The Opportunity

NCC Group provides Information Assurance consultancy to help companies protect critical systems and information. We do this by defining security strategies, conducting compliance audits, developing policies, conducting security maturity and risk assessments and architecture reviews and by delivering security awareness & training sessions. We also provide security staff augmentation to clients so that our consultants may occupy security roles within the client environment in the short, medium or long term.

Our core information risk management and compliance services include:

Strategy policy and awareness Virtual security team

Data discovery and mapping Risk assessment and design review

Continuity/Resilience Data privacy and GDPR

ISO 27001 Supplier assured

PCI 3DS, PCI P2PE, PCI SSF audits Incident response planning

PCI Card Production and PIN audits Cyber security review

Alongside our core services, we have a range of bespoke services to help organisations protect their systems and information:

Risk Assessments

Security Architecture Review

Information Security Awareness and Training Programmes

Information Security Policy Development

Security Transformation Programmes

We have a fantastic new opportunity to join our Global Professional Services division for a PCI Qualified Security Assessor (QSA) Consultant. The ideal candidate will have commercial experience within the information and assurance field, gained from delivering a diverse range of security and assurance services ideally into a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with senior client stakeholders.

The Challenge

Liaise with the Resource Management and Sales team during the sales cycle to assist in quantifying, pricing and organising the consulting resources required for the project delivery.

Assist with sales proposals, bids and tenders for delivery of PCI and Audit & Compliance services.

You will conduct on-site and remote activities to advice, assess, analyse and report in line with the engagement project requirements. This will involve meeting client stakeholders, conduct of documentation reviews, auditing technical solutions and systems as well as presenting information and advice to senior business partners.

Translate the technical and non-technical findings from an assessment or exercise into relevant, actionable information for customers

Responsible for adhering to all internal policy and procedures in relation to security and quality best practice

Ability to travel to client sites in the UK and abroad to perform engagements of varying durations as required

 Essential Skills

Above all, we would like to speak with people who are passionate about what they do.

You hold or have held a PCI Qualified Security Assessor (QSA) qualification and delivered PCI DSS assessments. 

You hold or have held other PCI assessor qualifications such as PCI 3DS Assessor, PCI Card Production Security Assessor (CPSA), P2PE Assessor, Qualified PIN Assessor (QPA) or Secure Software Assessor. You are interested in expanding your PCI skills to include assessing against these standards.

You will be working in areas mainly focusing on PCI QSA however other skills include as NIST 800-53, SANS Top 20 CSC, ISO 27001, Risk Assessment (ISO27005) EU GDPR and other frameworks as requested by clients.

Have the ability to deliver projects within time and in budget and to a high level of customer satisfaction – exercising customer care at all times

Demonstrate a strong ability to develop a rapport with customers and to engender long lasting relationships

Have strong business, consultancy and technical skills within the IT Security Industry

Excellent communication and presentation skills

The following additional attributes would be advantageous:

Excellent attention to detail and documentation

You have performed an Internal Security Assessor (ISA) role supporting PCI DSS assessments.

Qualified Security Assessor (QSA)

Industry standards such as NIST 800-53, SANS 20 CSC, ISO 2700 Series, GDPR

Customer facing experience

NCSC CCP, CISSP would be an advantage

Please do not hesitate to apply.