Most popular jobs

53Jobs Found

53 Jobs Found 

A
A

Security Consultant PCI

Advantio

Sligo, Sligo
30+ days ago
Sligo, Sligo
30+ days ago

Advantio is a leading Cyber Security and Managed Security Services (MSS) provider that helps businesses fight Cybercrime, protect data and reduce security risk. Offering a comprehensive portfolio of Cyber Security Advisory & Testing Services, Managed Security Services, Technology Solutions and Cyber Security Education, Advantio is the security partner of choice for many large corporate enterprises globally covering a wide range of industries including but not limited to banking, insurance, gambling, travel, retail, telco, oil & gas and public sector bodies. Advantio primarily serves the Payment Card Industry and when it comes to payment transactions, has been recognised by VISA as one of Europe’s top Qualified Security Assessor (QSA) providers.

 

For more information about Advantio, visit https://www.advantio.com

 

Role

 

Due to our continued expansion we now have an immediate opening for a Senior Security Consultantin Sligo, Ireland. 

Mission: to lead Cyber Security Consultancy engagements with clients and customer within financial services and payment card industries.  Focusing on delivery of PCI DSS and/or PA-DSS Information Security compliance assessments, Cyber Security Maturity Assessments and ISO27001 engagements.

 

Responsibilities

 

Main: 

  • Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries.
  • Provide detailed analytical reporting, internal reporting metrics and program management.
  • Provide leadership and mentorship to Junior consultants.

 

Preliminary Analysis:  

  • Identifying all the stakeholders, sponsors, technical references (e.g. IT Project Manager, Software Engineer, Security Analyst) of the client in order to define the initial conditions and the needs analysis

 

Gap Analysis and Scoping  

  • Review and validation of the PCI DSS scope and network segmentation controls, payment application design and functionality
  • Review of all locations and flows of cardholder data, as well as asset inventories
  • Conducting PCI standards interviews to have a complete map of information/data workflows, processes and procedures, payment card data flow, information security controls 
  • Conducting technical interviews to understand eventual data security problems from in-depth technical point of view
  • Producing Scoping and Gap Analysis Documentation

 

Remediation  

  • Providing the customer with a remediation plan/gap report
  • Guiding and supporting all the remediation processes ensuring that the gaps are mitigated correctly

 

Formal Assessment  

  • Conducting PCI DSS/PA-DSS related interviews with responsible employees in order to have a complete map of information/data workflows, processes and procedures, payment card data flows, application design and functionality
  • Conducting technical interviews to understand eventual data security problems from in-depth technical point of view
  • Analysis of network diagrams, asset lists to understand the infrastructure used by the customers
  • Analysis of Penetration Testing reports (PCI DSS Compliance Process) and/or performance of applications penetration tests and forensic analysis (PA-DSS Compliance Process) within ad-hoc penetration testing laboratories

 

Documentation  

  • Preparation, validation and approval Reports on Compliance (RoC) and/or Reports of Validation (RoV) according to the standard templates provided by PCI SSC
  • Preparation, validation and approval of Attestation of Compliance (AoC) and/or Attestation of Validation (AoV) according to the standard templates provided by PCI SSC
  • Submission all the documentation to PCI SSC for the final approval in case of PA-DSS process (signed RoV, AoV, Implementation Guide and Vendor Release Agreement) 

 

Knowledge and Skills (PCI QSA)

 

  • PCI DSS (PA-DSS, P2PE, PCI 3DS), GDPR
  • Virtualization
  • Cloud technologies
  • Cryptography principles
  • Authentication methods and techniques
  • Integrity controls
  • Networking (routing, switching, firewall network filtering)
  • Operating Systems (Linux/Unix, Windows)

 

Values and Competencies

 

  • Problem Solving (analysis, helicopter view, problem setting, decision making)
  • Planning and Organization (time management, scheduling and control)
  • Communication (clearness, listening, persuasion)
  • Networking (reinforce relationships, use emotional intelligence and personal proximity)
  • Results Orientation (delivering solutions, work under pressures

 

Advantio Core Values 

 

  • Harmony, always strive to create harmony
  • Openness, always be open
  • Social Responsibility, be socially responsible
  • Timeless, whatever you build make it timeless
  • Accommodating, make our customers feel at Home
  • Learning, be a Learn it all q Deliver, Results
R
R

Cyber Security Consultant

RealTime Recruitment

Dublin, Dublin
28 days ago
Dublin, Dublin
28 days ago

Currently recruiting a Cyber Security Consultant for a permanent position based in Dublin City Centre. 

