Company Description CyberCube Services provides comprehensive cybersecurity solutions and consulting services across multiple sectors and industries. The organization focuses on helping clients meet cybersecurity compliance standards and regulatory requirements, offering expert guidance tailored to each domain. CyberCube works closely with organizations to assess risk, strengthen security postures, and align practices with global and local regulations.

Team members gain exposure to diverse security frameworks and industries, contributing to robust, real-world cybersecurity implementations.

Job Title: Qualified PIN Assessor (PCI QPA)

Location: Gurugram, Haryana, India

Employment Type: Full-Time

Department: Information Security / Payment Security Consulting

About the Role

We are looking for an experienced PCI Qualified PIN Assessor (PCI QPA) to lead independent security assessments of payment PIN environments. In this role, you will evaluate secure cryptographic operations, key management systems, Hardware Security Modules (HSMs), and physical/logical security controls across payment processors, financial institutions, and service providers.

Key Responsibilities

Lead and execute end-to-end assessments against the PCI PIN Security Requirements and related security frameworks (e.g., PCI 3DS, PCI DSS).

Evaluate Key Management Facilities (KMF), key generation, injection, TR-31 key block implementation, distribution, and secure destruction processes.

Audit physical and logical controls surrounding cryptographic hardware, including HSM lifecycle management, firmware validation, and dual-control procedures.

Interface with client leadership, cryptographic teams, and technical engineers to conduct walkthroughs,



validate evidence, and evaluate compliance.

Draft, review, and deliver formal Reports on Compliance (RoC) and Attestations of Compliance (AoC) in line with PCI SSC quality standards.

Advise clients on remediating technical vulnerabilities and operational gaps in their PIN processing infrastructure.

Qualifications & Experience

Certifications

Active PCI QPA (Qualified PIN Assessor) credential in good standing (or previously qualified with eligibility for immediate re-certification).

Supporting industry certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor.

Experience

5+ years of total experience in Information Security, IT Audit, or Cryptographic Assessment.

Demonstrated hands-on experience auditing payment processing environments, retail ATM/POS networks, or issuing/acquiring platforms.

Technical Knowledge

Strong expertise in symmetric/asymmetric cryptography, AES/TDES algorithms, DUKPT, and key management life cycles.

Practical knowledge of HSM architectures (e.g., Thales payShield, Utimaco, Futurex).

Familiarity with related industry standards such as ANSI X9, ISO 9564, ISO 11568, and PCI 3DS Core Security Standards.

Soft Skills

Excellent report writing, audit documentation, and analytical skills.

QStrong stakeholder management and presentation abilities.

What We Offer

Competitive compensation and performance-driven bonuses.

Comprehensive health and wellness benefits.

Sponsored continuous learning, credential renewals, and conference attendance.

Adaptable working arrangements.

How to Apply

Interested candidates can apply directly on LinkedIn or send their resume to [email protected] with the subject line "Application: PCI QPA - [Your Name]".

📌 Qualified PIN Assessor (PCI QPA) (Gurugram)
🏢 CyberCube Services
📍 Gurugram