Senior Security Consultant - Cape Town OR Johannesburg

About Us

Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees, across 12 locations, and six Security Operations Centres (SOCs)-including locations in Dublin, Sofia, Stockholm, Madrid, Naples and Cape Town-we support more than 2,500 clients across a wide range of industries.

Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever-evolving cyber landscape. Our security-first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.

Job Role

The Senior QSA Consultant will lead security consultancy engagements and pre-sales processes with clients within financial services and payment card industries. Focusing on delivery of Payment Compliance services, which include but are not limited to:

• PCI specialized assessment (PIN, P2PE, SSF, 3DS, etc.)
• PCI DSS, Swift, PSD2 assessments
• GAP Analysis
• Policy and Procedure review

Primary Duties/Responsibilities include:

Pre-Sales

• Starting from the information received from the sales team, independently carry out the estimate of the effort required to deliver a security services, reporting the result to the regional lead for approval.
• Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries. Provide detailed analytical reporting, internal reporting metrics and program management. Provide leadership and mentorship to Junior consultants.

Delivery

• Prepares, organizes and supports delivery by team members of engagements offsite or at customer premises including but not limited to gap analysis, security assessment, risk and/or compliance assessment using one or more industry or regulatory standard or framework.

Processes and Documentation

• Assesses compliance related documentation including policies, procedures, standards and legislative directives.
• Provides remediation support and guidance on the security aspects of the administration and maintenance of processes & documentation, infrastructure components, applications, services and security systems.
• Delivers detailed reports following Integrity360's reporting best practice and templates.
• Ensure QA process for Payments Compliance standards is initiated and applied for relevant projects, in cooperation with QA and Backoffice team.
• Establishes new standards and reviews existing documentation to ensure the correct application of the processes.
• In cooperation with Practice Lead(s), estimating, planning & monitoring team budget.
• Provide regular status update to internal stakeholders (Practice Lead(s), PMO).
• Participate in continuous improvement of internal processes (reporting tools, assessment automation etc.)

Communication

• Participates to external conferences and promotes Integrity360 by identifying important Industry events.
• Support marketing activities related to existing Professional Service portfolio and customer acquisition working in collaboration with marketing team.
• Act as a communication point between regional team, other professional services teams, Customer Success and other departments.
• Supports sales team in development and effort estimations for new opportunities (e.g. new and evolving industry standards).
• Stay up-to-date on developments in the Payments Compliance realm, understanding new standards and regulations and their impact on Integrity360.

Required Skills

• Relevant Experience in Fintech industry and security standards & directives consultancy services (PCI DSS, PSD2, ISO 27001, SWIFT, etc.)
• Cryptography techniques including algorithms, key management, and key lifecycle.
• Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA).
• Hardware security modules (HSMs) operations, policies, and procedures.
• POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT.
• Physical security techniques for high-security areas.
• Authentication methods and techniques.
• Security Integrity controls.
• Computer Networking (routing, switching, firewall network filtering).
• Operating Systems hardening and administration (Linux/Unix, Windows).

Core Competencies

• Problem Solving (analysis, helicopter view, problem setting, decision making).
• Planning and Organization (time management, scheduling and control).
• Communication (clearness, listening, persuasion, negotiation, public speaking).
• Networking (reinforce relationships, use emotional intelligence and personal proximity).
• Results Orientation (delivering solutions, work under pressures).
• Leading and Empowering People (self-confidence, establishing focus, providing motivational support and feedback, fostering teamwork and integration).
• Economic Sensitivity (Economic variables evaluation, Profit & Loss dynamics).

Certifications/Qualifications

• Qualified Security Assessor (QSA) is a must.