Job Title: PCI Internal Security Assessor (ISA)

Location: Regionwide/Fully Remote

Employment Type: Contract - 1 year (renewable).

Job Overview

The PCI Internal Security Assessor (ISA) is responsible for ensuring that our client within the banking industry complies with the Payment Card Industry Data Security Standard (PCI DSS). The ISA will assess, monitor, and enforce the security measures necessary to protect cardholder data and maintain PCI compliance across all systems and processes. This role works closely with internal stakeholders and external parties to maintain a secure environment, mitigate risks, and improve overall security posture.

Key Responsibilities:

PCI DSS Compliance Management:

• Conduct regular internal assessments and audits to ensure the organization's compliance with PCI DSS.
• Develop and implement PCI compliance policies, procedures, and controls.
• Serve as the internal point of contact for PCI DSS-related matters and ensure all applicable security controls are in place.
• Collaborate with the external Qualified Security Assessor (QSA) to facilitate annual PCIDSS certification audits.

Risk Assessment and Mitigation:

• Identify and assess potential risks to cardholder data environments and provide recommendations for risk mitigation.
• Implement and enforce necessary security controls to address gaps identified during assessments.
• Ensure vulnerability scanning, penetration testing, and security reviews are conducted to identify weaknesses and ensure continuous compliance.

Documentation and Reporting:

• Prepare and maintain comprehensive documentation, including policies, procedures, and reports required for PCI DSS compliance.
• Maintain comprehensive documentation of assessment findings, corrective actions, and compliance status.
• Manage the submission of the Self-Assessment Questionnaires (SAQs) and Attestation of Compliance documents (AOCs) as needed.

Training and Awareness:

• Conduct internal PCI DSS training for staff to ensure a deep understanding of the importance of compliance and security measures.
• Provide ongoing guidance and support to departments regarding security best practices related to PCI DSS.

Collaboration and Communication: