ZipRecruiter

Log In

1

Qsa Consultant Jobs (NOW HIRING)

BDO USA

PCI QSA Manager, Cybersecurity

Chicago, IL · On-site

$114K - $154K/yr

Five (5) or more years of IT management or IT compliance consulting experience, required * Four (4) ... PCI QSA Certification (Qualified Security Assessor/Payment Card Industry), required * CISA, CISM ...

BDO

PCI QSA Manager, Cybersecurity

Chicago, IL · Remote

$114K - $154K/yr

Five (5) or more years of IT management or IT compliance consulting experience, required * Four (4) ... PCI QSA Certification (Qualified Security Assessor/Payment Card Industry), required * CISA, CISM ...

A-LIGN External

Senior IT Auditor - ISO

$96K - $126K/yr

About the Role The ISO Senior Consultant works to execute Information Security Consulting ... Additional preferred certifications include CCSK, CISA, QSA, CISSP, or other relevant certification ...

A-LIGN External

Senior IT Auditor - ISO

OR · On-site +1

$93K - $123K/yr

About the Role The ISO Senior Consultant works to execute Information Security Consulting ... Additional preferred certifications include CCSK, CISA, QSA, CISSP, or other relevant certification ...

VikingCloud

Security Consultant

This Position As a Qualified Security Assessor (QSA) you will provide assessments and consulting to our clients. You will manage your own book of work and be the master of your own work schedule to ...

VikingCloud

Security Consultant

This Position As a Qualified Security Assessor (QSA) you will provide assessments and consulting to our clients. You will manage your own book of work and be the master of your own work schedule to ...

next page

Showing results 1-20

All JobsTechnology JobsSoftware JobsQsa Consultant Jobs

Qsa Consultant information

See salary details

$10

$49

$118

How much do qsa consultant jobs pay per hour?

As of Sep 10, 2026, the average hourly pay for qsa consultant in the United States is $49.72, according to ZipRecruiter salary data. Most workers in this role earn between $24.28 and $62.50 per hour, depending on experience, location, and employer.

What is the difference between Qsa Consultant vs Penetration Tester?

AspectQsa ConsultantPenetration Tester
CertificationsQSA, CISSP, CEHCISSP, CEH, OSCP
Work EnvironmentConsulting firms, client sites, compliance auditsSecurity firms, independent, lab environments
Industry UsagePayment Card Industry (PCI), compliance auditsCybersecurity, vulnerability assessments

Qsa Consultants primarily focus on PCI compliance assessments, ensuring organizations meet security standards for payment card data. Penetration Testers simulate cyberattacks to identify vulnerabilities. While both roles require security certifications like CEH or CISSP, Qsa Consultants emphasize compliance and audit processes, whereas Penetration Testers focus on technical vulnerability exploitation. Understanding these differences helps organizations choose the right security professional for their needs.

How do you become a Qsa Consultant?

To become a QSA (Qualified Security Assessor) Consultant, individuals typically need to obtain the PCI Professional (PCIP) certification and gain experience in information security and PCI DSS compliance. Many QSA Consultants have backgrounds in cybersecurity, auditing, or IT, and must pass the PCI QSA training and exam to be certified and authorized to assess organizations' compliance with PCI standards.

What is a Qsa Consultant job description?

A QSA (Qualified Security Assessor) Consultant evaluates organizations' compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements. They conduct security assessments, review policies and controls, and provide guidance to ensure secure handling of cardholder data, often requiring knowledge of security frameworks and certification such as PCI QSA. The role typically involves detailed documentation and may require travel to client sites.

What cities are hiring for Qsa Consultant jobs?

Cities with the most Qsa Consultant job openings:

What are popular job titles related to Qsa Consultant jobs?

For Qsa Consultant jobs, the most frequently searched job titles are:

Infographic showing various Qsa Consultant job openings in the United States as of September 2026, with employment types broken down into 1% As Needed, 90% Full Time, 6% Part Time, and 3% Contract. Highlights an 76% Physical, 3% Hybrid, and 21% Remote job distribution, with an average salary of $103,425 per year, or $49.7 per hour.

