Senior Information Security Consultant – QSA

Overview

3B Data Security, ( a UBDS Group company) is seeking an experienced and highly motivated Senior Information Security Consultant with active PCI Qualified Security Assessor (QSA) status. The successful candidate will play a critical role in delivering high-quality information security consulting services to clients, encompassing PCI DSS (Payment Card Industry Data Security Standard) compliance, ISO 27001 implementation, Virtual Chief Information Security Officer (vCISO) engagements, and broader governance, risk, and compliance (GRC) support.

As a senior member of the consulting team, you will lead on complex projects, act as a subject matter expert, support business development, and contribute to the strategic growth of the organisation. You will have the opportunity to engage across diverse information security domains and help shape the direction of a growing and dynamic business.

• Deliver high-quality PCI DSS assessments, including Report on Compliance (RoC) production for Merchants and Service Providers
• Lead and deliver a variety of consultancy engagements including ISO 27001 audits and implementations, GDPR assessments, risk assessments, policy development, and vCISO support.
• Act as a trusted advisor to clients, ensuring pragmatic and tailored guidance aligned with regulatory requirements and business needs.
• Mentor junior consultants, providing technical oversight, guidance, and quality assurance on engagements.
• Contribute to the development and delivery of internal training materials and client-facing information security training courses.
• Support the Leadership Team in identifying and developing new business opportunities.
• Lead on the scoping and conversion of new client engagements, contributing to bid writing and client proposals.
• Provide escalation support for complex security queries and technical decision-making.
• Maintain and enhance knowledge of PCI-related standards (e.g., PCI P2PE, PCI PIN) and other emerging areas such as cyber resilience, digital forensics, and incident response.

Essential

• Current PCI QSA (Qualified Security Assessor) certification.
• A minimum of 5 years’ experience in an information security consultancy role, including significant experience with PCI DSS and ISO 27001.
• Demonstrable experience in producing high-quality RoC documentation and conducting complex PCI DSS assessments.
• Strong understanding of broader security standards and frameworks, including Cyber Essentials, DPA 2018, GDPR, NIST, and SOX.
• ISO 27001 Lead Auditor or Implementor certification.
• Excellent communication and stakeholder engagement skills with a client-focused approach.
• Proven ability to manage multiple concurrent engagements and operate autonomously.
• Full UK working rights and flexibility to travel both nationally and internationally as required.

Desirable

• CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification.
• Experience with Cyber Essentials Plus assessments, vulnerability assessments, or Cyber Advisor schemes.
• Familiarity or interest in adjacent domains such as PCI P2PE, PCI PIN, automotive security, digital forensics, and penetration testing.

Why people choose to grow their careers at UBDS Group

Professionals choose to grow their careers at UBDS Group for its reputation as a dynamic and forward-thinking organisation that is deeply committed to both innovation and employee development. At UBDS Group, employees are given unique opportunities to work on cutting-edge projects across a diverse range of industries, exposing them to new challenges and learning opportunities that are pivotal for professional growth.

The Group’s culture emphasises continuous improvement, offering ample training programs, mentorship, and the chance to gain certifications that enhance their skills and marketability. UBDS Group fosters a collaborative environment where creativity and innovation are encouraged, allowing employees to contribute ideas and solutions that have a tangible impact on the company and its clients. This combination of professional development, a culture of innovation, and the opportunity to…