Auditor Directory
PCI DSS Auditors
Payment Card Industry Data Security Standard v4.0
Browse accredited firms offering PCI DSS audits. Filter by location, size, and budget.
330 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
Aon Cyber Solutions UK
London, United Kingdom
Aon Cyber Solutions UK offers ISO 27001, SOC 2, and PCI DSS assessments with cyber insurance integration.
Atos Cybersecurity
Paris, France
Atos Cybersecurity is a global IT services company offering enterprise-grade ISO 27001, SOC 2, and NIS2 compliance.
Baker Tilly
Chicago, Illinois
Baker Tilly is a top-10 global advisory CPA firm network with 43,000+ professionals in 141 countries, serving mid-market and growth companies.
BDO Canada
Toronto, ON
BDO Canada is a leading national CPA firm offering SOC, SOX, ISO 27001, and PIPEDA compliance audits.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
Bridewell Consulting
Reading, United Kingdom
Bridewell Consulting is a UK cybersecurity firm offering ISO 27001, SOC 2, PCI DSS, and NIS2 assessments.
BSI Group
London, UK
BSI Group is the world's first national standards body and largest ISO certification body, offering ISO 27001, ISO 27701, SOC 2, and Cyber Essentials audits globally.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
Bureau Veritas
Paris, France
Bureau Veritas is a world-leading testing, inspection, and certification company providing ISO 27001 and management system certifications in 140+ countries.
CGI Cybersecurity
Paris, France
CGI Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC 2, NIS2, and more.
Citrin Cooperman
New York, NY
Citrin Cooperman is a Top 25 CPA firm offering comprehensive SOC, SOX, HIPAA, and ISO 27001 audit services.
CliftonLarsonAllen
Minneapolis, MN
CliftonLarsonAllen is a Top 10 CPA firm offering SOC, SOX, HIPAA, FedRAMP, and ISO 27001 audits.
CliftonLarsonAllen LLP
Minneapolis, MN
CliftonLarsonAllen (CLA) is a top-eight US CPA firm headquartered in Minneapolis, offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, and CMMC audit services nationally.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
Crowe Global
New York, United States
Crowe Global is a top-10 global accounting network providing audit, tax, and advisory services through member firms in over 145 countries worldwide.
DarkMatter Group
Abu Dhabi, UAE
DarkMatter Group is a UAE cybersecurity firm offering ISO 27001, SOC 2, and NESA compliance assessments.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Deloitte Australia
Sydney, Australia
Deloitte Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services to Australia's largest organizations across government, financial services, and technology.
Deloitte Canada
Toronto, Canada
Deloitte Canada is the country's largest Big Four professional services firm, providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services across financial services, technology, energy, and government sectors.
Deloitte Haskins & Sells LLP
Mumbai, India
Deloitte Haskins & Sells is Deloitte's primary India affiliate, offering SOC 1, SOC 2, ISO 27001, DPDPA, and compliance audit services across India.
Deloitte India
Mumbai, India
Deloitte India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services to India's largest corporations and multinational subsidiaries.
Deloitte Middle East
Dubai, UAE
Deloitte Middle East is the region's largest professional services firm, providing Big Four audit, assurance, and advisory services across the MENA region.
Deloitte Singapore
Singapore
Deloitte Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to major corporations and government agencies across Singapore and Southeast Asia.
Deloitte Tohmatsu
Tokyo, Japan
Deloitte Tohmatsu is Deloitte's Japanese member firm and one of Japan's largest audit firms, providing Big Four services including J-SOX and ISMAP compliance.
Deloitte Touche Tohmatsu Brazil
Sao Paulo, Brazil
Deloitte Brazil is the largest professional services firm in Latin America, offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services.
ElevenPaths (Telefonica Cyber)
Madrid, Spain
ElevenPaths (Telefonica Cyber) offers ISO 27001, PCI DSS, and ENS compliance across Europe and Latin America.