The focus of this position will be to focus 

  • Lead Cyber Security protection initiatives.
  • Partner with product management, product owners, and program partners to define scope, objectives, and metrics for success for new and existing Cyber Security programs
  • Ensure best practice around risk management, reporting (internal, external) and communication are applied
  • Status reporting to Senior Leadership outlining progress, highlighting problems and recommending solutions provide enhanced visibility of delivery 

 

To be considered for the role of Candidates must meet the following criteria:

  • CISSP or CISM certified 
  • Strong familiarity with Cyber Security tools, Cyber Security industry, and technical trends, and Cyber Security policies.
  • Coordinating with legal, contracting, procurement, finance, communications, and business departments to ensure successful project roll-out, communications, and adoption.
  • Experience in cybersecurity assessments, accreditations, forensics, and incident response.
  • Experience in working with third-party suppliers in the delivery of business or IT change initiatives 
  • Excellent communication skills, with a strong ability to effectively communicate both internally and externally at levels up to Director and C Suite.
  • Strong negotiation skills with proven ability to maintain relationships with stakeholders and to influence stakeholders in support of project delivery
  • Proven conflict resolution skills – driving resolution of any project conflict
  • Eligible to live and work in the EU

 

Desirable skills:

  • Knowledge of information security frameworks and methodologies 
  • Security Certification such as CEH would be a big plus. 

 

For more information about this position, please call me on 01-6520652 or apply with your updated CV. 

 

R
R

Cyber Security Consultant

RealTime Recruitment

Dublin, Dublin
18 days ago
Dublin, Dublin
18 days ago

I am currently on the lookout for Cyber Security Analysts to join my client one of the world's largest Consultancy groups on a full-time basis.

Knowledge and core skills:

  • Expertise in security posture assessments in-line with regulatory requirements, emerging threats, and organizational risk
  • Proven capability to analyze and implement security solutions to meet customer requirements (ideally at least one of the following: Vulnerability Management, SIEM, Threat Intelligence, and/or DLP)
  • Experience in the alignment and maintenance of cybersecurity reference architectures in-line with industry best practices
  • Ability to review and develop security policies, standards, and processes
  • In-depth understanding of a wide range of technology environment types including Enterprise, Cloud, Operational Technology and IoT, etc.
  • Capability to assess security requirements in order to meet control objectives aligned to an organization’s risk appetite
  • Experience of Security Operations Centre, Threat and Vulnerability Management and Incident Response practices an advantage
  • Experience in Security Engineering including IT and OT security an advantage

Experience:

  • 3-5 years’ experience in cybersecurity with a diverse skillset and ability to flex across projects
  • Experience in ‘Big 4’ or similar consultancy experience in the Irish market
  • Track record in supporting the delivery of a broad range of cybersecurity projects
  • Government, Utilities, Manufacturing, Financial Services and Pharma experience desirable

You will also have focussed on some of these areas in the past:

  • Security Governance & Management
  • Security Operations
  • Infrastructure and Network Security
  • OT Security (knowledge of or certification in ISA/IEC 62443 as an advantage)
  • Cloud Security (Azure AZ900, AZ500, and AWS Security an advantage)
  • Security Engineering or Architecture (SABSA an advantage)
  • Identity and Access Management/ Privileged Access Management (Sailpoint, CyberArk, etc.)
  • Security Project Management (Prince2 & PMBOK desirable)
  • Technical security implementation

Attributes:

