Cyber Consulting - PCI Security Specialist - Senior Consultant - Location Open

$103,800 - $190,300/Yr

Ernst & Young - Huntsville, AL

Full-time - Mid Level

Huntsville, AL

Professional, Scientific, and Technical Services

About the position

As a Senior Consultant specializing in PCI Security within EY's Cybersecurity practice, you will lead the implementation of data protection strategies and solutions for clients. This role focuses on ensuring compliance with payment card security standards and enhancing clients' information security measures. You will work collaboratively with a team of specialists to address complex cybersecurity challenges and contribute to the resilience of client businesses.

Responsibilities

• Lead the delivery of multiple processes, solutions, or projects in the realm of data protection and privacy.
• Plan and execute PCI assessment engagements for clients, focusing on payment card compliance and security (PCI-DSS).
• Coordinate and report on project deliverables and track project status with clients' management and key stakeholders.
• Validate PCI requirements testing results and collaborate with clients to remediate compliance gaps.
• Engage in client working sessions and serve as a team lead or workstream member as required.
• Support sales opportunities by contributing to service proposals and RFP responses.

Requirements

• Bachelor's degree in a relevant field such as Computer Science, Information Systems, Engineering, Business, or related major.
• 2 to 4 years of experience conducting and leading PCI assessment and audits with a strong understanding of PCI DSS.
• Experience executing PCI DSS Reports of Compliance and Self-Assessment Questionnaires, along with remediation activities to achieve compliance.
• Strong understanding of various compliance frameworks, including ISO, NIST, SOX, HIPAA, and GDPR.
• Ability to interpret and apply regulatory requirements to client environments.

Nice-to-haves

• Relevant cybersecurity certifications such as CISSP, CISM, CISA, and CEH, with PCI QSA certification highly preferred.
• Proficiency in security controls and best practices for information security.
• Familiarity with security technologies and tools (e.g., firewalls, intrusion detection/prevention systems, encryption, vulnerability scanners).
• Proficiency in using GRC (Governance, Risk, and Compliance) tools.
• Knowledge of cloud security and emerging technologies.

Benefits

• Comprehensive compensation and benefits package based on performance.
• Medical and dental coverage.
• Pension and 401(k) plans.
• Wide range of paid time off options.
• Flexible vacation policy allowing employees to decide how much vacation time they need.