Ensign InfoSecurity
Singapore
Ensign InfoSecurity is Singapore's largest cybersecurity firm offering ISO 27001, SOC 2, and MTCS assessments.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Ernst & Young Brazil
Sao Paulo, Brazil
EY Brazil is Ernst & Young's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services across Brazil.
EY Australia
Sydney, Australia
EY Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services across financial services, technology, and government sectors in Australia.
EY France
Paris, France
EY France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, and manufacturing.
EY Germany
Stuttgart, Germany
EY Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises, automotive companies, and financial institutions.
EY India
Mumbai, India
EY India is the largest Big Four operation in India by headcount, providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services across all major industries.
EY Japan
Tokyo, Japan
EY Japan (EY ShinNihon) provides Big Four audit, assurance, and advisory services with expertise in J-SOX, ISMAP, and Japanese regulatory compliance.
EY MENA
Dubai, UAE
EY MENA provides Big Four audit, assurance, tax, and advisory services across the Middle East and North Africa with offices in 15+ MENA countries.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Forvis Mazars (US)
Springfield, Missouri
Forvis Mazars is a top-10 US professional services firm formed from the merger of BKD and Dixon Hughes Goodman, now part of the Mazars global network.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
GuidePoint Security
Herndon, VA
GuidePoint Security offers SOC 2, ISO 27001, FedRAMP, and CMMC compliance assessments.
HCLTech Cybersecurity
Noida, India
HCLTech Cybersecurity provides enterprise compliance services across ISO 27001, SOC, PCI DSS, and NIST.
Help AG
Dubai, UAE
Help AG is one of the largest cybersecurity firms in the Middle East offering ISO 27001, SOC 2, and NESA assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG Australia
Sydney, Australia
KPMG Australia provides Big Four audit, assurance, and cybersecurity services with deep expertise in APRA, CPS 234, and Australian regulatory compliance.
KPMG AZSA LLC
Tokyo, Japan
KPMG AZSA (KPMG Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's largest corporations across technology, manufacturing, and financial services.
KPMG Brazil
Sao Paulo, Brazil
KPMG Brazil is KPMG's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for enterprises and mid-market companies.
KPMG Canada
Toronto, Canada
KPMG Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canadian organizations across financial services, technology, energy, and government.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG India
Mumbai, India
KPMG India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, and enterprise risk advisory services to India's largest organizations across financial services, technology, and government sectors.
KPMG Lower Gulf
Dubai, UAE
KPMG Lower Gulf is KPMG's UAE and Oman practice, providing Big Four audit, assurance, tax, and advisory services across the Gulf region.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
Kroll (UK)
London, United Kingdom
Kroll UK is a global risk advisory firm offering ISO 27001, SOC 2, PCI DSS, and enterprise-grade compliance assessments.
Kudelski Security
Lausanne, Switzerland
Kudelski Security is a Swiss cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments globally.
LAC Co., Ltd.
Tokyo, Japan
LAC is one of Japan's largest cybersecurity firms offering ISO 27001, ISMS, and PCI DSS assessments.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
LTIMindtree Cybersecurity
Mumbai, India
LTIMindtree Cybersecurity offers enterprise-grade ISO 27001, SOC 2, and PCI DSS compliance services.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
McGrathNicol Cyber
Sydney, Australia
McGrathNicol Cyber offers IRAP, ISO 27001, and SOC 2 assessments for Australian enterprises and government agencies.
mnemonic AS
Oslo, Norway
mnemonic is Norway's largest cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Nixu Oyj
Helsinki, Finland
Nixu Oyj is a leading Nordic cybersecurity firm offering ISO 27001, SOC 2, NIS2, and GDPR compliance assessments.
NRI SecureTechnologies
Tokyo, Japan
NRI SecureTechnologies is a leading Japanese cybersecurity firm offering ISO 27001, PCI DSS, and ISMS assessments.
