QSA’s are hired for two reasons: knowledge and experience. QSAs are largely responsible for client-site data security assessments, gap analysis, remediation services, general PCI consulting and advice. Most engagements last somewhere between two and six months. “Being a PCI assessor is not that cut and dried, and cannot be learned straight by the book,” says Blake Huebner, QSA and PCI team lead at NetSpi, a consulting company based in Minneapolis, MN.”]
Source: https://www.careersinfosecurity.com/how-to-become-qsa-a-2150