Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We’re looking for a Senior Consultant support our Technology PCI team.  Position SummaryThe Senior Consultant leads enterprise engagements assessing the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks. This role will have a strong understanding of framework requirements, perform audit/assessments, and develop reports for clients. They will also provide quality control and peer review to other members of the delivery staff. They will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables. A Senior Consultant, will regularly interact with peers and clients as both an auditor and assessor, depending on the engagement. This role will audit information systems with confidence and accuracy to ensure the integrity and effectiveness of security measures. He/she will test technical controls, policies and procedures, laws, regulations, and industry best practices.
<h3>What You'll Do</h3>
<ul>
<li>Lead audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews. </li><li>Prepare, review and approve assessment reports. </li><li>Manage priorities, tasks and hours on projects in conjunction with the project manager to achieve delivery utilization targets. </li><li>Ensure quality products and services are delivered on time. </li><li>Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue</li><li>Provide mentorship to team members in areas of audit, assessment, technical review and writing. </li><li>Interface with clients through entire engagement, interacting will all levels of client organizations. Establish and maintain positive collaborative relationships with clients and stakeholders </li><li>Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area. </li><li>Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables. </li><li>Establish account relationships and identifies upsell and cross sell opportunities and escalates to sales</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience</li><li>Strong Consulting skills with executive leadership and technical professionals; ability to advise and challenge the status quo while building strong relationships</li><li>Ability to build high-trust relationship and credibility quickly</li><li>Strong attention to detail </li><li>Strong problem solving, decision-making, organizational and analytical skills </li><li>Ability to prioritize and manage multiple initiatives/projects. </li><li>Ability to be self-driven and have strong independent initiative.   </li><li>Strong excel skills with ability to develop worksheets with complex formulas </li><li>Ability to facilitate meetings to small or large groups</li><li>Diplomatic and broad minded</li><li>Experience or knowledge of IT security risk assessments and gap analysis</li><li>Experience with one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, FFIEC, or HITRUST</li><li>Experience performing IT security risk assessments and gap analysis</li><li>Experience interacting with management in a consultative manner</li><li>Experience preparing and presenting Tier 1 and Tier 2 Reports on Compliance (ROCs)</li><li>Five or more (5+) years of experience in an IT Security Audit and/or Compliance role</li><li>Strong IT understanding with respect to networks, servers, workstations, and applications</li><li>Experience and knowledge of cloud space (AWS, Azure, GCP, etc.)</li><li>CISSP, CISA or CISM certification (minimum of 1)</li><li>Current or former PCI-QSA certification </li><li>Bachelor's degree (four-year college or university) or equivalent combination of education and work experience</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>Recent experience as a PCI-DSS Auditor and Assessor, preferably as a PCI-QSA</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options.  At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $86,000 to $148,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. #LI-HW2#LI-Remote

