PCI DSS Consultant (M/F) in French-speaking Switzerland

You work on assignments and projects with a strong functional and/or technical content, supporting SecuLabs clients in achieving PCI DSS (Payment Card Industry Data Security Standard) compliance in French-speaking Switzerland, in Geneva and/or Lausanne.

The environments are varied: merchants, payment service providers, acquirers, issuers and banks, in the private sector, from SMEs to multinationals, as well as in the public sector.

• Define and validate the PCI DSS scope, the Cardholder Data Environment (CDE), and support network segmentation.
• Carry out gap analyses and compliance assessments against the PCI DSS v4.0 standard.
• Write and implement security policies and procedures that meet PCI DSS requirements.
• Support the technical teams (IT, development and operations) in implementing the required security controls.
• Track remediation plans and assess compensating controls.
• Support the preparation and follow-up of PCI DSS certification audits with the QSAs (Qualified Security Assessors).
• Manage the quarterly ASV vulnerability scans and the annual penetration tests.
• Write and review the SAQ self-assessment questionnaires and the ROC/AOC compliance reports.
• Take part in campaigns that raise teams' awareness of payment data security requirements.

• A degree from an engineering school, business school or university, preferably specialising in information security and/or IS audit (Master's, HES Bachelor's or equivalent).
• Experience in PCI DSS compliance; a QSA or ISA certification, or PCI DSS training, is a plus.
• Experience with the PCI DSS, ISO 27001, ISO 27002 and NIST standards.
• Adaptability and curiosity about new problems, methodologies and tools.
• Rigour, autonomy, strong interpersonal skills and good writing ability.
• A wish to contribute to excellent client service and to join a motivated, dynamic and fast-growing team.
• Proficiency in French and English.

QSA, ISA or PCI DSS training: a real plus. A specialised PCI DSS certification or training is appreciated and adds weight to experience already gained on compliance programmes.