Back to jobs

Senior Advisory Associate-PCI QSA

Atlanta, Georgia, United States; Charlotte, North Carolina, United States; Nashville, Tennessee, United States; United States

Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!  

We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people. 

At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.  

Job Summary:

Frazier & Deeter is seeking an Advisory Senior Associate to lead PCI DSS assessments and evaluate security controls to validate compliance with payment card industry requirements. Review technical and process controls, identify compliance gaps, and provide remediation recommendations. Engage with client stakeholders to assess risks, review evidence, and support compliance reporting. Deliver advisory services to help organizations strengthen cardholder data security and maintain PCI DSS compliance.

Duties & Responsibilities:

  • Lead PCI DSS assessments, gap analyses, and readiness reviews for clients across various industries.
  • Evaluate the design and effectiveness of security controls related to cardholder data environments (CDE).
  • Review policies, procedures, configurations, and technical evidence to validate PCI DSS compliance.
  • Conduct stakeholder interviews and walkthroughs to understand processes and identify compliance gaps.
  • Develop risk-based recommendations and remediation plans to address PCI DSS findings.
  • Prepare assessment deliverables, including compliance reports, observations, and executive summaries.
  • Mentor junior team members, review their workpapers, and support engagement quality and timely delivery.
  • Act as a trusted advisor to clients on PCI DSS requirements, security best practices, and evolving compliance expectations.

Education & Experience: 

  • Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information Systems, or a related field.
  • 3-5 years of experience in IT Audit, Cybersecurity, Risk Advisory, Compliance, or PCI DSS assessments.
  • PCI QSA certification required; additional certifications such as CISA, CISSP, CISM, CRISC, or ISO 27001 Lead Auditor are preferred.
  • Strong understanding of PCI DSS requirements, payment card processing environments, and cardholder data security controls.
  • Experience conducting compliance assessments, control testing, gap assessments, and remediation validation activities.
  • Familiarity with IT General Controls (ITGCs), access management, vulnerability management, network security, encryption, and logging/monitoring controls.
  • Experience preparing assessment reports, executive summaries, and presenting findings to client stakeholders and management.
  • Strong analytical, communication, stakeholder management, and project delivery skills with the ability to manage multiple engagements simultaneously.
  • Experience mentoring junior team members and contributing to practice development initiatives is preferred.

#LI - hybrid

Create a Job Alert

Interested in building your career at Frazier & Deeter? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Phone
Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf


Select...
Select...
Select...
Select...
Select...
Which of the following assessment frameworks have you supported? (Select all that apply) *
Which professional certifications do you currently hold? (Select all that apply) *

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Frazier & Deeter’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...