Hybrid Security Consultant – PCI QSA

at Integrity360

• Job title: Security Consultant – PCI QSA
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Professional Certificate
• Tech skills: Cyber Security, Linux, Swift, Switching, Unix
• Location requirements: Hybrid, Paris, France

About the role

• Security Consultant leading PCI compliance and security consultancy engagements at Integrity360. Delivering Payment Compliance services and mentoring junior consultants in diverse client environments.

Responsibilities

• Lead security consultancy and assessment engagements and pre-sales processes with clients
• Deliver Payment Compliance services, including PCI data security standard assessments
• Support in PCI Specialized assessments (PCI PIN, PCI P2PE, etc.)
• Conduct SWIFT Gap Analysis
• Review policies and procedures
• Provide advisory for audit preparation and remediation
• Independently estimate the effort required to deliver security service
• Lead customer engagements, providing senior cybersecurity advice and services
• Deliver detailed analytical reporting, internal reporting metrics, and program management
• Provide leadership and mentorship to Junior consultants
• Assess compliance-related documentation, offering remediation support and guidance
• Deliver detailed reports following Integrity360’s reporting best practices and templates
• Ensure QA process for Payments Compliance standards is applied
• Participate in continuous improvement of internal processes

Requirements

• Relevant Experience in Fintech industry and security standards and directives consultancy services (e.g. PCI DSS, PSD2, ISO 27001, SWIFT, etc.)
• Cryptographic techniques including algorithms, key management, and key lifecycle
• Physical security techniques for high-security areas
• Authentication methods and techniques
• Security integrity controls
• Computer Networking (routing, switching, firewall network filtering)
• Operating Systems hardening and administration (Linux/Unix, Windows)
• Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA)
• Hardware security modules (HSMs) operations, policies, and procedures
• POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT
• Excellent written and oral language skills in French and English. Must be able to conduct assessments in both languages.

Benefits

• Learning and development opportunities
• Dynamic culture promoting innovation and collaboration
• High emphasis on team progression and personal development