IT Audit, Cybersecurity & Risk Advisory Senior Consultant (PCI Focus)

Overview

This role supports the organization’s Risk Advisory practice, focusing on informational technology risk advisory, including PCI DSS compliance and cybersecurity-related engagements. The position involves working with client executives and management teams to identify, assess, and manage security and PCI DSS compliance risks within business systems.

Responsibilities

• Perform PCI DSS compliance assessments by evaluating client environments against applicable PCI DSS requirements and documenting results through Reports on Compliance (ROCs) and/or Self-Assessment Questionnaires (SAQs), including associated Attestations of Compliance (AOCs).
• Participate in cybersecurity, technology risk, and other advisory or consulting engagements as client and business needs arise.
• Provide strategic recommendations for business and process improvements based on understanding of client operations, processes, and business objectives.
• Assist with implementation of new processes and controls that address key risks, providing strategic business assurance to clients.
• Assess, manage, and optimize information technology risk across areas such as cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
• Review client processes and controls against industry frameworks to identify gaps in design and execution; communicate issues and recommendations to clients.
• Assist with development of audit programs and execution of internal audits and IT control assessments, including:
  • IT strategy and governance
  • IT operations, business continuity and disaster recovery
  • Cybersecurity
  • Third party risk
  • ITGC and application controls
  • SOC reporting
  • PCI DSS Compliance
  • Regulatory and compliance requirements
• Draft comprehensive executive summaries and final reports for client delivery.
• Document and review engagement work papers in accordance with industry-accepted internal audit methodologies.
• Build effective client relationships and deliver superior client service through clear communication and advisory support.
• Facilitate professional presentations to internal and external audiences.
• Continue developing knowledge and experience across a variety of technology environments, platforms, applications, and tools/utilities.
• Engage in ongoing learning through external and internal education, training, and cross-training.
• Network and build strong internal and external client relationships using entrepreneurial skills.
• Support growth and development of team members through mentorship and coaching aligned with professional development goals.

Minimum Required Qualifications

• 4 year degree
• 3 year(s) of experience

Preferred Qualifications

• Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or related program
• 3+ year(s) experience with IT audit or cybersecurity
• CISA, CISSP, CISM or CPA certifications preferred
• Experience as a PCI QSA serving professional preferred
• Experience as a client serving professional for a consulting firm desired
• Cloud audit experience and certifications preferred
• Excellent analytical, technical, and problem-solving skills with strong attention to detail
• Exceptional verbal and written communication, collaboration, and time management skills

Compensation & Benefits

Pay rate ranges for this position:

• National pay rate range: $78,100 to $126,500
• In California: pay rate range is $78,100 to $164,500

Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees/certifications, work arrangements and geographic location. A comprehensive compensation and benefits package is offered to eligible employees.

Location

Please discuss the work location status with your talent acquisition professional to understand the requirements for an opportunity you are exploring.