REMOTE PCI Qualified Security Assessor; QSA)

Job Description

We are seeking a PCI Qualified Security Assessor (QSA) to support payment security compliance initiatives for organizations that store, process, or transmit credit card data. This role will be responsible for conducting formal PCI DSS assessments, identifying compliance gaps, and guiding clients through audit readiness and certification.

This position is remote (onshore) and will support a dedicated PCI practice, with interviews conducted by senior members of the PCI assessment team.

• Perform end-to-end PCI DSS assessments for client environments, including systems, applications, and processes handling cardholder data
• Conduct security audits using interviews, documentation reviews, system analysis, and control testing
• Evaluate compliance against PCI DSS standards and identify gaps, risks, and control deficiencies
• Collect, review, and validate audit evidence to support compliance findings
• Provide remediation guidance and recommendations to improve security posture and achieve compliance
• Prepare and deliver formal assessment reports (e.g., ROC, AOC) for stakeholders
• Partner with client IT, security, and business teams to ensure audit readiness and successful certification
• Present assessment findings and progress updates to both internal leadership and client stakeholders

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

• Active certification as a PCI Qualified Security Assessor (QSA)
• Needs to have at least one of the PCI QPA & P2PE certifications (see in plusses)
• Must be listed and in good standing on the PCI Security Standards Council (PCI SSC) certification site
• Strong experience supporting PCI DSS compliance assessments and audits
• Background in information security, cybersecurity, or IT audit/compliance
• Experience performing risk assessments, gap analysis, and control validation PCI QPA (Qualified PIN Assessor) certification
• PCI P2PE (Point-to-Point Encryption) certification
• Experience with payment systems, encryption, and cardholder data environments (CDEs)
• Familiarity with GRC tools, audit documentation, and compliance reporting