  • Excellent communication and project management skills (verbal and written)
  • Excellent organizational and problem-solving skills in addition to strong attention to detail
  • Experience in drafting proposals, bids, and tender responses
  • Excellent working knowledge of Microsoft PowerPoint, Word, Excel, and online research tools
  • Strong collaboration skills, ideally working with global and multi-functional teams
  • Ability to prioritize and work to tight deadlines and manage own caseload
  • The ability to learn quickly and to work well under pressure
  • The ability to listen attentively and express complex issues concisely to clients
  • Show leadership and motivate teams, including project management of consultancy projects

 

Qualifications:

  • BSc or MSc degree in information security, computer science, computer engineering, information systems, cloud computing, or related field of study
  • CISSP, CISM, or equivalent (ideally required)
  • SANS, CISA, ISO 27001, SABSA or TOGAF, CCSP (desirable)

If you wish to speak to me about this role then please contact me at

karl.moore@realtime.jobs

or call me on 016520652

R
R

Level 3 Network Security Engineer

Reperio Human Capital

Dublin, Dublin
5 days ago
Dublin, Dublin
€60k - €80k Per Year
5 days ago
€60k - €80k Per Year

Level 3 Network Security Engineer
The Company I am representing is a market leader in the security consultancy field. They secure some of the networks for some of the biggest companies in the world.
If you want to work for a company were you will be exposed to lots of different technologies and different areas of the business then this would be an excellent opportunity for you.
The Role:
You will be part of a team that is the first point of contact offering remote technical security support and managed security services
You will have excellent analytical skills, and be encouraged to work on your own initiative as well as be an integral part of a dynamic team. As part of this role you will be expected to act as a mentor to junior colleagues and ask as an escalation point.
Responsibilities:
  • Providing 3rd Level Support to a broad range of clients on network security focused technologies
  • Able to be provide LLD design and consultancy for network security solution
  • Provide technical security support, advice and further analysis on the vendor products and technologies listed below for our customers infrastructure security needs
  • The provision of detailed and accurate guidance on the use of client products to support our customer base
  • Effectively interact with other members of the team to provide security solutions to technical issues

Qualifications/Experience Required:
  • Fortinet, Checkpoint, Palo Alto, F5
  • CCSM/CCSE
  • Five year's proven experience gained in a technical support or consultancy role in a corporate security support environment
  • Detailed knowledge of Network Security including Microsoft OS
  • Firewalls product experience across vendor i.e. Checkpoint, Juniper NetScreen, Cisco ASA, Fortinet, Palo Alto
  • Firewall UTM/Sandboxing/App Control experience in CheckPoint, FortiGate
  • Routing/Switching/ Dynamic routing protocals (OSPF and BGP) - Cisco, Arista

If you are interested in this position, please apply now or contact Peter Raine on 015713966 for more information.
Reperio Human Capital acts as an Employment Agency and an Employment Business.
A
A

Cybersecurity Systems Engineer

Adecco Retail

Dublin South, Dublin
4 days ago
Dublin South, Dublin
4 days ago
Fantastic opportunity for an experienced Cyber security Systems Engineer in Dublin South / West.
Why this role:
- Cool company
- Recent technologies
- Great team
- Contract until the end of the year
You will be working within a cutting-edge division.
It is a permanent role for a high-tech client. This company is rapidly growing. You will be joining the Systems Engineering team in Cyber Security.
Responsibilities:
* Optimizing and supporting existing security tools and capabilities.
* Working with business partners to assess security gaps.
* Recommending, building and implementing security solutions and controls for risk mitigation.
Skills required:
o Bachelor's degree in computer science or equivalent technology discipline.
o Minimum of 3 years IT experience, preferably in an IT support or engineering function.
o Experience of supporting Single-Sign-On (SSO) - a must
o Experience of working in a globally distributed, multi-cultural environment an advantage.
o Strong operating systems knowledge (Windows Servers - a must and Linux - nice to have).
o Strong knowledge of networking, TCP/IP and traffic routing.
o Web services authentication standards, such as OAuth and SAML is nice to have
o Azure Active Directory is nice to have
o Understanding of routing and switching protocols as they relate to load balancing.
o Familiarity with supporting database technologies.
o Familiarity with ITIL or another IT service management framework.
o A cyber security certification such as CISSP an advantage.
If this is of interest please get in touch via email Natalia.Merrittatadecco.ie. If you are interested in other roles or career change please do not hesitate to contact me too.
Adecco Ireland is acting as an Employment Agency in relation to this vacancy.
I
I

