matters to non-technical audiences

Preferred Qualifications

• Current PCI-QSA certification (or former QSA status)
• Experience interacting with executive leadership in a consultative manner

Benefits

• Flexible work model with remote opportunities
• Competitive salary and potential for annual incentive programs
• Paid parental leave and flexible time off
• Certification and training reimbursement
• Digital mental health and wellbeing support membership
• Comprehensive insurance options

About the Company

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and help companies navigate the ever-changing cybersecurity landscape. We are a team of passionate problem-solvers, thought leaders, and cybersecurity experts dedicated to making a difference.