The Senior Security Analyst, PCI is part of the PCI Governance team working with IT and the Business to close PCI compliance gaps and sustain compliance on an on-going basis. The analyst serves as a main conduit in translating PCI Compliance requirements into language understood by the Business and IT Competency Centres in order to put appropriate security controls in place.The Senior Security Analyst combines business and technology skills with solid leadership, communication, negotiation, facilitation and presentation skills. Using proven methods and tools, he/she leads the planning, gathering, packaging, validating and managing of requirements - in partnership with Project Managers, Business Stakeholders and IT interfacing groups. The senior security analyst is assigned to large projects that are highly complex, strategic in nature, and have a critical impact on the business.What you'll doPrepare for annual PCI Compliance assessment including follow-up on gaps closure, assessing controls to meet requirements, collecting documentation and evidence, educating stakeholders, and coordinating timelinesParticipate in annual PCI Compliance assessment helping facilitate interviews, gathering evidence, working with internal departments to close off gaps which can be remediated at time of assessmentParticipate as a team member on projects providing subject matter expertise as it relates to PCI ComplianceConduct analysis to assess controls (both existing and in design phase)



to determine level of compliance to the PCI DSS standardWork with internal departments to provide recommendations and drive solutions to close PCI gapsImplement processes for the sustainment of PCI ComplianceMaintain collaborative working relationships with interfacing groups within IT and the businessDirect the work of more junior PCI Governance Specialist and mentor him/her on prioritization, interpretation of requirements, evidence gathering, building relationship with interfacing groups, reporting, and participation on projectsLeads work related to PCI Governance Strategy – improving capabilities of overall team, improving processes, improving templates, and identifying key performance metricsExternal industry knowledge is attained and maintainedWhat you bring5-7+ years of experience in Information Security, with at least2 years prior experience working with PCI complianceSecurity certification such as PCI QSA, PCI ISA, CISSP or CISA is an assetUniversity degree or equivalent diplomaStrong technical knowledge of networking, operating systems, databasesSelf starter with the ability to work independently and in cross functional teamsExperience using MS Excel, Word, PowerPoint and VisioSelf motivated individual capable of working with minimal supervisionExperience working with complex, cross-SBU initiatives in medium-large organizationsExcellent verbal,



written and inter-personal communication skillsStrong analysis, critical thinking and problem solving skillsSolid presentation skills to provide awareness and understanding of the PCI requirements to business partners and Finance AVP, and to present regarding the Canadian Tire environment to the third party QSA companyStrong interpersonal and negotiation skillsAbility to communicate technical information in a non-technical mannerAbility to multi-task and work on multiple projects at the same time and under tight deadlinesAbility to deal with ambiguityWe're always looking for great talent! In addition to competitive pay, we offer:Comprehensive benefits and retirement programsPerformance incentives, Continuing Education ProgramsOther perks to support your well-beingCareer growth opportunities and product discountsBroadband Salary Range: $64,000.00 - $106,000.00Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role. #LI-AG2This posting represents an existing vacancy within our organization.We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.About UsAt Canadian Tire Services Limited/Canadian Tire

📌 Senior Security Analyst, Pci Dss (Oakville)
🏢 Canadian Tire
📍 Oakville