Information Security Associate

Information Security Associate

at Tevora

Irvine, CA

If you haven't heard of Tevora, it's because we've done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you.

What's the role?

Tevora is seeking a Information Security Associate to join the Payments team. If you discovered that your professional strengths are found at the intersection between analytical thinking, effective communication, and technology, you will likely enjoy being a member on the Payments Team.

The Payments team works within the most technology-centric industry compliance frameworks and regulations. Our team works as Security Assessors who analyze security posture at a holistic systems view, while simultaneously analyzing the granular networking and system configurations that truly matter in preventing a breach.

Our team is looking for coachable individuals with potential, who envision themselves growing into seasoned professionals that possess an in-depth understanding of the current technological landscape and the capability to maximize their impact through effective communication skills.

A day in the life could include:

• Supporting organizations across a multitude of industries (including finance, healthcare, government, digital SaaS platforms, e-commerce, retail & restaurant, etc.) in the protection of payments data.
  • Payments data we work with currently includes credit card data, debit card data, and SWIFT international banking transaction systems.
  • Payments team is currently in its incubation phase for developing services to help protect cryptocurrency & blockchain-based systems.
• Providing General Advisement Services to help organizations navigate payments industry regulations upon changes to strategic initiatives, projects, and infrastructure architecture.
• Performing in-depth technology and process control assessments to validate adequate protection of credit card data and ensure compliance against the Payment Card Industry Data Security Standard (PCI DSS)
• Performing payment application (PA-DSS, SSF) technical control assessments in a lab environment to validate payment processing software used within payment applications are adequately protecting credit card data via appropriate use of cryptography, authentication, secure coding practices, and other software-centric security mechanisms.
• Conducting infrastructure security assessments against systems that make EMV 3-D Secure Assuming the technical supporting role with the Lead Assessor in client assessments.
• Performing data collection, evidence review, and authoring final reports delivered to the client.
• Analyzing evidence to identify control deficiencies, vulnerabilities, and security risks.
• Communicate directly with clients to support in coordination of data & evidence collection.
• Conducting interviews with client subject matter experts for data collection.
• Continuously developing knowledge and skillsets to eventually be promoted to Lead Assessor
• (3DS) payment transactions possible.

Necessary skills and qualifications:

• A bachelor's degree from a four-year accredited university with a major in Economics, Engineering, Finance, Mathematics, English, or other degrees that demonstrate analytical thinking and effective communication skills.
• Foundational knowledge in technology, which may include understanding of networks, servers, and/or software.
• Information security and/or technology certifications (e.g., CISSP, CISA, Security+, Network+, A+)
• Completion of accredited cybersecurity training program (e.g., bootcamps, post-graduate degrees)
• Aptitude for applying analytical/structured thinking and understanding technology.
• Strong communication skills, both verbal and written, and ability to interact confidently