Qualified Security Assessor (PCI-DSS)

MNP; Toronto; On-site; CAD 95,000 - 120,000; Full time

Benefits offered by this job

Generous base pay

Vacation time

4 paid personal days

Group pension plan 4% matching

Bonus programs

Flexible benefits

Mental health resources

MNP University

Dress For Your Day environment

Social events

Job summary

MNP is seeking a Qualified Security Assessor to strengthen our Digital Compliance practice in Canada. You will lead PCI-DSS engagements, advise clients on data security and compliance, and mentor staff to advance the PCI practice.

This role focuses on cloud security, risk assessments, and cross‑functional collaboration across advisory services. You will work with a collaborative team committed to proactive security, growth, and delivering impactful solutions for clients in a consulting

Qualifications

• 4+ years of experience in cyber security and compliance.
• Valid QSA certification held or transferable to MNP.
• Information Security certifications (List A): CISSP, CISM, ISO Lead Implementer, RISS.
• Audit certifications (List B): ISACA, GIAC, ISO 27001 Lead Auditor, IRCA ISMS Auditor, IIA CIA.
• Proven ability to lead complex engagements and manage client relationships.

Responsibilities

• Lead PCI-DSS compliance engagements, including scoping, gap analysis, risk assessments, and reporting using ROC and SAQ.
• Participate in business development initiatives for our Business Advisory Services
• Coach and mentor junior resources and help shape the PCI practice including AI tools
• Conduct digital compliance and cyber risk assessments, maturity assessments, and vulnerability evaluations across diverse environments.
• Advise clients on cloud security architecture, scope reduction, governance frameworks, and compliance requirements (PCI-DSS, Interac, CIS, NIST).
• Prepare and present professional reports detailing findings and remediation recommendations to technical and non-technical audiences.
• Collaborate with clients to define payment systems, payment flows, and security controls across multiple channels.
• Contribute to the development of security policies, processes, and technical controls.
• Mentor and assist in the technical development of team members.
• Monitor project timelines and communicate status updates effectively in collaboration with our Project Management team.

Skills

QSA certification

Cyber security

Security concepts

Cloud platforms

Network security

Windows/Linux/Unix

Strong communication

Education

Degree or diploma in IT/CS/Engineering

Job description

What do you think of when you hear the name MNP? Most likely tax and accounting, but as one of Canada’s largest consulting organizations, we’re so much more! We’re also serious about technology.

Make an impact as we strengthen our Digital Compliance practice as a Qualified Security Assessor, focused on PCI and digital payment compliance. This diverse team of tech-savvy problem solvers enables clients to take a proactive and prepared approach to prevent cyber crime and capitalize on new technologies and innovations available with cloud solutions. As a team member and subject matter expert, you’ll participate and help drive our business advisory solutions services, advise clients on data security and compliance to help prevent potential security breaches before they occur as well as coach and mentor team members.

At MNP, you will work alongside a collaborative team of creative thinkers and problem-solvers. You will gain hands‑on experience, tackle meaningful challenges, and grow your skills in an environment where your voice is valued, and your development is a priority. Your ability to coach and mentor resources will allow you to shape the evolution of the PCI practice. If you are ready to accelerate your career and make a lasting impact, this is where your journey begins.

Responsibilities

• Lead PCI-DSS compliance engagements, including scoping, gap analysis, risk assessments, and reporting using Report on Compliance (ROC) and Self-Assessment Questionnaires (SAQ).
• Participate in business development initiatives for our Business Advisory Services
• Coach and mentor junior resources and help shape the evolution of the PCI practice including incorporation of Artificial Intelligence tools
• Conduct digital compliance and cyber risk assessments, maturity assessments, and vulnerability evaluations across diverse environments.
• Advise clients on cloud security architecture, scope reduction, governance frameworks, and compliance requirements (PCI-DSS, Interac, CIS, NIST) and other industry standards).
• Prepare and present professional reports detailing findings and remediation recommendations to technical and non-technical audiences.
• Collaborate with clients to define payment systems, payment flows, and security controls across multiple channels.
• Contribute to the development of security policies, processes, and technical controls.
• Mentor and assist in the technical development of team members.
• Monitor project timelines and communicate status updates effectively in collaboration with our Project Management team.

Skills And Experience

• Degree or diploma in IT, Computer Science, Engineering, or related field.
• 4+ years of experience in cyber security and compliance.
• Experience in business development including preparation of proposals in client relationships
• Candidates must currently hold or have previously held a valid Qualified Security Assessor (QSA) certification that can be transferred to MNP. Consideration will also be given to candidates that possess two active certifications related to technical and audit from list A and B below that could undertake the QSA exam within a maximum of three (3) months.
• Information Security certification (List A) one of CISSP, CISM, ISO Lead Implementer, RISS
• Audit certification (List B) one of ISACA, GIAC, ISO 27001 Lead Auditor, IRCA ISMS Auditor, IIA Certified Internal Auditor (CIA).
• Other relevant certifications in security and risk management are considered an asset.
• Proven ability to lead complex engagements and manage client relationships.
• Knowledge of security concepts: network/application security, encryption, incident response, vulnerability scanning, penetration testing, and cloud security.
• Expertise across multiple operating systems (Windows, Linux, Unix), networking, and cloud platforms (AWS, Azure, GCP, Salesforce, Oracle).
• Strong communication and presentation skills.

MY REWARDS @ MNP

With a focus on high-potential earnings, MNP is proud to offer customized rewards that support our unique culture and a balanced lifestyle to thrive at work and outside of the office. You will be rewarded with generous base pay, vacation time, 4 paid personal days, a group pension plan with 4% matching, voluntary savings products, bonus programs, flexible benefits, mental health resources, exclusive access to perks and discounts, professional development assistance, MNP University, a flexible ‘Dress For Your Day’ environment, firm sponsored social events and more

This is a current opportunity with an ideal hiring range of between $95,000 and $120,000k depending on experience and skills.

Diversity@MNP

We embrace diversity as a core value and celebrate our differences. We believe each team member contributes unique gifts and amplifying their potential makes our business stronger. We encourage people with disabilities to apply!