Information Security Consultant (PCI QSA)

Job Title: Information Security Consultant (PCI QSA)

Location: Hybrid (Office & Remote)

Company: 24 Solutions Turkey Bilgi Teknolojileri ve Ticaret A.Ş.

Job Type: Full-Time

---

About Us:

24 Solutions Turkey is a cybersecurity company with a focus on payment security as a PCI QSA company. Our services including but not limited to PCI DSS assessment/audit and consultancy, penetration testing, vulnerability scanning, ASV solutions, secure code review, red team/blue team/purple team and trainings.

Our customer portfolio consists of leading banks, biggest e-commerce and marketplace companies, payment facilitators / payment service providers, data centers, insurance companies and numerous other big corporate companies in various industries.

24 Solutions has an experience over 20 years; the group was founded in 2001 in Stockholm, Sweden and has a group company in Rome, Italy.

We are seeking a highly skilled and motivated Information Security Consultant (Qualified Security Assessor - PCI QSA) to join our dynamic team. As a PCI QSA, you will play a critical role in ensuring our clients' compliance with the Payment Card Industry Data Security Standard (PCI DSS). You will work directly with the CEO and will be able to work remotely as well as at the office when needed (hybrid). If you are passionate about cybersecurity, possess deep knowledge of PCI DSS requirements, and have a strong background in information security, we want to hear from you!

Key Responsibilities:

• PCI DSS Assessments: Conduct comprehensive PCI DSS assessments for clients, including on-site reviews, document analysis, and interviews to ensure compliance with all relevant standards.

• Risk Assessment: Identify and assess security risks within client environments, providing expert recommendations for mitigation and improvement.

• Documentation: Prepare detailed reports and documentation, including the PCI DSS Report on Compliance (ROC), Attestation of Compliance (AOC), and other relevant documents.

• Client Engagement: Work closely with clients to understand their business operations, guide them through the compliance process, and provide clear and actionable advice.

• Audit Support: Assist clients during external audits and provide guidance on remediation efforts as needed.

• Training & Education: Educate clients on PCI DSS requirements, industry best practices, and emerging trends in cybersecurity.

• Continuous Improvement: Stay updated on the latest developments in PCI DSS, cybersecurity threats, and industry standards to ensure ongoing compliance and security improvements for clients.

Qualifications:

• Experience: Minimum 10 years of experience in information security, preferably with a focus on PCI DSS assessments and compliance.

• Education: University degree on related areas (Computer Engineering, Industrial Engineering, Management Information Systems etc.)

• Technical Knowledge: Strong understanding of information security principles, network security, encryption, authentication, and other relevant technologies.

• Regulatory Knowledge: In-depth knowledge of PCI DSS requirements and other relevant regulations, such as GDPR, ISO 27001, HIPAA, or SOX.

• Communication Skills: Excellent written and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.

• Problem-Solving: Strong analytical and problem-solving skills, with the ability to identify and address security vulnerabilities.

• Attention to Detail: Meticulous attention to detail in conducting assessments, documenting findings, and ensuring compliance.

• Team Player: Ability to work collaboratively with internal teams, clients, and external auditors.

• Travel: Willingness to travel as required for on-site assessments (if applicable).

• Turkish and English language proficiency

Preferred Qualifications:

• QSA Certification: Preferably hold a current PCI QSA certification or has the required experience and pre-requisite certifications to become a QSA.

• Experience in performing security assessments in various industries, such as e-commerce, finance, healthcare, insurance or retail.

• Knowledge of Cyber Security principles and practices

• Strong understanding of Penetration Testing and Vulnerability Scanning

• Certifications on both IT Security and Audit disciplines such as CISSP, CISA, CISM or CEH are preferred

• Excellent communication and problem-solving skills

---

Application Process:

If you are a qualified security expert with a passion for ensuring data security and compliance, we encourage you to apply. Please submit your resume and a cover letter detailing your relevant experience and qualifications to [email protected] or apply via LinkedIn.

---

24 Solutions Turkey is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.