pci security consultant

ISO Management Consultancy

ISO Consultant RequiredExperience: 8-10 yearsLocation: DubaiAbility to deliver under pressure effectively priorities and multitask Experience in working in an international environment Fluency in written and spoken English and Engineering DegreeLead auditor and implementor qualification in ISO 9001, ISO 27001, ISO 22301, should have sound knowledge of IT infrastructure, cyber security networking , ERP &amp; Project Management , SOC, PCI and iso 42001Must have a excellent English communication skills.<ul><li>Degree in computer science or a technology-related field.</li><li>Professional information security certification. such as ISO/IEC 27001 and NIST.</li><li>Experience in an information security role.</li><li>Solid knowledge of various information security frameworks.</li><li>Excellent problem-solving and analytical skills.</li><li>Ability to educate a non-technical audience about various security measures.</li><li>Effective verbal and written communication skills</li></ul>Job Types: Full-time, PermanentPay: AED10,000.00 - AED15,000.00 per monthAbility to commute/relocate:<ul><li>Dubai: Reliably commute or planning to relocate before starting work (Preferred)</li></ul>Application Question(s):<ul><li>EXPERIENCE IN ISO 27001 CONSULTANCY AND LEAD AUDITOR AND IMPLEMENTOR FOR ISO 9001 ,ISO 27001</li></ul>

Sr consultant for ISO 27001 & BCMS Required

Visionary Tech Services LLC

<div>We are advertising for a Tier 1 Senior Cybersecurity GRC Consultant to join our onsite team in Abu Dhabi.
If tackling complex compliance challenges, influencing cloud security strategy, and wearing the creative hat to build modern governance models excites you, we want to hear from you.
Role Overview
Join our &ldquo;Second Line of Defense&rsquo;&mdash; a hands-on, strategic role shaping cloud, hybrid and enterprise compliance at scale. If translating regulatory complexity into elegant, practical controls excites you, this is for you.
Why This Role
Impact: Own the organization&rsquo;s cybersecurity and cloud compliance posture across multi-cloud and hybrid environments.
Challenge to be addressed: Build pragmatic frameworks that satisfy auditors, regulators, and business stakeholders while enabling cloud-first innovation.
If this interests you, you&rsquo;ll influence policy, lead assurance programs, and present directly to senior stakeholders/ CXOs.
What We&rsquo;re Looking For
Experience: 6- 8+ years in cybersecurity compliance, governance, or audit with at least 2+ years focused on cloud environments.
Technical / Framework Skills: Proven ability to map frameworks to controls and operations (NIST CSF, ISO 27001/27017/27018, GDPR, PCI DSS, SOC 2, CSA CCM).
Cloud knowledge: Solid understanding of AWS, Azure, GCP and shared responsibility models.
Audit &amp; assurance: Demonstrated success running internal/external audits and certification readiness programs.
Communication: Excellent stakeholder management with confident interactions at C-level.
Tools: Hands-on experience with GRC and compliance automation platforms (Archer, OneTrust, ServiceNow GRC, Drata, Vanta, or similar).
Key duties and responsibilities:
Translate frameworks: into actionable policies, controls, and operating practices (NIST CSF, ISO 27001, GDPR, PCI DSS, SOC 2, CSA CCM).
Design and implement: a unified compliance and governance framework for cloud, hybrid, and enterprise systems.
Lead audits and assessments: Plan, run, and remediate internal and external compliance audits and certification readiness.
Conduct risk activities: Drive risk assessments, gap analyses, and control testing across services and third parties.
Liaise and coordinate with the first line, incident response, external auditors, regulators, key clients for assurance and post-incident compliance.
Drive continuous improvement by monitoring regulatory change, emerging standards, and automation opportunities.
Coach and mentor other team members, compliance analysts and consultants.
Present outcomes: Prepare executive-level compliance reports, risk dashboards, and audit results for senior leadership.
Requirements
We are looking for the required qualifications:
Highly desirable: CISM, CISA, CRISC, CISSP, PCI DSS QSA
Framework lead: ISO 27001 Lead Implementer / Lead Auditor.
Cloud focus: CCSK, AWS Security Specialty, or other cloud security certs.
Data protection: GDPR Practitioner
Education: Bachelor&rsquo;s or Master&rsquo;s in Cybersecurity, Information Systems, Risk Management, or related field.</div>

Senior Cybersecurity GRC Consultant

<div>
 
 Introduction
 
 
 
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 
 
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 
 
 
 Your Role And Responsibilities
 
 
 
