PCI DSS 4.0 Compliance Lead | SOX & GRC Expert

Recruiting in Motion; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Recruiting in Motion is seeking an IT Compliance & Quality Assurance Specialist to lead PCI DSS v4.0 migration efforts and align controls with SOX. Based in Richmond Hill, Ontario, this hybrid role combines governance, risk, and compliance work across cloud and on‑prem environments.

You will own SAQs, coordinate with auditors, track remediation, and drive automation of GRC processes while reporting to IT GRC leadership.

Qualifications

• 3–5 years in information security, risk management, or regulatory compliance with PCI DSS v4.0 experience.
• Strong knowledge of ITGC and ITAC.
• Knowledge of DLP, NAC, cloud security controls, and vendor scanning.
• Familiarity with AWS and governance frameworks (NIST 27001, COBIT, COSO).
• Excellent documentation, reporting, and tracking of controls.

Responsibilities

• Lead migration to PCI DSS v4.0 and SAQ D requirements.
• Test and validate security controls; map to PCI DSS RCM and SOX CSAs.
• Manage audit documentation, vulnerabilities, and remediation with IT teams and auditors.
• Drive GRC automation and update SOPs for PCI DSS design and security worthiness.
• Engage with auditors and leadership; present status and risk metrics.

Skills

PCI DSS

SOX ITGC

DLP

Cloud security

AWS

NIST 27001

COBIT

COSO

ITGC/ITAC

Education

Post-secondary education in CS/IT/Auditing

Job description

Recruiting in Motion is seeking an IT Compliance & Quality Assurance Specialist to lead PCI DSS v4.0 migration efforts and align controls with SOX. Based in Richmond Hill, Ontario, this hybrid role combines governance, risk, and compliance work across cloud and on‑prem environments.

You will own SAQs, coordinate with auditors, track remediation, and drive automation of GRC processes while reporting to IT GRC leadership.