Back to Careers

Senior Qualified Security Assessor (USA, LATAM, UK, Europe)

APPLY NOW

DETAILS

Type: Full-time

Seniority: Senior Level

Locations: Working from Home scheme

BENEFITS

Flexible work schedule
Your birthday is an extra holiday
Company Bonus scheme
100% Health Care Plan Covered by Foregenix
Plus other country-specific benefits (comprehensive health insurance, pension schemes, and more)

NOTES

Please note we only accept docs in PDF format

Purpose

You will be at the forefront of helping our customers understand and strengthen their overall security posture, supporting them in building resilience against evolving threats. Your mission is to deliver high-quality cybersecurity consulting and assessment engagements, executed with precision, insight, and professionalism, that go beyond identifying vulnerabilities to uncover structural weaknesses, assess control effectiveness, and provide clear, actionable guidance to manage and reduce risk.

You will lead complex cybersecurity assurance engagements that help clients strengthen resilience and compliance across multiple frameworks, with particular expertise in PCI DSS and related programmes (e.g. P2PE, PIN and SSF).

As an experienced Senior Qualified Security Assessors (QSA) with hands-on technical expertise, you’ll combine deep domain knowledge with the ability to communicate clearly and confidently. You’ll translate complex findings into practical, actionable guidance, ensuring stakeholders feel informed, empowered, and resilient.

To succeed in this role

Provide current and relevant cybersecurity advise and remediation support to our customers
Managing a wide range of level-1 PCI DSS engagements, including performing QSA-assisted SAQ reviews and conducting formal end-to-end PCI DSS assessments
Execute other types of cybersecurity programs assessments (NIST, CMMC, etc.) across a range of industries
Manage unexpected project conditions during client engagements, work with your team and escalate early
Perform scoping reviews and gap assessments, support continuous compliance programs
Collect, classify and analyse scoping documents
Manage customers’ expectations in relation to project status and deadlines

Support the Sales Team to ensure correct translation of customers’ needs into accurate statements of work
Work with the Sales Team to identify additional opportunities in customer organisations
Research a wide variety of cybersecurity fields
Finalising reports and engagements in a timely fashion
Proven experience with one Information Security Management System (COBIT, ISO 27001).
Senior QSAs are expected to be travelling approximately 20% of their time with the company.

In this role you will

Stay ahead of emerging threats, regulations, and technologies to ensure advice is always relevant and best in class
Execute cybersecurity assessments in line with the standards and methodologies defined by the business
Participate in complex or Tier 1 client assessments, ensuring delivery quality and technical precision
Identify risks, vulnerabilities, and areas for improvement across client environments

Communicate complex findings clearly and effectively, adapting to the needs of each customer and audience
Provide practical, best-practice recommendations that clients can act on with confidence
Collaborate with colleagues to refine and evolve our approach to security assessments
Work with our sales force to ensure customer needs are accurately captured and explore opportunities to deepen relationships.

You are expected to bring

Active PCI QSA qualification with 3+ years of Level 1 assessment experience
Proven experience with one Information Security Management System (COBIT, ISO 27001)
Hands-on experience with vulnerability scanning and penetration testing tools
A broad knowledge of IP networks, its protocols, and different system architectures
Remarkable interpersonal and communication skills. Active listening ability
Strong time management skills and the ability to deal with multiple competing priorities
Confidence in your understanding of the SDLC and how cybersecurity applies throughout each stage
Strong understanding of IP networks, protocols, and system architectures
Solid grounding in cryptography concepts and implementations

Demonstrable experience with PCI-related programmes (e.g., P2PE, PIN, SSF/3DS), additional certifications in these areas are highly desirable
Ability to meet deadlines. Foregenix always assigns dedicated time to analysis and reporting on every project, so that consultants can always deliver reports on time
A collaborative approach, balancing independence with teamwork
Fluency in English.
Motivated self-learner. Strong desire to work hard, research and grow your skills
Team-working spirit. Being effective at multitasking
A resilient, solutions-focused mindset with the confidence to take ownership and the awareness to seek support when needed

Must Have Certifications

At least one from each group below

Current PCI QSA qualification
Information Security: CISSP, CISM, ISO 27001 LI, RISS

Audit: CISA, GSNA, ISO 27001 LA/IA, IRCA ISMS Auditor, IIA CIA

Advantageous Competencies

Having a MSc in Information Security, or equivalent educational experience

One of the following certifications: CSSLP, CASE, GSSP, GWEB, CEH, OSCP, PenTest+ or GPEN