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 
 
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 
 
 
 Required Technical And Professional Expertise
 
 
 
 Security Domain Skills
 
 
 <ul>
 <li>
 This position requires knowledge across multiple platforms, processes or architectures. This position requires security consulting skills and the ability to act as a trusted client advisor and a trusted technical lead for the team. The Managing Consultant will need to have skills to be able to work with other IBM teams and:
 </li>
 <li>
 Deliver strategic security advisory services
 </li>
 <li>
 A proven record of security thought leadership and be recognized for business and technical acumen Cyber Strategy and Risk services
 </li>
 <li>
 Depth of knowledge in one or more of the core security areas in Cyber Strategy and Risk such as Security Architecture/Cloud Security/ OT Security/ SAP Security/e-GRC.
 </li>
 <li>
 Hands on experience and understanding of compliance (ISO 27001, NCA, SOC 2, COBIT, NIST, PCI DSS, GDPR etc) and Regulatory requirements.
 
 
 </li>
 </ul>
 Core consulting skills
 
 
 <ul>
 <li>
 Strong communication and presentation skills
 </li>
 <li>
 The ability to lead large groups and be a primary facilitator and lead.
 </li>
 <li>
 Strong written skills
 </li>
 <li>
 Comfortable working in a project based / client serving model
 </li>
 <li>
 Ability to lead and shape client expectations
 </li>
 <li>
 Help drive pursuits and engage in complex deals, matching outcomes to expectations
 </li>
 <li>
 Ability to work easily with diverse and dynamic teams
 </li>
 <li>
 Ability to work in a matrix management model
 
 
 </li>
 </ul>
 
 Preferred Technical And Professional Experience
 
 
 
 <ul>
 <li>
 At least 5 years relevant consulting experience in Cyber Strategy and Risk domain
 </li>
 <li>
 Security consulting experience across multiple client verticals, including Financial Services, Public Sector, Technology, Telecommunications, Manufacturing, Industrial &amp; Mining etc.
 </li>
 </ul>
</div>

Managing Consultant - Cyber Strategy & Risk

Inbox Business Technologies

<div>
 Job Summary:
 
 
 We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.
 
 
 Job Description:
 
 
 ISMS Responsibilities:
 
 
 <ul>
 <li>
 Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).
 </li>
 <li>
 Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.
 </li>
 <li>
 Participate in risk assessments and help develop mitigation strategies.
 </li>
 <li>
 Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.
 </li>
 <li>
 Prepare documentation and provide support during ISO 27001 certification audits.
 </li>
 <li>
 Conduct security awareness training and incident management processes.
 
 
 </li>
 </ul>
 IT GRC Responsibilities:
 
 
 <ul>
 <li>
 Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).
 </li>
 <li>
 Support IT risk assessments, compliance audits, and regulatory reporting activities.
 </li>
 <li>
 Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.
 </li>
 <li>
 Support in developing and maintaining IT compliance programs and policies.
 </li>
 <li>
 Contribute to the development and implementation of GRC tools and processes.
 </li>
 <li>
 Participate in internal audits and help clients prepare for external certification audits/compliance checks.
 
 
 </li>
 </ul>
 Required Qualifications &amp; Experience:
 
 
 <ul>
 <li>
 Minimum Bachelor's degree in Information Security, Computer Science, or a related field.
 </li>
 <li>
 Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.
 </li>
 <li>
 Experience: 3-4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.
 </li>
 <li>
 Familiarity with ISO 27001 gap assessments, risk assessments, and audits.
 </li>
 <li>
 Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).
 </li>
 <li>
 Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.
 </li>
 <li>
 Strong documentation, report writing, and communication skills is a must.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Master's or Bachelor's degree in Information Technology, Computer Science, or IT-related field.
 </li>
 <li>
 ITIL Expert/Managing Professional, ISO 20000 Lead Implementer / Lead Auditor, ISO 22301 Lead Implementer / Lead Auditor, CBCP (Certified Business Continuity Professional).
 </li>
 <li>
 6-8 years of experience in ITSM and BCMS consulting or related roles.
 </li>
 <li>
 In-depth knowledge of ITIL, ISO 22301, and other relevant frameworks/regulations.
 </li>
 <li>
 Practical experience in ISO 22301 implementation, BIA, DR planning, and BCMS assessments.
 </li>
 <li>
 Familiarity with IT compliance standards such as ISO 27001, COBIT, and NIST, NCA.
 </li>
 <li>
 Excellent analytical, problem-solving, and decision-making skills.
 </li>
 <li>
 Proven ability to manage multiple projects and clients simultaneously.
 </li>
 <li>
 Experience in conducting internal and external audits related to ITSM and BCMS.
 </li>
 <li>
 Strong stakeholder engagement, report writing, and project management skills.
 </li>
 </ul>
</div>

