Senior Systems Analyst, Compliance Oversight

MX Career Site; Toronto; On-site; CAD 90,000 - 115,000; Full time

Job summary

Metrolinx is hiring a PCI Senior Systems Analyst to support PCI compliance oversight within the PRESTO Compliance Oversight team. You will guide PCI-DSS adherence, coordinate annual audits, and help remediate findings to protect cardholder data across the PRESTO system.

The role requires a degree in computer science or related field, plus PCI-related certifications (PCIP/CISSP assets). Collaboration with vendors and internal teams is essential.

Qualifications

• Degree in Computer Science or related discipline.
• Experience in development and support of PCI and code certification programs.
• PCIP certification is a plus; CISSP is an asset.

Responsibilities

• Provide technical oversight for PCI-DSS compliance.
• Coordinate PCI compliance audits and reporting with the team.
• Remediate PCI audit findings within defined timelines.
• Conduct gap analyses against PCI DSS standards.
• Advise on PCI-DSS policies and procedures.
• Review contracts for PCI related considerations.
• Monitor PCI compliance and testing with vendors.

Skills

PCI-DSS

Compliance

Governance

Education

Degree in Computer Science or related discipline

PCIP certification

CISSP certification

Job description

Metrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express, as well as the PRESTO fare payment system. We are also building new and improved rapid transit, including GO Expansion, Light Rail Transit routes, and major expansions to Toronto’s subway system, to get people where they need to go, better, faster and easier. Metrolinx is an agency of the Government of Ontario.

At Metrolinx, equity, diversity and inclusion are essential to living our values of serving with passion, thinking forward and playing as a team.

PRESTO is an electronic transit fare payment system in the Greater Toronto, Hamilton and Ottawa areas that eliminates the need for tickets, passes and cash. PRESTO serves more than 5 million customers across 11 transit agencies and processes over $2.5 billion in fares through 67 million boardings per month (pre-pandemic). Today, PRESTO offers one of the most globally advanced fare payment systems in the world having delivered new ways to pay for customers, including real time PRESTO Contactless with credit and Interac debit and PRESTO in Mobile Wallet across its transit agency clients, including the Toronto Transit Commission (TTC). Enhancing the customer experience through continuous improvement while working with our transit agency clients to support their needs, and maintaining a system that performs exceptionally, continue to drive PRESTO toward making transit better for all.

Our PRESTO (Payments) office is hiring a PCI Senior Systems Analyst, in the Compliance Oversight team, to support PCI Compliance with technical oversight, along with advisory to the PRESTO Scheme Certification assessment program, to meet internal and external client, partner and vendor needs.

Contract length: 13 months

What will I be doing?

• Leverages subject matter expertise to provide technical oversight and guidance for full compliance with Payment Card Industry Data Security Standards (PCI-DSS) - that aim to protect cardholder data during payment card transactions.

• Drives the coordination of PCI compliance annual Audit and reporting as appropriate in conjunction with Senior Compliance Analyst.
• Drives Remediation of PCI Audit findings / recommendations as per defined timelines
• Conducts Compliance Impact Assessment/Threat Risk Assessment against multiple projects/initiatives/third party engagements.
• Conducts internal and external Gap Assessment against PCI DSS standards/schedules/technical controls to identify gaps in compliance activities and make recommendations.
• Provides advisory to internal / external stakeholders on policies and procedures related to PCI-DSS compliance in conjunction with Senior Compliance Analyst.
• Reviews contracts and RFP documentation for PCI related considerations.
• Analyzes and documents technical Business Processes and Information Flows /Cardholder Dataflows.
• Provides technical recommendations to mitigate risks and improve compliance operations and streamline processes to safeguard payment card information and support the integrity of the PRESTO fare collection system.
• Provides technical advisory and back up to support the vendor/client testing of all interface components for PRESTO Scheme Governance at all stages of the Systems Development Life Cycle (SDLC). This includes, but not limited to, testing requirement and design, enhancements, and modifications, training and support as well as providing authoritative advice and recommendations for remedying risk and problems.
• Provides guidance on test strategies, plans, test scenarios, test scripts and execution of certification test for the application of technology in partnership with business leaders.
• Works with other team members to monitor PCI Compliance, and Certification testing, against system requirements to meet performance goals.
• Reviews technical and administrative procedures are in place, training is provided, and maintenance and support arrangements are made to ensure a smooth transition into production from PCI Compliance, Certification testing, perspective in conjunction with Senior Compliance Analyst.
• Monitors and tracks project progress and oversees vendor activities.
• Formulates and prepares project justifications in terms of the proposed scope, budget and schedule as appropriate.

What Skills and Qualifications Do I Need?

• Completion of a degree in Computer Science or a related discipline – or a combination of education, training and experience deemed equivalent.
• Demonstrated years’ experience in the development and support of complex technology, PCI, and preferably code certification programs or systems that meet business needs. PCIP certification is a plus.

• Certification in CISSP is considered as an asset.

Accommodation:

Metrolinx is an equal opportunity employer and committed to a diverse and inclusive workforce. We are also committed to offering reasonable accommodation to job applicants in accordance with applicable legislation. If you require assistance or an accommodation at any point during the hiring process, please contact us at: 416-202-5601 or email [e-mail].

All applicants must be legally entitled to work in Canada. Please be advised that a Criminal Record Check may be required of the successful candidate.

Should it be determined that any background information provided is misleading, inaccurate or incorrect, Metrolinx reserves the right to discontinue with the consideration of your application.

WE ARE AN EQUITABLE AND INCLUSIVE EMPLOYER.

#LI-MM3