PCI & IT GRC Compliance Specialist

GFL Environmental Inc.; Vaughan; Sur place; CAD 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health insurance

Wellness program

RRSP matching

Profit sharing

Career growth opportunities

Résumé du poste

GFL Environmental Inc. in Vaughan is seeking an IT Compliance & Quality Assurance Specialist (PCI / GRC) to strengthen our controls across the IT enterprise. You will test, monitor, and improve PCI DSS v4.0 and SOX compliance, collaborating with IT, Security, Finance, and external auditors.

The role emphasizes risk-based remediation, control testing, and program maturation with opportunities to automate GRC processes and influence policy updates. Join Team Green.

Qualifications

• 3–5 years of hands-on information security, risk management, QA, or regulatory compliance experience.
• Education: post-secondary in technology, auditing, or related field.
• Deep knowledge of PCI DSS, SOX ITGC & ITAC, and regulatory frameworks (NIST, COSO, COBIT).
• Strong communication and cross-functional collaboration skills.

Responsabilités

• Test and validate PCI DSS & SOX controls, data flows, and configurations.
• Review audit docs (ROCs/SAQs) and manage remediation actions.
• Map controls to PCI DSS Risk Control Matrix and define KRIs.
• Drive automation across the GRC function and update policies.
• Collaborate with internal teams and external auditors to present status.

Connaissances

PCI DSS expertise

SOX ITGC & ITAC

Frameworks (NIST, COSO, COBIT)

Cloud security

Data protection controls

Project management

Communication skills

ISA designation (historical)

Formation

Post-secondary education in technology, auditing, or related field

Description du poste

GFL Environmental Inc. in Vaughan is seeking an IT Compliance & Quality Assurance Specialist (PCI / GRC) to strengthen our controls across the IT enterprise. You will test, monitor, and improve PCI DSS v4.0 and SOX compliance, collaborating with IT, Security, Finance, and external auditors.

The role emphasizes risk-based remediation, control testing, and program maturation with opportunities to automate GRC processes and influence policy updates. Join Team Green.