Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 5 days ago

PCI Internal Security Assessor (ISA) - Caribbean (Remote)

thehivecareers.co2,874 open roles

Where
George Town, Cayman Islands, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPCI Internal Security Assessor (ISA) - Caribbean (Remote)thehivecareers.co · George Town, Cayman Islands, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on thehivecareers.co's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: first seen 5 days ago

The posting

Job Description: PCI Internal Security Assessor (ISA)

Department: Enterprise Security & Technology Risk Management Location: Regionwide

Reports To: Chief Information Security Officer (CISO)

Employment Type: Full-time

Job Overview

The PCI Internal Security Assessor (ISA) is responsible for ensuring that our client from banking industry complies with the Payment Card Industry Data Security Standard (PCI DSS). The ISA will assess, monitor, and enforce the security measures necessary to protect cardholder data and maintain PCI compliance across all systems and processes. This role works closely with internal stakeholders and external parties to maintain a secure environment, mitigate risks, and improve overall security posture.

Key Responsibilities:

  • PCI DSS Compliance Management:Conduct regular internal assessments and audits to ensure the organization's compliance with PCI DSS.

Develop and implement PCI compliance policies, procedures, and controls.

  • Serve as the internal point of contact for PCI DSS-related matters and ensure all applicable security controls are in place.
  • Collaborate with the external Qualified Security Assessor (QSA) to facilitate annual PCI DSS certification audits.

Documentation and Reporting:

  • Prepare and maintain comprehensive documentation, including policies, procedures, and reports required for PCI DSS compliance.
  • Maintain comprehensive documentation of assessment findings, corrective actions, and compliance status.
  • Manage the submission of the Self-Assessment Questionnaires (SAQs) and Attestation of Compliance documents (AOCs) as needed.

Qualifications:

Education:

  • Bachelor’s degree in Information Security, Computer Science, or a related field (or

equivalent work experience).

  • Experience:Minimum of 3-5 years of experience in information security, PCI compliance, or a related field. Previous experience as an ISA, QSA, or a similar role is highly desirable.
  • Certifications:Certified PCI Internal Security Assessor (ISA) or Certified PCI Professional (PCIP) certifications preferred.

Additional certifications such as CISSP, CISM, CISA, or CEH are a plus.

  • Skills and Competencies:Deep understanding of PCI DSS requirements and data security best practices. Familiarity with security frameworks (NIST, ISO 27001, CIS Controls) and security technologies (firewalls, IDS/IPS, encryption, etc.). Strong analytical, problem-solving, and project management skills. Excellent communication and interpersonal skills with the ability to work cross- functionally. Proficiency in using security assessment tools and techniques (e.g., vulnerability scanners, SIEM).

Other Requirements:

Ability to work independently and handle sensitive information confidentially.

  • Detail-oriented with strong organizational skills.
  • Occasional travel may be required for audits or compliance reviews.

Risk Assessment and Mitigation:

  • Identify and assess potential risks to cardholder data environments and provide recommendations for risk mitigation.
  • Implement and enforce necessary security controls to address gaps identified during assessments.
  • Ensure vulnerability scanning, penetration testing, and security reviews are conducted to identify weaknesses and ensure continuous compliance.

Training and Awareness:

  • Conduct internal PCI DSS training for staff to ensure a deep understanding of the importance of compliance and security measures.
  • Provide ongoing guidance and support to departments regarding security best practices related to PCI DSS.

Collaboration and Communication:

  • Work closely with projects, Enterprise Security, Technology, and other relevant departments to align PCI DSS compliance with overall security policies and practices.
  • Proactively identify and/or promptly escalate risks and issues affecting PCI compliance status.
  • Stay updated on changes in PCI DSS requirements and industry best practices to ensure our client from banking industry remains compliant.
  • Present PCI DSS compliance status reports to senior management and external stakeholders.
  • Act as a liaison where necessary between our client from banking industry and external vendors or service providers involved in processing or storing cardholder data.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against thehivecareers.co's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on thehivecareers.co's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    thehivecareers.co's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.