NSFOCUS Technologies
Beijing, China
NSFOCUS is a leading Chinese cybersecurity firm offering ISO 27001, MLPS, and PCI DSS assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
PricewaterhouseCoopers Brazil
Sao Paulo, Brazil
PwC Brazil is PricewaterhouseCoopers' Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for Latin America's largest market.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Aarata LLC
Tokyo, Japan
PwC Aarata (PwC Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's leading corporations across financial services, technology, and manufacturing.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
PwC Canada
Toronto, Canada
PwC Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canada's largest organizations across financial services, technology, energy, and government.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
PwC France
Paris, France
PwC France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, healthcare, and government.
PwC Germany
Frankfurt, Germany
PwC Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises across automotive, manufacturing, technology, and financial services.
PwC India
Mumbai, India
PwC India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and enterprise risk advisory services to India's largest corporations and multinational subsidiaries.
PwC Middle East
Dubai, UAE
PwC Middle East is a Big Four professional services firm providing SOC 2, ISO 27001, NESA, PDPL, and enterprise risk advisory services across the UAE, Saudi Arabia, and the broader Middle East region.
PwC Singapore
Singapore
PwC Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to financial institutions, technology companies, and government agencies in Singapore and the APAC region.
Reply Cyber Security
Turin, Italy
Reply Cyber Security is a European IT consultancy offering ISO 27001, SOC 2, and NIS2 compliance for enterprises.
RSM International
London, United Kingdom
RSM International is the sixth-largest global professional services network, delivering audit, tax, and consulting services across 120+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Samil PricewaterhouseCoopers
Seoul, South Korea
Samil PwC is PricewaterhouseCoopers' South Korean member firm offering SOC 1, SOC 2, ISO 27001, ISMS-P, and compliance audit services for Korean enterprises.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
SGS
Geneva, Switzerland
SGS is the world's largest testing, inspection, and certification company, providing ISO 27001 and management system certifications across 140+ countries.
Sirar by STC
Riyadh, Saudi Arabia
Sirar by STC is Saudi Arabia's leading cybersecurity firm offering ISO 27001, NCA-ECC, and PDPL assessments.
SISA Information Security
Bangalore, India
SISA is India's largest PCI QSA company offering PCI DSS, ISO 27001, and SOC 2 assessments globally.
SK shieldus
Seoul, South Korea
SK shieldus is South Korea's largest cybersecurity firm offering ISO 27001, ISMS-P, and SOC 2 assessments.
Sogeti Cybersecurity
Paris, France
Sogeti Cybersecurity is a Capgemini subsidiary offering enterprise-grade compliance services across Europe.
ST Engineering Cybersecurity
Singapore
ST Engineering Cybersecurity is a leading Singapore firm offering ISO 27001, SOC 2, and MTCS assessments.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TCS Cybersecurity
Mumbai, India
TCS Cybersecurity provides enterprise-grade compliance services across SOC, ISO 27001, PCI DSS, and more.
Tech Mahindra Cybersecurity
Pune, India
Tech Mahindra Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance for enterprises globally.
Telstra Purple (Cybersecurity)
Melbourne, Australia
Telstra Purple is a leading Australian cybersecurity firm offering IRAP, ISO 27001, and SOC 2 assessments.
Trustwave
Chicago, IL
Trustwave is a global cybersecurity firm specializing in PCI DSS, SOC 2, and ISO 27001 assessments.
TUV Rheinland
Cologne, Germany
TUV Rheinland is a world-leading German certification and testing body providing ISO 27001, TISAX, and management system certifications across 60+ countries.
TUV SUD
Munich, Germany
TUV SUD is a leading German testing, inspection, and certification body providing ISO 27001, TISAX, and management system certifications across 50+ countries.
Wavestone
Paris, France
Wavestone is a French management and technology consultancy offering ISO 27001, NIS2, and GDPR compliance.
