Provide cybersecurity consulting services to various clients of Crossbow Labs.
Conduct interviews with clients, review client documents for compliance, write compliance reports, and prepare and deliver briefings.
Travel to client locations to assess and validate physical and technical controls necessary to maintain compliance.
Review network architecture, hardening of multiple operating systems, malware protection, IDS/IPS, IT controls, network and system monitoring, and protection methods.
Work closely with clients to assess their IT security posture, identify weaknesses and vulnerabilities in relation to the PCI-DSS security framework, ISO, and other compliance standards.
Develop compliance procedures and documentation for the PCI program.
Conduct training sessions for clients and internal teams on PCI DSS and other cybersecurity standards and regulations.
Requirements
Strong technical understanding of networks, servers, workstations, and applications.
Proficiency in the PCI DSS v3.2.1 and PCI DSS v4.0 security standard.
Good comprehension of the ISO 27001 standard.
Ability to conduct Risk Management, Business Continuity Planning (BCP), and Disaster Recovery (DR) reviews.
Capability to perform network architecture reviews.
Capability to perform system configuration reviews for operating systems (Windows Linux), servers, databases, routers/switches, and firewalls.
Ability to conduct firewall/network rules reviews.
Ability to conduct application architecture reviews, review application security controls, and perform application code reviews.
Familiarity with cloud-based hosting solutions such as Microsoft Azure and AWS.
Strong team collaboration skills and client relationship management.
Excellent oral and written communication skills.
Ability to work both independently and in collaborative environments to meet delivery obligations.
Commitment to continuous learning and staying updated with current news and trends in the cybersecurity space.