PCI-QSA Security Consultant

Raleigh, NC

Ask IT consulting
IT Services • 51 - 200 employees
Learn more about Ask IT consultingexternal

Full-time

Re-posted 27 days ago

Job description

Company Description

Ask IT Consulting Inc, backed by a $500 million Microtek group company, provides an industry leading blend of technology, business consulting, and outsourcing services. Ask IT is a minority-owned enterprise; it has been founded on providing the highest quality possible and on the devotion to customer satisfaction. ASK IT consulting is an equal opportunity employer, which is a global staffing, consulting and technology solutions company, offering industry-specific solutions to fortune 500 clients and worldwide corporations.  

Job Description

Contract resource with senior Information Security Analyst skillset, with focus on PCI-DSS skillset for agency PCI-DSS compliance assessment support throughout year and for annual QSA engagement coordination.

Complete Description The Department of Transportation is seeking a short-term contractor to implement and maintain information security best practices within the NCDOT environment related to assessing and maintaining PCI-DSS compliance for NCDOT. The contractor will help implement and monitor PCI environments using those best industry practices, IDS/IPS, SIEM, employee awareness training tools and related technologies in support of assessing and maintaining PCI-DSS compliance.

The position is responsible for assisting information security analysts and application & service owners with PCI-DSS compliance tasks such evidence preparation, gathering and submission to the PCI-DSS assessor for annual compliance. The position provides input into the creation of hardening standards, researches security best practices and other industry security trends to use as input into the improvement of the agency information security program in addition specifically to PCI-DSS compliance. The position also participates in the information security incident management processes.

The candidate must be an experienced information security analyst possessing advanced experience with the following:

2+ years prior experience supporting, ideally leading, a Level 1 or Level 2 organization's PCI-DSS compliance effort, working with ISA or QSA.

Deep understanding of PCI-DSS 3.0/3.1 and preceding version requirements.

Analysis and review of security events until closure; this includes investigating and recommending appropriate corrective actions.

Conducting internal vulnerability assessments and scheduling of third party external scans. 

Management and verification of user PCI security awareness & training.

Hands-on implementation of security devices and applications to monitor and review network, servers, and applications.


Qualifications

Skilled information security professional with advanced knowledge & experience developing and implementing PCI policies, standards and procedures.

Experience supporting, maintaining & implementing security for a large organization assessed against PCI-DSS and level 1 or 2

Advanced experience with security technologies including IDS/IPS, firewalls, SIEM, network analysis tools, malware analysis

Advanced knowledge of security standards and frameworks including but not limited to: OWASP, ISO 27001 and NIST

Experience implementing and executing security incident response

BA or BS in Computer Science, Management Information Systems, or equivalent experience

Must have excellent communication skills (written and verbal) and have the ability to communicate with all levels of staff and management

Previous or current PCI QSA or ISA certification.

CISSP, GIAC, CEH, Security+ or related security certifications

Additional Information

 If you are interested in finding out more about opportunities near you, , please email me at ryanaskitc.com


Ask IT Consulting logo

About Ask IT Consulting

Sourced by ZipRecruiter

Ask IT Consulting, based in Holtsville, NY, US, is a dynamic player in the IT and business solutions industry. Their services portfolio, as outlined on their official website (askitc.com), spans across a broad spectrum which includes IT consulting, talent management, digital and technology solutions. Founded with the goal to provide clients with the highest quality IT services, the company has steadily evolved and expanded as a leading resource, maintaining a powerful presence in the fields of information technology and business solutions alike. Ask IT Consulting believes firmly in its core values, which pivots upon integrity, excellence, respect, commitment, and diversity. As part of its mission, the company strives to deliver innovative and effective solutions for their clients that are tailored to meet their unique needs and objectives.

Industry

It services

Company size

51 - 200 Employees

Headquarters location

Holtsville, NY, US

Year founded

2008

Social media

FacebookTwitter

View All Ask IT Consulting Jobs

Apply