Nexity by Towne needed to deliver a major PCI DSS and security programme within a pressured six-month timeframe, while supporting rapid US growth and maintaining BAU technology delivery.
Rapidly scaled Nexity by Towne's team with experienced Business Analysis, Azure/DevSecOps and software development capability, supporting PCI delivery, audit readiness and BAU as priorities evolved.
Helped them turn a complex compliance and technology programme into structured, actionable work, establish security and delivery practices, and accelerate progress without waiting to recruit a permanent team.
Key Services
Nexity by Towne was experiencing rapid growth, driven by a significant expansion of its presence across the United States. At the same time, the business had embarked on a major programme of work towards PCI DSS compliance with a pressured 6-month deadline to be able to pursue some major opportunities.
The existing technology team therefore faced two competing demands: continue supporting a fast-growing business and its day-to-day delivery, while also completing a substantial body of security, compliance and technology work.
PCI touched much more than an audit. It required Nexity by Towne to review its technology environment, establish new security and governance practices, strengthen its development processes and implement technical controls - all while BAU continued.
They needed additional capability quickly. Recruiting each specialist capability individually would take time. The immediate need was to add the right expertise, quickly, while retaining the flexibility to change the shape of the team as the programme developed.
Nexity by Towne's need was immediate. Nodero offered a different model: experienced people who could join their team quickly and provide the capability needed at each stage, without them having to predict every role it would need from the outset.
The engagement began with Business Analysis and DevSecOps capability to help drive the PCI programme and associated technical work. As demands on the internal team increased, Nodero was then able to add experienced software developers to support BAU delivery while also contributing to security-related development work.
This allowed Nexity by Towne to scale the team around the work, rather than slowing its growth programme to build the team first.
The BA resource helped translate PCI requirements into practical work, coordinate activity across technical teams, security stakeholders and the QSA, and establish the policies, procedures and evidence needed to make new controls operational. As Nexity by Towne moved into formal assessment, the role continued into audit support - helping the team respond to auditor requests, locate and present evidence.
DevSecOps capability supported the technical security programme, while Nodero's software developers increased Nexity by Towne's delivery capacity - supporting BAU and helping implement security-related changes without diverting the entire internal development team away from the needs of the growing business.
As priorities changed, Nexity by Towne could draw on different Nodero specialists rather than treating each new capability requirement as a separate recruitment exercise.
Nexity by Towne was able to progress a substantial PCI and security transformation without putting BAU delivery or business growth on hold.
The engagement increased delivery capacity at critical points, provided access to specialist skills quickly, and helped turn PCI requirements into practical processes and technical changes that could become part of Nexity by Towne's normal operations. As the programme moved into formal assessment, Nodero also provided continuity through the audit process, supporting Frog Parking's team in responding to evidence requests and addressing findings.
Most importantly, the partnership gave Nexity by Towne flexibility. As the challenge evolved, Nodero evolved the team with it - providing the right expertise when it was needed while Nexity by Towne continued to grow.
"Nexity by Towne faced the challenge of achieving full PCI compliance within half the usual timeframe. On short notice, Nodero supplied appropriately skilled personnel at critical project stages, ensuring the demanding schedule was met and enabling us to sustain momentum without compromising other workstreams"
Kahu Swanson, CTO at Nexity by Towne
