Key Responsibilities: Conduct internal vulnerability scans Facilitate and monitor external vulnerability assessments and VA/PT performed by third‑party assessors annually in compliance with BSP requirements. Manage and ensure quarterly PCI‑DSS ASV scans for all internet‑facing applications handling