Denver

Senior Consultant, PCI QSA | Remote US

Dionach

Dionach are a dynamic cyber security company looking for an experienced Incident Response Consultant to join our growing technical team. Do you have a demonstrable experience in managing and leading incident response engagements for multiple clients? Do you want to continue your technical progression while gaining more responsibilities and leading a service? If so, keep reading, this job is for you! Your main role will be as a Lead Incident Response Consultant, with options for research and development, and to work in other areas of information security consultancy such as assurance. There are opportunities to improve your qualifications, mentor others and work with a wide variety of technologies and organisations. In this role, as the Lead Incident Response Consultant, you will help clients to quickly detect cyber-attacks, respond to threats effectively and help them to improve their security measures. This is a varied role and as a Lead Incident Response Consultant, your responsibilities will be as follows: <ul> <li>Acquisition and analysis of forensic sources to triage client incidents.</li> <li>Timelining of relevant technical events and business activities to establish end-to-end overview of adversary movement and techniques.</li> <li>Provide consultancy on BAU to help establish operations during critical incidents, and support client mitigation and recovery efforts.</li> <li>Reverse engineer malware samples when necessary to discover actionable indicators of compromise.</li> <li>Perform threat hunting across client estates driven by investigation findings and Mitre ATT&amp;CK tactics.</li> <li>Analyse and correlate threat intelligence data from external sources to augment investigation findings.</li> <li>Develop service capabilities through the design of infrastructure and tooling to increase efficiency and accuracy.</li> <li>Deliver client workshops such as tabletop exercises and staff training.</li> <li>Deliver detailed reports presenting all investigation findings required by internal or external stakeholders including possible legal body involvement.</li> <li>Assist clients with the creation and maintenance of incident response policy and procedures.</li> </ul>Requirements<ul> <li>Significant experience in Cyber Security Incident Response (CSIR) plans and preparedness assessment. </li> <li>Experience of multiple incidents and use of technical skills during a cyber-attack, including identification, containment, and eradication of attacks.</li> <li>Familiarity with regulations such as GDPR and the UK Computer Misuse Act.</li> <li>Expertise in digital forensic investigation.</li> <li>Experience of leading customer engagements on-site.</li> <li>Experience of working as the solo consultant on jobs and of working in teams.</li> <li>Outstanding verbal communication skills with the ability to explain things in a clear and non-technical way.</li> <li>Excellent technical writing skills with the ability to write a post-incident report summary for a non-technical audience.</li> <li>Right to work in the UK.</li> </ul>Experiences and skills that would be beneficial <ul> <li>Holding a CREST Cyber Security Incident Response (CSIR) certification. </li> <li>Proactive at writing technical documents and improving processes.</li> <li>Mentoring your peers.</li> <li>Ownership and leadership on developing and providing training courses.</li> <li>An understanding and/or previous experience in penetration testing, red teaming, or technical security assessments.</li> </ul> Benefits<ul> <li>Hybrid working environment – that supports working remotely, with the opportunity to use the offices based on your preference, and of course attend team events!</li> <li>Technical development and given time to develop your skills</li> <li>Training labs</li> <li>Certification training and sponsorship</li> <li>Private health insurance</li> <li>Eye care plan</li> <li>Employee benefits and discounts platform</li> <li>Cycle to work scheme</li> <li>EAP Scheme and well-being platform, including confidential telephone or face to face support and counselling</li> <li>Income Protection if unable to work due to illness or injury</li> </ul>Why choose Dionach?Dionach are a growing information security company specialising in penetration testing and information assurance services. You will have the opportunity to join an experienced team and enhance your skills. Dionach have leading industry certifications including CREST, CHECK, PCI QSA and ISO 27001, with a focus on improving customers’ security, and developing people’s skills and qualifications.Dionach are always looking for self-motivated people who wish to work in a fun, flexible environment, where they can make a difference to the business. We are a growing business which provide opportunities for both interesting work and career development.Dionach actively promote equality and value diversity in our workforce, we support our employees with options such as flexible hours and personal development.We welcome applications from anywhere in the UK.Job Types: Full-time, permanentLocation: Hybrid &amp; remoteStart: ASAP£65,000 - £85,000 per annum, depending on experience and qualifications.

Oxford

Lead Incident Response Consultant (CSIR)

Apply to Pci Qsa Cyber Security Jobs in companies remotely and near you. New Pci Qsa Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Consultant, PCI QSA \| Remote US at Coalfire	Remote Full Time CISM Consultant Audit
Lead Incident Response Consultant (CSIR) at Dionach	Crest GDPR Incident Response Iso 27001 Malware

Pci Qsa Cyber Security Jobs

0 Pci Qsa Cyber Security Jobs. Page 1 of 1

2 closed pci qsa cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Pci Qsa Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Pci Qsa Cyber Security Jobs

0 Pci Qsa Cyber Security Jobs. Page 1 of 1

2 closed pci qsa cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Pci Qsa Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter