Cyber Consulting - PCI Security Specialist - Senior Consultant - Location Open

Location: New York

Other locations: Anywhere in Country

Date: Oct 31, 2024

Requisition ID: 1553582

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity

We currently have a career opportunity for a Senior Consultant in our Cybersecurity practice for our Data Protection & Privacy capability with demonstrated experience in developing data protection strategies and implementing solutions to provide data security, privacy, and integrity. EY’s Cybersecurity Practice functions as a center of excellence to assist our consulting practices in planning, pursuing, delivering, and managing large, complex full lifecycle initiatives along with providing expertise in leading practices, methods, and resources in the space of Cybersecurity.

Your key responsibilities

In this dynamic role, you will independently execute deliverables, apply critical judgment to inform recommendations, and consider various success factors and potential risks. Your responsibilities will include:

• Lead the delivery of multiple processes, solutions, or projects in the realm of data protection and privacy
• Plan and execute PCI assessment engagements for clients, focusing on payment card compliance and security (PCI-DSS) including thorough review of control design
• Coordinate & report on project deliverables and tracking project status with clients’ management and key stakeholders delivering recommendations and risk assessments.
• Validate PCI requirements testing results and collaborate with clients to remediate compliance gaps, maintaining comprehensive documentation to support their PCI programs
• Engaging in client working sessions and serving as a team lead or workstream member, as required.
• Supporting sales opportunities by contributing to service proposals and RFP responses.
• Travel is an essential part of this role, as client needs dictate. You will be expected to be flexible and available to travel up to 40-60% of your time.

Skills and attributes for success

To thrive in this role, you will need a combination of technical expertise and soft skills. Your success will be driven by your ability to:

• Navigate complex cybersecurity frameworks with strong understanding of cybersecurity principles and practices with emphasis on various compliance requirements (ISO, NIST, SOX, PCI, HIPAA, GDPR) to better assist clients.
• Manage third-party risk effectively.
• Build and maintain strong client relationships.
• Communicate complex ideas effectively and solve intricate problems for our clients' Information Security and compliance teams.
• Demonstrate emotional and learning agility in a fast-paced environment.

To qualify for the role, you must have

• A Bachelor’s degree in a relevant field such as Computer Science, Information Systems, Engineering, Business, or related major.
• 2 to 4 years of experience conducting and leading PCI assessment and audits with a strong understanding of PCI DSS.
• Experience executing PCI DSS Reports of Compliance and Self-Assessment Questionnaires, along with remediation activities to achieve compliance
• Strong understanding of various compliance frameworks, including ISO, NIST, SOX, HIPAA, and GDPR.

What we look for

We are seeking top performers who are passionate about data protection and privacy, with a keen eye for detail and a proactive approach to problem-solving. You should be a self-starter who is comfortable working both independently and collaboratively in a team environment.

What we offer

We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance. Join us in our team-led and leader-enabled hybrid model. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances.

EY accepts applications for this position on an on-going basis. If you can demonstrate that you meet the criteria above, please contact us as soon as possible.