Application Security Analyst - Penetration Testing

ITSearch

Waterford, Waterford
3 days ago
Waterford, Waterford
€40k - €45k Per Year
3 days ago
€40k - €45k Per Year

Seeking a Security Analyst with Penetration Testing experience for a leading multinational in the South West of Ireland with initial remote work.

 

Working in a team environment to provide the testing, analysis, and coordination of application security issues, supporting the development team and user base, while hardening the overall application security profile

 

Key Tasks

 

  • Execution and Reporting of automated security testing
  • Management, tracking, and reporting of security issues identified via testing
  • Triage, Research, and Analysis of identified vulnerabilities
  • Participation in validation of software releases and hardware upgrades
  • Communicate with Application Development when upgrades introduce application security issues
  • Assist in efforts to further embed application security within the SDLC, specifically leveraging automation & continuous integration
  • Participate in Application Security Assessments and Reviews

Minimum:

 

  • Bachelor's Degree in Computer Science, Computer Information Systems, Cyber Security, or similar accreditation

Essential Experience

 

  • Experience with DAST and SAST Automated Testing Tools
  • Familiarity with Security Frameworks and Standards, such as: NIST, HiTrust, HIPPA, and PCI
  • Understanding of the most common vulnerabilities, such as: OWASP Top 10 or SANS Top 25

Desired Experience

 

  • 1-2 years in a Software Development or Application Security role
  • Configuration of Continuous Integration processes using Jenkins
  • Build Automation using Maven/Ant/Gradle
  • Front-Web Web Development experience, specifically using Javascript
  • Authentication Frameworks, such as: SAML, OpenID, OAuth, etc.
  • Cryptography implementation
  • Securing Distributed, Cloud Based Computing Environments

*Security Certifications (CISSP, GPEN, GWAPT, GXPN, etc.) not required for this role.

 

Technical Skills: Java, JavaScript, Security Tools, Penetration Testing, SQL, Networking, Firewalls, Reverse Proxy, Web Application Firewalls

I
I

Network Security Engineer

itContracting

Dublin, Dublin
2 days ago
Dublin, Dublin
2 days ago
Evros Technology Group are seeking applications for an experienced Network Security Engineer for a busy managed services environment, servicing a broad range of customers across range of network technologies.
This is a permanent position based in Dublin South.
Responsibilities
  • Support, configure and install network security devices (primarily Palo Alto and Cisco firewalls, with some other vendors also included)
  • Maintain and improve documentation of customers’ network environments
  • Provide Level 2/3 support and troubleshooting to resolve technical issues
  • Work within change management policies to ensure success of changes
  • Implement security tools, policies and procedures as appropriate
  • Co-ordinate with vendors and other IT teams to resolution

Technical skills and experience
  • Cisco CCNP or Palo Alto PCNSE certification
  • >3 years relevant experience supporting network security technologies
  • Experience supporting and configuring a range of network devices and technologies (firewalls, switches, load balancers, VPNs etc.)
  • Excellent communications skills, written and verbal
  • Experience of Enterprise Networking and Data Centre Environments
  • Experience conducting network audits

Beneficial skills and experience
  • IT Degree or equivalent combination of qualifications and experience
  • Experience with not only Cisco equipment (Palo Alto, Juniper, Fortigate etc.)
  • ITIL familiarization

The Candidate
  • Decisive, dynamic, and capable of delivering to a high standard despite constraints that may be in place
  • Conscientious, trustworthy, and capable of organising and delivering on tasks with little direction
  • Strong troubleshooting and communications skills are an absolute necessity
  • Capable of adjusting their approach for the varied customers supported
  • Process oriented with great attention to detail
 
