PCI -Qualified Security Assessor

Tender description

Who Speclialist Work With The specialist will work with the Principal Architect for New Generation Contact Centres and other principal subject matter experts within the scope of this requirement. What Specialists Work On A currently Qualified Security Assessor working for Qualified Security Assessor Company (QSAC) to perform a high level assessment of the current payment processes at two Contact Centres against Version 3.2 of the PCI-DSS standards, whilst considering environment e.g. the agents handling calls. Perform assessment of process, procedures by interviewing as required to determine the currently suitability, both DWP staff and 3rd Party suppliers. Produce a report highlighting areas of non-compliance against standards and concerns where DWP may be non-compliant against new PCI-DSS requirements. Provide information and comment to the DWP architect highlighting possible solutions that DWP may choose to employ. Where the Work Takes Place In Manchester and surrounding areas. In Newcastle and surrounding areas. Full address details will be provided upon the successful application. Early Market Engagement An internal evaluation has been conducted and the findings have highlighted that an independent third party assessment is required from a suitably Qualified Security Assessor with in date certification to provide a high level assessment of the current payment process of DWP Contact and Data centres. Working Arrangements Visits to sites to conduct audit of Data and Call Centres as a requirement of the role ensuring that all information and evidence is captured. This analysis will result in final presentation and read out to DWP at a Leeds based location. All travel to DWP sites, accommodation etc. will be arranged by DWP and any expenses incurred to the individual will be refunded in accordance with standard DWP expenses policy. Work Location In Manchester and surrounding areas. In Newcastle and surrounding areas. Full address details will be provided upon the successful application. Security Clearance Baseline Personnel Security Standard (BPSS) vetted Additional T&Cs Skills & Experience A Qualified Security Assessor QSA in date Certification Previous experience working within Payment Card Industry Data Security (PCI-DSS) as a QSA Current employment at a Qualified Security Assessor Company The QSAC/QSA must ahere to the PCI-DSS qualification requirements as laid out by the PCI standards Council Evidence of working with other organizations and outcomes. Nice to Haves Experience of successfully dealing with Card Not Present (CNP) especially in voice Contact Centres. No. of Specialists to Evaluate 6 Cultural Fit Criteria Have experience of positive engagement with staff Have experience of successfully interviewing staff at all grades Experience of analysis of complex processes,both internal and external Have experience of producing detailed and factual reports Experience of providing recommendations/solutions to highlighted problems Be transparent and collaborative when making decisons Assessment Method Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range