EY Cyber Consulting - PCI Security Specialist Manager Location Open 

United States, New York, New York 

242407503

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime.

As a PCI Security Specialist, you will be at the forefront of safeguarding our client's most valuable assets in the digital realm. You will play a critical role in enabling organizations to maintain an effective data protection stance throughout the entire data lifecycle, ensuring that from acquisition to disposal, every process is optimized, risks are reported, and technologies are integrated seamlessly.

Your key responsibilities

In this managerial role, you will orchestrate the management and delivery of multiple processes, solutions, and projects, with a strong focus on quality and risk management. You will be responsible for:

• Leading and executing PCI assessment engagements for clients, focusing on payment card compliance and security (PCI-DSS) including thorough review of control design
• Coordinating project deliverables and tracking project status with clients’ management and key stakeholders delivering recommendations and risk assessments.
• Collaborating with clients as a liaison to remediate compliance gaps, maintaining comprehensive documentation to support their PCI programs
• Supervising and guiding professional employees or team members to ensure high performance in complex technical initiatives.
• Fostering innovation and continuous progress within the team.
• Fulfilling performance objectives in client service, quality and risk management, business growth, and team collaboration.

Skills and attributes for success

To thrive in this role, you will need a combination of technical expertise and soft skills that will make a significant impact. Your attributes include:

• Proven ability to guide others and offer high-quality solutions to internal and external challenges. Navigate complex cybersecurity frameworks with a strong understanding of cybersecurity principles and practices with emphasis on various compliance requirements (ISO, NIST, SOX, PCI, HIPAA, GDPR) to better assist clients.
• Build and maintain strong client relationships.
• Communicate complex ideas effectively and solve intricate problems for our clients' Information Security and compliance teams, including Info Sec, Legal, Internal Audit, Physical Security, Developer Community, Networking, and Systems

• Comfort with regular travel (up to 40-60%) and active engagement in client planning, execution, and closure phases.
• Leadership in RFP responses, engagement economics, and resource planning.

To qualify for the role, you must have

• A Bachelor's degree in a relevant field such as Computer Science, Information Systems, Engineering, Business, or related major.
• 4 to 6 years of relevant experience in the field of data protection and privacy leading and managing PCI assessment engagements for clients along with reporting and remediation.
• In-depth understanding of PCI-DSS, scoping environments and evaluating against PCI-DSS
• Technical expertise in cybersecurity frameworks including ISO, NIST, SOX, HIPAA, and GDPR.
• Ability to interpret and apply regulatory requirements to client environments

Ideally, you’ll also have

Additional requirements that will set you apart include:

• Relevant cybersecurity certifications such as CISSP, CISM, CISA, and CEH, with PCI QSA certification highly preferred.
• Proficiency in using GRC (Governance, Risk, and Compliance) tools.
• Strong communication and interpersonal skills to effectively interact with clients and stakeholders in prior client-facing role
• Experience with project management and the ability to manage multiple projects simultaneously.
• Strong relationship-building skills.
• Commercial astuteness and complex problem-solving abilities.
• Critical thinking and emotional agility.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.