Benefits
  • Laptop
  • Travel expenses
  • Training and development
  • Health insurance
  • Pension 

Candidates must be eligible to work in Ireland or currently hold a Stamp 4 Visa to apply.
For more information please apply here or contact Kate Maher or Michal Gawronski in the Evros Technology Group directly.
Evros is an equal opportunity employer who seeks to recruit and appoint the best available person for a job regardless of marital / civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability. Evros apply all relevant Data Protection laws when processing your Personal Data.

If you choose to apply to this opportunity and share your CV or other personal information with Evros these details will be held by us in accordance with our privacy policy used by our recruitment team to contact you regarding this or other relevant opportunities at Evros.
S
S

Test Engineer

Software Placements

Limerick, Limerick
3 days ago
Limerick, Limerick
3 days ago

Client

My client currently has a requirement for a Test Engineer to join their growing team based in Limerick.

Role

We are looking for a highly motivated engineer to become part of an agile team within a fast-paced environment. This role will provide you with scope to participate in developing and growing the function within the company. This is an excellent opportunity to work in an innovative and stable company driving the development of cutting-edge software solutions for the global mobile telecommunications market.  

Responsibilities

  • Software testing of products (functional, system, regression, performance, load, build validation, scheduling, etc)
  • Creation and maintenance of a library/database of test related documentation and tools.  
  • Monitoring, reporting and contributing to the ongoing improvement of all aspects of software quality, design and delivery
  • Development and maintenance of all aspects of the Test Lab and test environments (hardware/OS/software)
  • Adoption and/or design and creation of appropriate software test tools
  • Provision of backup to other teams internally within the organisation and externally on customer sites as required
  • Participation in the generation and delivery of product and test related training material
  • Participation in product related documentation reviews and contributions
  • Design of useful lightweight processes for interaction with other teams internally

Experience

You will have a relevant degree and a minimum of 4 years relevant industry experience. You will also have experience in some of the following areas:

  • Software test (telecommunications, IP, distributed systems, HA)
  • Software test (functional, regression, load, performance, unit)
  • Software test tools (JMeter, Seagull, Selenium, etc)
  • Design and creation of software test tools (Java, C, Scripting, etc)
  • Unix, Linux (operating systems install, hardware install)
  • Virtual machines and cloud computing (VirtualBox, VMware, KVM, etc).
  • IP Networking and interfaces (physical and logical setup and configuration, routing protocols, ethernet based telco port cards, various cabling standards, Wireshark)
  • Telco protocols (Diameter, RADIUS, GSM, SS7, Sigtran, SMS/MAP, GPRS/GTP, CAP, INAP, USSD etc)
  • Telco services (SMS, voice, data, policy control, USSD)
  • Charging interfaces and protocols
  • Software quality metrics and design principles
  • Databases and scripting (SQL, MySQL, Oracle, Shell Scripting, Perl/Python/Groovy)
  • Rest API testing (Postman, Rest Assured)

Contact

If you feel this role is for you please contact Mick Duffy on +353 1 525 4647 or mduffy@softwareplacements.ie

R
R

Cyber Security Consultant

RealTime Recruitment

Dublin, Dublin
18 days ago
Dublin, Dublin
18 days ago

I am currently on the lookout for Cyber Security Analysts to join my client one of the world's largest Consultancy groups on a full-time basis.

