Hands-on role checking Virtual Pay's technical systems against ISO/IEC 27001:2022 and PCI DSS v4.0 before external audits.
Audit system configurations, cloud setups (OCI, AWS, Azure), operating systems, and network settings against ISO 27001:2022 and internal security manuals.
Run routine internal assessments of the cardholder data environment as an Internal Security Assessor, keeping data flow and segmentation diagrams current, reviewing daily security logs, and validating network boundaries.
Test controls hands-on, including MFA enforcement, RBAC consistency, patch cycles, and endpoint protection rules.
Evaluate biometric hardware, enrollment workflows, and identity access controls for physical and logical entry points, referencing ISO/IEC 20027 where relevant.
Maintain a unified control crosswalk that maps technical configurations to PCI DSS controls and ISO 27002 clauses to avoid duplicate audit work.
Gather and interpret evidence directly from systems, such as SIEM logs, firewall rulesets, encryption keys, and pipeline vulnerability scans.
Requirements
A bachelor's degree in IT, computer science, cybersecurity, or a related technical field.
4+ years of hands-on experience auditing IT systems, verifying infrastructure security, or supporting an active ISMS.
Highly valued: active or prior PCI ISA or QSA designation.
Highly valued: ISO 27001 Internal Auditor or Lead Auditor.
Highly valued: CompTIA Security+, CISA, or CEH.
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