Wipro Cybersecurity
Bangalore, India
Wipro Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC, and PCI DSS.
24By7Security
Coral Springs, FL
24By7Security is a Coral Springs, FL cybersecurity consultancy and PCI QSA specializing in HIPAA, PCI DSS, SOC 2, and CMMC compliance.
360 Advanced
Nashville, TN
360 Advanced is a US-based compliance audit firm offering SOC 2, PCI DSS, HITRUST, ISO 27001, and HIPAA audits with a focus on technology and healthcare companies.
AARC-360
Atlanta, GA
AARC-360 is a PCAOB-registered Atlanta CPA firm delivering SOC 1, SOC 2, ISO 27001, HIPAA, and PCI DSS assurance and compliance services.
ACIS Professional Center
Bangkok, Thailand
ACIS Professional Center is Thailand's leading cybersecurity firm offering ISO 27001 and PCI DSS assessments.
Advantio
Dublin
Advantio, an Integrity360 company based in Dublin, is a leading European PCI QSA providing PCI DSS, ISO 27001, and SOC 2 assessment services.
Advens
Lille, France
Advens is a French cybersecurity firm offering ISO 27001, HDS, and NIS2 compliance assessments.
AhnLab Cybersecurity
Seongnam, South Korea
AhnLab is South Korea's leading cybersecurity company offering ISO 27001 and ISMS-P assessments.
Aprio
Atlanta, Georgia
Aprio is a top-25 US CPA and advisory firm offering SOC 2, ISO 27001, HITRUST, and cybersecurity assessments with strong technology sector expertise.
Ariente Advisors
Boston, MA
Ariente Advisors offers affordable SOC 2, ISO 27001, and PCI DSS assessments for startups.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
ASGN Cybersecurity
Glen Allen, VA
ASGN Cybersecurity is a boutique US cybersecurity and compliance firm specializing in SOC 2, FedRAMP, CMMC, and HITRUST assessments for government contractors and technology companies.
Assure Professional
Charlotte, NC
Assure Professional, acquired by A-LIGN in 2023, is an audit provider delivering SOC 1, SOC 2, SOC 3, HIPAA, HITRUST, and ISO 27001 assessments.
Astra Security
New Delhi, India
Astra Security is a CERT-IN empanelled, NASSCOM-awarded cybersecurity firm in New Delhi offering automated and manual penetration testing alongside compliance services.
Aujas Cybersecurity
Bangalore, India
Aujas Cybersecurity is a Bangalore-based firm offering ISO 27001, SOC 2, and PCI DSS compliance services.
Avertium
Phoenix, AZ
Avertium is a managed security and compliance firm offering PCI DSS, HIPAA, CMMC, and SOC 2 assessment services from Arizona and Tennessee.
Baker Tilly JFC
Dubai, UAE
Baker Tilly JFC is Baker Tilly International's Middle East member firm offering SOC, ISO 27001, PCI DSS, and compliance audit services across the Gulf region.
BDO Australia
Melbourne, Australia
BDO Australia is a leading mid-market audit and advisory firm providing SOC 2, ISO 27001, Essential Eight, and Privacy Act compliance services to Australian businesses across technology, financial services, and healthcare.
BDO Germany
Hamburg, Germany
BDO Germany is a leading mid-market audit and advisory firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German mid-market companies and the Mittelstand.
BDO India
Mumbai, India
BDO India provides SOC, ISO 27001, and DPDPA compliance audit services.
BDO Japan
Tokyo, Japan
BDO Japan is a mid-market audit and advisory firm providing ISO 27001, SOC 2, APPI, and P-Mark compliance services to mid-market companies and foreign-invested businesses operating in Japan.
BDO Singapore
Singapore
BDO Singapore is a mid-market audit and advisory firm providing SOC 2, ISO 27001, PDPA, and MTCS compliance services to SMEs, mid-market firms, and listed companies in Singapore.