Knowledge and core skills:

  • Expertise in security posture assessments in-line with regulatory requirements, emerging threats, and organizational risk
  • Proven capability to analyze and implement security solutions to meet customer requirements (ideally at least one of the following: Vulnerability Management, SIEM, Threat Intelligence, and/or DLP)
  • Experience in the alignment and maintenance of cybersecurity reference architectures in-line with industry best practices
  • Ability to review and develop security policies, standards, and processes
  • In-depth understanding of a wide range of technology environment types including Enterprise, Cloud, Operational Technology and IoT, etc.
  • Capability to assess security requirements in order to meet control objectives aligned to an organization’s risk appetite
  • Experience of Security Operations Centre, Threat and Vulnerability Management and Incident Response practices an advantage
  • Experience in Security Engineering including IT and OT security an advantage

Experience:

  • 3-5 years’ experience in cybersecurity with a diverse skillset and ability to flex across projects
  • Experience in ‘Big 4’ or similar consultancy experience in the Irish market
  • Track record in supporting the delivery of a broad range of cybersecurity projects
  • Government, Utilities, Manufacturing, Financial Services and Pharma experience desirable

You will also have focussed on some of these areas in the past:

  • Security Governance & Management
  • Security Operations
  • Infrastructure and Network Security
  • OT Security (knowledge of or certification in ISA/IEC 62443 as an advantage)
  • Cloud Security (Azure AZ900, AZ500, and AWS Security an advantage)
  • Security Engineering or Architecture (SABSA an advantage)
  • Identity and Access Management/ Privileged Access Management (Sailpoint, CyberArk, etc.)
  • Security Project Management (Prince2 & PMBOK desirable)
  • Technical security implementation

Attributes:

  • Excellent communication and project management skills (verbal and written)
  • Excellent organizational and problem-solving skills in addition to strong attention to detail
  • Experience in drafting proposals, bids, and tender responses
  • Excellent working knowledge of Microsoft PowerPoint, Word, Excel, and online research tools
  • Strong collaboration skills, ideally working with global and multi-functional teams
  • Ability to prioritize and work to tight deadlines and manage own caseload
  • The ability to learn quickly and to work well under pressure
  • The ability to listen attentively and express complex issues concisely to clients
  • Show leadership and motivate teams, including project management of consultancy projects

 

Qualifications:

  • BSc or MSc degree in information security, computer science, computer engineering, information systems, cloud computing, or related field of study
  • CISSP, CISM, or equivalent (ideally required)
  • SANS, CISA, ISO 27001, SABSA or TOGAF, CCSP (desirable)

If you wish to speak to me about this role then please contact me at

karl.moore@realtime.jobs

or call me on 016520652

R
R

Cyber Security Consultant

RealTime Recruitment

Dublin, Dublin
28 days ago
Dublin, Dublin
28 days ago

Currently recruiting a Cyber Security Consultant for a permanent position based in Dublin City Centre. 

The focus of this position will be to focus 

  • Lead Cyber Security protection initiatives.
  • Partner with product management, product owners, and program partners to define scope, objectives, and metrics for success for new and existing Cyber Security programs
  • Ensure best practice around risk management, reporting (internal, external) and communication are applied
  • Status reporting to Senior Leadership outlining progress, highlighting problems and recommending solutions provide enhanced visibility of delivery 

 

To be considered for the role of Candidates must meet the following criteria:

  • CISSP or CISM certified 
  • Strong familiarity with Cyber Security tools, Cyber Security industry, and technical trends, and Cyber Security policies.
  • Coordinating with legal, contracting, procurement, finance, communications, and business departments to ensure successful project roll-out, communications, and adoption.
  • Experience in cybersecurity assessments, accreditations, forensics, and incident response.
  • Experience in working with third-party suppliers in the delivery of business or IT change initiatives 
  • Excellent communication skills, with a strong ability to effectively communicate both internally and externally at levels up to Director and C Suite.
  • Strong negotiation skills with proven ability to maintain relationships with stakeholders and to influence stakeholders in support of project delivery
  • Proven conflict resolution skills – driving resolution of any project conflict
  • Eligible to live and work in the EU

 

Desirable skills:

  • Knowledge of information security frameworks and methodologies 
  • Security Certification such as CEH would be a big plus. 

 

For more information about this position, please call me on 01-6520652 or apply with your updated CV. 

