We’re Growing Our Expertise: Darren Grey Now a Certified PCI DSS QSA

June 25, 2025

We’re delighted to share that our Operations Director, Darren Grey, is now a certified PCI DSS QSA (Qualified Security Assessor).

What is a QSA – and why does it matter?

A Qualified Security Assessor is certified by the PCI Security Standards Council (PCI SSC) to assess and validate an organisation’s compliance with the Payment Card Industry Data Security Standard (PCI DSS). To earn this qualification, Darren had to:

  • Complete PCI SSC’s intensive training and pass the QSA exam
  • Demonstrate deep experience in cyber security, systems architecture and auditing
  • Be employed by a PCI SSC-approved Qualified Security Assessor Company (QSAC) 
  • Commit to ongoing professional development to maintain the certification

Only QSAs working for an approved QSAC can conduct formal PCI DSS assessments and issue Reports on Compliance (ROCs) for Level 1 merchants and service providers.

Bringing hands-on expertise to client work

Darren’s QSA qualification strengthens our in-house capability and gives clients even more direct access to trusted, certified expertise.

Having worked in IT and cyber security since 2008, Darren brings over 15 years of real-world experience to his role – from infrastructure engineering and cloud migration to project delivery and security operations. He’s been with Securious since 2017 and plays a key role in shaping how we support clients and deliver compliance projects efficiently.

From Darren:

“Working in cyber security is never dull – it’s always evolving. Becoming a QSA is a natural next step for me, and I’m excited to keep supporting our clients through complex projects and helping them understand not just what to do, but why it matters.”

What is the PCI DSS?

The Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect cardholder data and reduce the risk of payment card fraud. It applies to any organisation that stores, processes or transmits payment card data—from small online retailers to large financial service providers.

The PCI DSS sets out 12 high-level requirements that cover everything from secure network configuration to access control, vulnerability management and incident response. These requirements are regularly updated by the PCI Security Standards Council (PCI SSC) to address emerging threats and evolving technology.

Compliance with PCI DSS helps businesses:

  • Protect sensitive customer data

  • Avoid costly data breaches and reputational damage

  • Meet the expectations of banks and payment providers

  • Demonstrate due diligence and good cyber hygiene

Organisations may complete a Self-Assessment Questionnaire (SAQ) or undergo a formal assessment by a Qualified Security Assessor (QSA), depending on their transaction volume and how they handle card data.

To learn more about the PCI DSS, check out our Ultimate Guide by clicking here.

Need help with PCI DSS?

Whether you’re just starting your PCI DSS journey or preparing for a formal assessment, our team of QSAs, PCIPs and 3DS Assessors is here to help.

To speak to a PCI expert:

  • Call us on +44 (0)1392 247 110
  • Email info@securious.co.uk
  • Or fill in the form below