PCI Quality Assurance Analyst

GFL Environmental; Vaughan; On-site; CAD 70,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Wellness program

RRSP matching

Career growth

Job summary

GFL Environmental Inc. in Vaughan seeks an IT Compliance & Quality Assurance Specialist (PCI / GRC) to strengthen our PCI DSS and SOX controls. You will work with IT, Security, Finance, and external auditors to identify gaps, manage remediation, and safeguard cardholder data across the IT landscape.

The role emphasizes cross-functional collaboration, process maturation, and automation within the GRC function, reporting to the IT GRC Manager. 3–5 years of relevant experience is desired.

Qualifications

• 3–5 years in information security, risk management, or regulatory compliance.
• Experience with PCI DSS and SOX IT controls.
• Familiarity with NIST, COSO, COBIT frameworks.

Responsibilities

• Test and validate PCI DSS controls and SOX IT controls against requirements.
• Review audit documentation, manage remediation findings, verify corrective actions.
• Map PCI risk controls and integrate PCI requirements into GRC processes.
• Drive automation and policy updates within the IT compliance program.
• Collaborate with internal teams and external auditors to report status.

Skills

PCI DSS

GRC

SOX

Regulatory compliance

Education

Post-secondary education in technology or related field

Job description

Ready to elevate your career? GFL is expanding! We are officially hunting for our next IT Compliance & Quality Assurance Specialist (PCI / GRC) in Vaughan—someone ready to bring fresh ideas and grow alongside a dynamic team.

About Us

GFL is one of the largest diversified environmental services companies in North America, providing comprehensive solid waste management services from its platform of facilities throughout Canada and 18 U.S. states. Recognized by our signature fleet of bright green trucks and equipment, we offer a wide range of environmental and industrial services to businesses, communities and households, providing a consolidated and sophisticated approach to meeting our customers’ needs. One of the keys to our success lies in the diversity of our services and our ability to deliver robust integrated solutions, all from a single efficient company. We believe that, by providing safe, accessible and cost-effective solutions, we encourage greater environmental responsibility and allow our customers and the communities we serve to be Green for Life.

The Role

We are looking for a talented IT Compliance & Quality Assurance Specialist to join our team. In this role, you will play a crucial role in building compliance across the IT enterprise by monitoring, testing, and evaluating internal controls and security reports to ensure alignment with PCI DSS v4.0 and SOX requirements. You will work closely with IT, Security, Product, Finance, and external audit teams to identify non‑compliance areas, manage remediation plans, and safeguard sensitive cardholder data across GFL's IT platform. The role reports to the Information Technology GRC Manager.

Key Responsibilities

• PCI DSS & SOX Control Testing: Test and validate security controls, network diagrams, data flows, and system configurations against PCI DSS v4.0 requirements while balancing SOX Control Self‑Assessments.
• Audit & Remediation Management: Review ROCs/SAQs, manage audit documentation, track identified vulnerabilities or non‑compliance findings, and collaborate with IT teams to verify corrective actions.
• Risk & GRC Integration: Map general controls to the PCI DSS Risk Control Matrix (RCM), catalog in‑scope environments, define Key Risk Indicators (KRIs), and integrate PCI requirements into the IT Compliance Control Self‑Assessment process.
• Program Maturation & Automation: Drive automation across the GRC function, update compliance policies and SOPs, and assess new IT projects during planning phases for PCI DSS design and worthiness.
• Stakeholder & Auditor Collaboration: Partner with internal teams and external auditors through assessments, presenting compliance status, metrics, and QA findings confidently to management and leadership.

What We’re Looking For

Experience

3–5 years of hands‑on experience in information security, risk management, quality assurance, or regulatory compliance within a fast‑paced environment.

Education

Post‑secondary education, preferably in technology, auditing, or a related field.

Technical Skills

Deep knowledge of PCI DSS (including SAQ requirements for Level 2+ merchants), SOX IT General & Application controls, regulatory frameworks (NIST, COSO, COBIT), cloud computing security, network/data protection controls (NAC, DLP), and API/scanning mechanisms (AVS). Held an Internal Security Assessor (ISA) designation at one point in time.

Soft Skills

Excellent written and verbal communication skills with the ability to convey complex technical topics to senior leaders, strong project management skills, and the ability to collaborate across technical and non‑technical teams.

Bonus Points

Industry credentials such as CISA, CISSP, CISM, AAIA, or PCIP; experience in the Tech Sector; familiarity with data privacy regulations (GDPR, PIPEDA).

What We Offer

Why join us? We believe in taking care of our team. Here is a snapshot of our total rewards you can expect:

• Health: Comprehensive medical, dental, and vision insurance.
• Wellness: Employee Assistance Program, life insurance, and paid time‑off.
• Financial: RRSP matching, profit sharing and competitive wages.
• Culture: Growth opportunities and continuous learning opportunities.

Join us and become part of “Team Green” at GFL Environmental, where your skills and dedication will be valued and rewarded.

GFL is committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic.

If you are interested in applying for employment and need special assistance or an accommodation to apply for a posted position, please contact [e-mail]

Please note that GFL does not provide visa sponsorship for this position. Valid work authorization in the country where the job is located is required.

Successful candidates will be required to provide valid documentation confirming their eligibility to work in the country where the job is located prior to their start date.

This hiring process may utilize machine‑based systems to assist in screening and assessing applicants. Final selection decisions are made by our recruitment team.

Current GFL Employees

If you are an existing GFL employee and would like to search and apply to current job openings, please visit the internal GFL Jobs Hub.

At the heart of GFL lies our greatest asset—our people. So, we’re glad you landed here! We believe in great careers, making a positive impact on the environment and supporting our people with their life ambitions. We aspire to create the right jobs in a way that brings you along with us. At GFL, growth isn’t just for our business—it’s for our people. Because we see the potential in all our employees to do whatever it is they set their mind to, and we’re proud to support them in that journey. We consider our employees’ personal goals, helping them create the career, and life, that they desire—whether it’s advancing in their job, learning new skills, forming lasting relationships, or mentoring others, while having time to pursue other life ambitions. With safety and sustainability at the core of what we do, we all come together to form “Team Green”—united by our shared purpose to provide environmental solutions that enable our customers and the communities we serve to be Green For Life. We’re proud to say that working for GFL is more than a job. It’s an opportunity to make a difference and grow tremendously along the way. Regardless of the work we’re doing today, we’ve got our sights set on the big picture—notjust tomorrow,but for life. GFL empowers those looking for growth in their career and lives, whether that's on our FieldOperations teams or Professional Services teams. Field Operations – OurField positions offer candidates across North America the potential for limitless growth and skill expansion as the front line of our organization, making them central to our company's vision of creating cleaner and more sustainable communities. Professional Services – Our Corporate positions located in key North American offices grow candidates to form strong client relations, manage key programs and accounts, and ensure our Field teams are operating at maximum efficiency.