 

Posted

30+ days ago

Description

Advantio is a leading Cyber Security and Managed Security Services (MSS) provider that helps businesses fight Cybercrime, protect data and reduce security risk. Offering a comprehensive portfolio of Cyber Security Advisory & Testing Services, Managed Security Services, Technology Solutions and Cyber Security Education, Advantio is the security partner of choice for many large corporate enterprises globally covering a wide range of industries including but not limited to banking, insurance, gambling, travel, retail, telco, oil & gas and public sector bodies. Advantio primarily serves the Payment Card Industry and when it comes to payment transactions, has been recognised by VISA as one of Europe’s top Qualified Security Assessor (QSA) providers.

 

For more information about Advantio, visit https://www.advantio.com

 

Role

 

Due to our continued expansion we now have an immediate opening for a Senior Security Consultantin Sligo, Ireland. 

Mission: to lead Cyber Security Consultancy engagements with clients and customer within financial services and payment card industries.  Focusing on delivery of PCI DSS and/or PA-DSS Information Security compliance assessments, Cyber Security Maturity Assessments and ISO27001 engagements.

 

Responsibilities

 

Main: 

  • Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries.
  • Provide detailed analytical reporting, internal reporting metrics and program management.
  • Provide leadership and mentorship to Junior consultants.

 

Preliminary Analysis:  

  • Identifying all the stakeholders, sponsors, technical references (e.g. IT Project Manager, Software Engineer, Security Analyst) of the client in order to define the initial conditions and the needs analysis

 

Gap Analysis and Scoping  

  • Review and validation of the PCI DSS scope and network segmentation controls, payment application design and functionality
  • Review of all locations and flows of cardholder data, as well as asset inventories
  • Conducting PCI standards interviews to have a complete map of information/data workflows, processes and procedures, payment card data flow, information security controls 
  • Conducting technical interviews to understand eventual data security problems from in-depth technical point of view
  • Producing Scoping and Gap Analysis Documentation

 

Remediation  

  • Providing the customer with a remediation plan/gap report
  • Guiding and supporting all the remediation processes ensuring that the gaps are mitigated correctly

 

Formal Assessment  

  • Conducting PCI DSS/PA-DSS related interviews with responsible employees in order to have a complete map of information/data workflows, processes and procedures, payment card data flows, application design and functionality
  • Conducting technical interviews to understand eventual data security problems from in-depth technical point of view
  • Analysis of network diagrams, asset lists to understand the infrastructure used by the customers
  • Analysis of Penetration Testing reports (PCI DSS Compliance Process) and/or performance of applications penetration tests and forensic analysis (PA-DSS Compliance Process) within ad-hoc penetration testing laboratories

 

Documentation  

  • Preparation, validation and approval Reports on Compliance (RoC) and/or Reports of Validation (RoV) according to the standard templates provided by PCI SSC
  • Preparation, validation and approval of Attestation of Compliance (AoC) and/or Attestation of Validation (AoV) according to the standard templates provided by PCI SSC
  • Submission all the documentation to PCI SSC for the final approval in case of PA-DSS process (signed RoV, AoV, Implementation Guide and Vendor Release Agreement) 

 

Knowledge and Skills (PCI QSA)

 

  • PCI DSS (PA-DSS, P2PE, PCI 3DS), GDPR
  • Virtualization
  • Cloud technologies
  • Cryptography principles
  • Authentication methods and techniques
  • Integrity controls
  • Networking (routing, switching, firewall network filtering)
  • Operating Systems (Linux/Unix, Windows)

 

Values and Competencies

 

  • Problem Solving (analysis, helicopter view, problem setting, decision making)
  • Planning and Organization (time management, scheduling and control)
  • Communication (clearness, listening, persuasion)
  • Networking (reinforce relationships, use emotional intelligence and personal proximity)
  • Results Orientation (delivering solutions, work under pressures

 

Advantio Core Values 

 

  • Harmony, always strive to create harmony
  • Openness, always be open
  • Social Responsibility, be socially responsible
  • Timeless, whatever you build make it timeless
  • Accommodating, make our customers feel at Home
  • Learning, be a Learn it all q Deliver, Results
Source: Advantio