[Hiring] Senior Security Analyst @Canadian Tire Corporation

Role Description

The Senior Security Analyst, PCI is part of the PCI Governance team working with IT and the Business to close PCI compliance gaps and sustain compliance on an ongoing basis. The analyst serves as a main conduit in translating PCI Compliance requirements into language understood by the Business and IT Competency Centres in order to put appropriate security controls in place.

The Senior Security Analyst combines business and technology skills with strong leadership, communication, negotiation, facilitation, and presentation skills. Using proven methods and tools, he/she leads the planning, gathering, packaging, validating, and managing of requirements - in partnership with Project Managers, Business Stakeholders, and IT interfacing groups. The senior security analyst is assigned to large projects that are highly complex, strategic in nature, and have a critical impact on the business.

What you’ll do

• Prepare for annual PCI Compliance assessment including follow-up on gaps closure, assessing controls to meet requirements, collecting documentation and evidence, educating stakeholders, and coordinating timelines.
• Participate in annual PCI Compliance assessment helping facilitate interviews, gathering evidence, working with internal departments to close off gaps which can be remediated at time of assessment.
• Participate as a team member on projects providing subject matter expertise as it relates to PCI Compliance.
• Conduct analysis to assess controls (both existing and in design phase) to determine level of compliance to the PCI DSS standard.
• Work with internal departments to provide recommendations and drive solutions to close PCI gaps.
• Implement processes for the sustainment of PCI Compliance.
• Maintain collaborative working relationships with interfacing groups within IT and the business.
• Direct the work of more junior PCI Governance Specialist and mentor him/her on prioritization, interpretation of requirements, evidence gathering, building relationships with interfacing groups, reporting, and participation on projects.
• Leads work related to PCI Governance Strategy – improving capabilities of overall team, improving processes, improving templates, and identifying key performance metrics.
• External industry knowledge is attained and maintained.

Qualifications

• 5-7+ years of experience in Information Security, with at least 2 years prior experience working with PCI compliance.
• Security certification such as PCI QSA, PCI ISA, CISSP or CISA is an asset.
• University degree or equivalent diploma.
• Strong technical knowledge of networking, operating systems, databases.
• Self-starter with the ability to work independently and in cross-functional teams.
• Experience using MS Excel, Word, PowerPoint, and Visio.
• Self-motivated individual capable of working with minimal supervision.
• Experience working with complex, cross-SBU initiatives in medium-large organizations.
• Excellent verbal, written, and inter-personal communication skills.
• Strong analysis, critical thinking, and problem-solving skills.
• Solid presentation skills to provide awareness and understanding of the PCI requirements to business partners and Finance AVP, and to present regarding the Canadian Tire environment to the third-party QSA company.
• Strong interpersonal and negotiation skills.
• Ability to communicate technical information in a non-technical manner.
• Ability to multi-task and work on multiple projects at the same time and under tight deadlines.
• Ability to deal with ambiguity.

Benefits

• Comprehensive benefits and retirement programs.
• Performance incentives, Continuing Education Programs.
• Other perks to support your well-being.
• Career growth opportunities and product discounts.

Work Location

Remote