EY
Cyber Consulting - PCI Security Specialist - Manager - Location Open
EY, Providence, Rhode Island, us, 02912
EY Cyber Consulting - PCI Security Specialist - Manager - Location OpenAt EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. Join us and build an exceptional experience for yourself, and a better working world for all.
Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business.
The opportunity
We currently have a career opportunity for a Manager in our Cybersecurity practice for our Data Protection & Privacy capability with demonstrated experience in developing data protection strategies and implementing solutions to provide data security, privacy, and integrity.
As a PCI Security Specialist, you will be at the forefront of safeguarding our client's most valuable assets in the digital realm. You will play a critical role in enabling organizations to maintain an effective data protection stance throughout the entire data lifecycle.
Your key responsibilities
Leading and executing PCI assessment engagements for clients, focusing on payment card compliance and security (PCI-DSS) including thorough review of control design.
Coordinating project deliverables and tracking project status with clients’ management and key stakeholders delivering recommendations and risk assessments.
Collaborating with clients as a liaison to remediate compliance gaps, maintaining comprehensive documentation to support their PCI programs.
Supervising and guiding professional employees or team members to ensure high performance in complex technical initiatives.
Fostering innovation and continuous progress within the team.
Fulfilling performance objectives in client service, quality and risk management, business growth, and team collaboration.
Skills and attributes for success
To thrive in this role, you will need a combination of technical expertise and soft skills that will make a significant impact. Your attributes include:
Proven ability to guide others and offer high-quality solutions to internal and external challenges.
Navigate complex cybersecurity frameworks with a strong understanding of cybersecurity principles and practices.
Build and maintain strong client relationships.
Communicate complex ideas effectively and solve intricate problems for our clients' Information Security and compliance teams.
Comfort with regular travel (up to 40-60%) and active engagement in client planning, execution, and closure phases.
Leadership in RFP responses, engagement economics, and resource planning.
To qualify for the role, you must have
A Bachelor's degree in a relevant field such as Computer Science, Information Systems, Engineering, Business, or related major.
4 to 6 years of relevant experience in the field of data protection and privacy leading and managing PCI assessment engagements.
In-depth understanding of PCI-DSS, scoping environments and evaluating against PCI-DSS.
Technical expertise in cybersecurity frameworks including ISO, NIST, SOX, HIPAA, and GDPR.
Ability to interpret and apply regulatory requirements to client environments.
Ideally, you’ll also have
Relevant cybersecurity certifications such as CISSP, CISM, CISA, and CEH, with PCI QSA certification highly preferred.
Proficiency in using GRC (Governance, Risk, and Compliance) tools.
Strong communication and interpersonal skills to effectively interact with clients and stakeholders.
Experience with project management and the ability to manage multiple projects simultaneously.
Strong relationship-building skills.
Commercial astuteness and complex problem-solving abilities.
Critical thinking and emotional agility.
What we offer
We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client-serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
EY accepts applications for this position on an on-going basis.
If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
#J-18808-Ljbffr
Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business.
The opportunity
We currently have a career opportunity for a Manager in our Cybersecurity practice for our Data Protection & Privacy capability with demonstrated experience in developing data protection strategies and implementing solutions to provide data security, privacy, and integrity.
As a PCI Security Specialist, you will be at the forefront of safeguarding our client's most valuable assets in the digital realm. You will play a critical role in enabling organizations to maintain an effective data protection stance throughout the entire data lifecycle.
Your key responsibilities
Leading and executing PCI assessment engagements for clients, focusing on payment card compliance and security (PCI-DSS) including thorough review of control design.
Coordinating project deliverables and tracking project status with clients’ management and key stakeholders delivering recommendations and risk assessments.
Collaborating with clients as a liaison to remediate compliance gaps, maintaining comprehensive documentation to support their PCI programs.
Supervising and guiding professional employees or team members to ensure high performance in complex technical initiatives.
Fostering innovation and continuous progress within the team.
Fulfilling performance objectives in client service, quality and risk management, business growth, and team collaboration.
Skills and attributes for success
To thrive in this role, you will need a combination of technical expertise and soft skills that will make a significant impact. Your attributes include:
Proven ability to guide others and offer high-quality solutions to internal and external challenges.
Navigate complex cybersecurity frameworks with a strong understanding of cybersecurity principles and practices.
Build and maintain strong client relationships.
Communicate complex ideas effectively and solve intricate problems for our clients' Information Security and compliance teams.
Comfort with regular travel (up to 40-60%) and active engagement in client planning, execution, and closure phases.
Leadership in RFP responses, engagement economics, and resource planning.
To qualify for the role, you must have
A Bachelor's degree in a relevant field such as Computer Science, Information Systems, Engineering, Business, or related major.
4 to 6 years of relevant experience in the field of data protection and privacy leading and managing PCI assessment engagements.
In-depth understanding of PCI-DSS, scoping environments and evaluating against PCI-DSS.
Technical expertise in cybersecurity frameworks including ISO, NIST, SOX, HIPAA, and GDPR.
Ability to interpret and apply regulatory requirements to client environments.
Ideally, you’ll also have
Relevant cybersecurity certifications such as CISSP, CISM, CISA, and CEH, with PCI QSA certification highly preferred.
Proficiency in using GRC (Governance, Risk, and Compliance) tools.
Strong communication and interpersonal skills to effectively interact with clients and stakeholders.
Experience with project management and the ability to manage multiple projects simultaneously.
Strong relationship-building skills.
Commercial astuteness and complex problem-solving abilities.
Critical thinking and emotional agility.
What we offer
We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client-serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
EY accepts applications for this position on an on-going basis.
If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
#J-18808-Ljbffr