> Markdown version of [/jobs/ext/36324-pci-dss-qsa-senior-consultant](https://www.wearedevelopers.com/jobs/ext/36324-pci-dss-qsa-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PCI DSS QSA (Senior Consultant)

- **Company:** NCC Group
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Discovery, PCI Data Security Standards, Software Security
- **Published:** May 31, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/37811639/

## About the Role

You hold or have held a PCI Qualified Security Assessor (QSA) qualification and delivered PCI DSS assessments.
You hold or have held other PCI assessor qualifications such as PCI 3DS Assessor, PCI Card Production Security Assessor (CPSA), P2PE Assessor, Qualified PIN Assessor (QPA) or Secure Software Assessor. You are interested in expanding your PCI skills to include assessing against these standards.
You will be working in areas mainly focusing on PCI QSA however other skills include as NIST 800-53, SANS Top 20 CSC, ISO 27001, Risk Assessment (ISO27005) EU GDPR and other frameworks as requested by clients.
Have the ability to deliver projects within time and in budget and to a high level of customer satisfaction - exercising customer care at all times.
Demonstrate a strong ability to develop a rapport with customers and to engender long lasting relationships.
Have strong business, consultancy and technical skills within the IT Security Industry.
Excellent communication and presentation skills.

Desired Skills and Qualifications
Demonstrable capability and qualifications across multiple of the following technical areas is advantageous.

## Description

NCC Group provides Information Assurance consultancy to help businesses protect critical systems and information. We do this by defining security strategies, developing policies, conducting security maturity and risk assessments, architecture reviews and by delivering security awareness & training. We also provide security expertise to businesses to provide an on-demand cyber capability in the short, medium or long term to solve pressing business cyber orientated problems and challenges.
Our core services include:

Strategy and governance
On-demand augmentation roles
Data discovery and mapping Risk advisory and assurance
Business resilience Data privacy and GDPR
ISO 27001 assessments
Supply chain assurance
PCI 3DS, PCI P2PE, PCI SSF audits
Incident response readiness and planning
Card production and PIN audits Cyber maturity assessments
Incident response planning Gold/Silver/Bronze tabletops

We have a fantastic new opportunity to join our UK Consulting and Implementation division for a Senior Consultant operating as a Qualified Security Assessor (QSA). The ideal candidate will have prior extensive PCI consulting experience and commercial exposure within the cyber and payments space, gained from delivering a diverse range of cyber and assurance services ideally across a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with senior client stakeholders., Build and maintain sustainable trusted client relationships through high-quality delivery, ensuring output exceeds client expectations.
Conduct onsite and remote activities to advise, assess, analyse, and report in line with the engagement and client business requirements. This will involve meeting client stakeholders, conduct of documentation reviews, auditing technical solutions and systems as well as presenting information and advice to senior business partners.
Translate the technical and non-technical findings from an assessment or exercise into relevant, actionable remediation road maps for customers.
Responsible for adhering to all internal policy and procedures in relation to security and quality best practice. Engage with Markets and Pre-Sales teams during the sales cycle to assist in quantifying, pricing and assessing the capability required for the project delivery.
Assist with sales proposals, bids and tenders for delivery of Assurance & Compliance services.
You will act as mentor to less experienced consultants and foster knowledge sharing throughout the delivery team.


## Related Videos

- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [3 Ways to Rebuild the Data Stack for Agents](https://www.wearedevelopers.com/videos/100091-3-ways-to-rebuild-the-data-stack-for-agents)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)