Senior Security Analyst, PCI DSS

Canadian Tire Bank; Oakville; On-site; CAD 64,000 - 106,000; Full time

Benefits offered by this job

Comprehensive benefits and retirement

Performance incentives

Continuing Education Programs

Other perks to support wellbeing

Career growth opportunities

Product discounts

Job summary

Canadian Tire Bank is seeking a Senior Security Analyst, PCI to drive PCI governance and sustain compliance across IT and business units. The role translates PCI requirements for business and IT to implement effective controls and manages complex, high-impact projects.

With 5–7+ years in information security and PCI experience, you will lead remediation efforts, mentor junior staff, and collaborate with stakeholders to strengthen the organization’s PCI posture.

Qualifications

• 5+ years of experience in Information Security with at least 2 years in PCI compliance.
• Security certifications such as PCI QSA, PCI ISA, CISSP or CISA are an asset.
• University degree or equivalent diploma.

Responsibilities

• Prepare for annual PCI Compliance assessment including gaps closure and evidence collection.
• Participate in annual PCI Compliance assessment and facilitate interviews and evidence gathering.
• Lead with subject matter expertise related to PCI Compliance on projects.
• Assess controls to determine PCI DSS compliance level and provide remediation recommendations.
• Implement processes for sustainment of PCI Compliance and mentor junior staff.

Skills

PCI compliance

Information security

Leadership

Communication

Cross-functional teamwork

Education

University degree or equivalent diploma

Tools

MS Excel

MS Word

PowerPoint

Visio

Job description

The Senior Security Analyst, PCI is part of the PCI Governance team working with IT and the Business to close PCI compliance gaps and sustain compliance on an on-going basis. The analyst serves as a main conduit in translating PCI Compliance requirements into language understood by the Business and IT Competency Centres in order to put appropriate security controls in place. The Senior Security Analyst combines business and technology skills with strong leadership, communication, negotiation, facilitation and presentation skills. Using proven methods and tools, he/she leads the planning, gathering, packaging, validating and managing of requirements - in partnership with Project Managers, Business Stakeholders and IT interfacing groups. The senior security analyst is assigned to large projects that are highly complex, strategic in nature, and have a critical impact on the business.

What you’ll do

• Prepare for annual PCI Compliance assessment including follow-up on gaps closure, assessing controls to meet requirements, collecting documentation and evidence, educating stakeholders, and coordinating timelines
• Participate in annual PCI Compliance assessment helping facilitate interviews, gathering evidence, working with internal departments to close off gaps which can be remediated at time of assessment
• Participate as a team member on projects providing subject matter expertise as it relates to PCI Compliance
• Conduct analysis to assess controls (both existing and in design phase) to determine level of compliance to the PCI DSS standard
• Work with internal departments to provide recommendations and drive solutions to close PCI gaps
• Implement processes for the sustainment of PCI Compliance
• Maintain collaborative working relationships with interfacing groups within IT and the business
• Direct the work of more junior PCI Governance Specialist and mentor him/her on prioritization, interpretation of requirements, evidence gathering, building relationship with interfacing groups, reporting, and participation on projects
• Leads work related to PCI Governance Strategy – improving capabilities of overall team, improving processes, improving templates, and identifying key performance metrics
• External industry knowledge is attained and maintained

What you bring

• 5-7+ years of experience in Information Security, with at least 2 years prior experience working with PCI compliance
• Security certification such as PCI QSA, PCI ISA, CISSP or CISA is an asset
• University degree or equivalent diploma
• Strong technical knowledge of networking, operating systems, databases
• Self starter with the ability to work independently and in cross functional teams
• Experience using MS Excel, Word, PowerPoint and Visio
• Self motivated individual capable of working with minimal supervision
• Experience working with complex, cross-SBU initiatives in medium-large organizations
• Excellent verbal, written and inter-personal communication skills
• Strong analysis, critical thinking and problem solving skills
• Solid presentation skills to provide awareness and understanding of the PCI requirements to business partners and Finance AVP, and to present regarding the Canadian Tire environment to the third party QSA company
• Strong interpersonal and negotiation skills
• Ability to communicate technical information in a non-technical manner
• Ability to multi-task and work on multiple projects at the same time and under tight deadlines
• Ability to deal with ambiguity

We’re always looking for great talent! In addition to competitive pay, we offer:

• Comprehensive benefits and retirement programs
• Performance incentives, Continuing Education Programs
• Other perks to support your well-being
• Career growth opportunities and product discounts
• Broadband

Salary Range: $64,000.00 - $106,000.00

Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.

#LI-AG2 This posting represents an existing vacancy within our organization. We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.

About Us

At Canadian Tire Services Limited/Canadian Tire Bank, it is our mandate to continue to create innovative and rewarding financial solutions for our customers. Our growing suite of products and services showcase the dynamic contributions from our employees and our success is driven by a strong vision, loyal customers, and our ability to build teams that reflect the diverse customers and communities in which we live and work. Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.

Accommodations

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.

We are one of Canada’s most admired and trusted companies. With world-class owned brands and exciting market-leading merchandising strategies, we are continually innovating with purpose: to excite and serve Canadian customers from coast-to-coast. We are connected to communities, big and small, from coast-to-coast, offering products and services that reflect the diverse nature of every one of them. From sports to outdoors, automobiles to homes, we know and understand life in Canada like no other retailer.

We are always on the lookout for curious, creative people who are able to navigate and excel in a rapidly evolving retail environment.

If you’re ready to take on new challenges – be it in digital, IT, marketing, data & analytics, merchandising, or one of the many other roles we have – there is a place for you here.