> Markdown version of [/jobs/ext/2290346-senior-security-consultant-continuity-and-compliance](https://www.wearedevelopers.com/jobs/ext/2290346-senior-security-consultant-continuity-and-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Consultant, Continuity and Compliance - **Company:** PONDURANCE, LLC - **Location:** McLean, VA, United States (Remote available) - **Experience:** Expert - **Salary:** $130,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Databases, PCI Data Security Standards - **Published:** August 29, 2026 - **Apply:** https://www.careerjet.com/jobad/usf499a8cdc37b513ba425220a943bb6bd ## About the Role * Bachelor's degree and 5+ years of experience in information security compliance, auditing, and assessments; or 7+ years of demonstrated experience in a related information security discipline. * Active PCI DSS Qualified Security Assessor (QSA) certification, with a professional certification such as CISSP, CISA, CMMC, or an equivalent credential required. * Strong working knowledge of security and regulatory frameworks, including PCI DSS, NIST, HIPAA, and CMMC, with the ability to interpret requirements and apply them within client environments. * Strong technical foundation in core IT and security concepts, including networking, databases, operating systems, and security controls, with the ability to evaluate technical environments for risk and compliance. * Demonstrated critical-thinking, problem-solving, and advisory skills, including the ability to conduct root cause analysis, exercise sound professional judgment, and develop practical, actionable recommendations. * Strong consulting, communication, and engagement-management skills, with the ability to communicate effectively with technical teams, business stakeholders, and executive leaders while managing multiple priorities and client engagements. * Preferred: Experience establishing, developing, or maturing information security programs. If you have other combinations of relevant skills and experience that you believe make you the right candidate for this role, please let us know. Work Environment & Schedule: This is a full-time, U.S.-based remote position open to candidates in all 50 states. Preference will be given to candidates who can consistently work Central or Eastern Time business hours, regardless of where they reside. Team members must be available during established business hours as needed for client collaboration, calls, meetings, and internal teamwork. ## Description Pondurance is looking for a Senior Security Consultant, Continuity and Compliance to join our Compliance Consulting team. In this role, you will lead compliance-focused consulting engagements and serve as a trusted advisor to clients navigating complex cybersecurity, risk, and regulatory requirements. You'll work primarily independently while collaborating with other consultants and internal subject matter experts as needed. The ideal candidate brings strong experience with regulatory and security frameworks, including HIPAA, PCI DSS, NIST, and CMMC, and has experience applying these requirements across industries such as healthcare, manufacturing, financial services, education, technology, and retail. Responsibilities: * Lead and execute multiple client consulting engagements concurrently, ensuring delivery aligns with established scope, timelines, budgets, and quality standards. * Lead annual PCI DSS compliance assessments, including SAQs, ROCs, and other applicable validation activities in accordance with PCI SSC requirements and QSA responsibilities. * Serve as a Subject Matter Expert (SME) for PCI DSS, NIST, HIPAA, and other applicable security and compliance frameworks, providing accurate, practical, and actionable client guidance. * Assess client security programs, technical controls, and regulatory requirements to identify risks, vulnerabilities, compliance gaps, and opportunities for improvement. * Develop practical remediation strategies and recommendations aligned with regulatory requirements, industry frameworks, risk, and client business needs. * Own assigned consulting engagements from initiation through completion, including the accuracy, quality, documentation, and final readiness of assessment deliverables. * Conduct client interviews, strategic advisory sessions, and workshops with executive leadership, technical teams, and key stakeholders to evaluate controls and communicate findings. * Establish, review, and advise on client policies, procedures, and controls to support compliance, security, and risk-management objectives. * Serve as a trusted security and compliance advisor, providing strategic guidance and applying professional judgment to complex, nuanced, or ambiguous client situations. * Provide technical direction, quality review, and mentorship to consultants and peers, promoting consistency, accuracy, and adherence to established assessment standards and methodologies. ## Related Videos - [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)