Consultant - ISMS/GRC

Value Point Systems Pvt Ltd

<div>
 
 Designation : Consultant -GRC
 
 
 
 
 Certifications, Qualification And Experience
 
 
 
 <ul>
 <li>
 Bachelor / PG degree with any of the certifications - ISO 27001, CBCP, CISA, CISM, CRISC, CISSP
 </li>
 <li>
 2 years to 20 years of applied work experience in cyber security programs, audits, assessments, risk, remediation, or cyber security compliance management.
 
 
 </li>
 </ul>
 
 Job Description
 
 
 
 <ul>
 <li>
 Implements security controls, risk assessment framework (ISO 31000, NIST), and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances client business objectives.
 </li>
 <li>
 Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves client security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
 </li>
 <li>
 Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.
 </li>
 <li>
 Defines and documents business process responsibilities and ownership of the controls in GRC tool (e.g. ServiceNow GRC, Archer, OneTrust, SAP GRC). Schedules regular assessments and testing of effectiveness and efficiency of controls and creates GRC reports.
 </li>
 <li>
 Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting Personally Identifying Information (PII) data, and compliance such PCI DSS, SOX, SOC2, HIPAA, RBI Guideline, ISO standards
 </li>
 <li>
 Performs and investigates internal and external information security risk and exceptions assessments. Assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks.
 </li>
 <li>
 Documents and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.
 </li>
 <li>
 Assists other staff in the management and oversight of security program functions.
 </li>
 <li>
 Trains, guides, and acts as a resource on security assessment functions to other departments within Client sites.
 </li>
 <li>
 Remains current on best practices and technological advancements and acts as the Client&rsquo;s technical resource for security assessment and regulatory compliance.
 </li>
 <li>
 Performs other related duties as assigned.
 
 
 </li>
 </ul>
 Location: Bangalore - VPS, Bangalore, Karnataka, India
</div>

Consultant -GRC

Adescare technology

Job Title - TPRM - Third party risk managementLocation - Bangalore - OnsiteRequirement:Consultant will be responsible for performing &amp; supporting remotedesktop assessments. You will be involved in supporting Tier 1&amp;2vendor risk assessments, on-boarding and due-diligence assessments.Identify and document observations and findings.Job Requirements:Information Security Governance, Privacy and Compliance and SecurityAssessment experience with a focus on IT and IS Risk Assessments andprogram reviews / establishment.Understanding on ISO 27001/ NIST 800-53/ PCI-DSSInteracting with onshore engagements and clients directly performingVendor or Third-party security assessmentsBusiness Continuity planning and Disaster Recovery implementation andreview experience.Perform remote and gap assessments against regulatory requirements andproviding recommendations to remediate the gaps.Independently write reports of the assessments based on the discussionsduring remote reviews.Perform second level quality review of the reports written bypeers/junior resourcesProfile:4+ years Information Security Governance, Privacy and Compliance andSecurity Assessment, experience, with a focus on IT and IS RiskAssessments and program reviews / establishment.Familiarity with and demonstrated experience assessing against the BSISO/IEC/SIG27002:2005 BS 7799 standard domains, BS 25999 including Risk Assessment;Security policy; Organization of Information Security; Asset Management;HR Security; Physical and Environmental Security; Communications andOperations Management; Access Control; IS Acquisition, Development andMaintenance; IS Incident Management; Business Continuity Management; andCompliance.Broad understanding of Information Security trends, services anddisciplines and experience applying them in dynamic environments.Additional Qualification:CISA/CSIM/ CISSP/ CRISC/ CIPP/ ISO 27001 is preferable.Educational Qualifications:Minimum of bachelor&rsquo;s degree from reputable university with 3-6 year of experienceJob Types: Full-time, PermanentPay: &#8377;800,000.00 - &#8377;2,000,000.00 per yearBenefits:<ul><li>Health insurance</li><li>Provident Fund</li></ul>Work Location: In person

Risk Analyst

Search 10000+ Pci security consultant jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 pci security consultant jobs NEAR_ME

Sr consultant for ISO 27001 & BCMS Required

Senior Cybersecurity GRC Consultant

Managing Consultant - Cyber Strategy & Risk

Managing Consultant - Cyber Strategy & Risk

Consultant - ISMS/GRC

Consultant -GRC

Risk Analyst