Join our team - Make it interesting to capture the candidate's attention and interest right away. Highlight what makes your team special. Convey why someone would want to join your team and the team’s function/focus, what they do and their contributions and impact.

We are looking for a highly motivated, experienced PCI professional to join the Assurance and Compliance Team within Corporate Information Security (CIS) organization. Our team is focused on TELUS’ Payment Card Industry (PCI), SOC2 and ISO programs, as well as continuing to help grow TELUS Security’s audit, compliance programs and third party initiatives.

As a member of this team, you will help technical and business teams understand the security requirements that affect them, the importance of compliance and how TELUS can help with this complex endeavor. This is a great opportunity to join a highly motivated, forward-thinking team focused on proactively keeping TELUS’ customers, data and systems secure.

We value strong knowledge of information security controls and principles, and the Payment Card Industry Data Security Standard (PCI DSS).

Our intent is to have you grow with us while maintaining your PCI ISA certification, and other valuable industry security and audit related certifications.

Here’s the impact you’ll make and what we’ll accomplish together - Help candidate connect to a rewarding purpose – ie. the difference the role makes to internal and/or external customers and how does this role fit within TELUS as a whole.

As a Senior Security Consultant you will manage the annual PCI audit including evidence gathering, generation of periodic quarterly reports, reviewing quality assurance and ensuring timely submission of evidence, coordination of audit resource meetings, and other tasks required to successfully complete the audit. You will also have the opportunity to enhance our existing PCI and other compliance programs such as SOC2 and ISO initiatives.

Here’s how - Connect the responsibilities to the impact above. Use active verbs (i.e., Collaborate with, Partner with, Create, Develop, Coordinate, Drive, Support, Influence, Lead, Analyze, etc.) Keep the verb tense consistent in present (collaborate) or present continuous (collaborating) format.

Track, document and work with the impacted teams to address PCI compliance gaps to ensure timely closure
Ensure ASV Scans and Pen testing are conducted quarterly and annually, respectively with all remediation activities being completed within expected timelines
Lead security enhancement projects focused on new or changing PCI compliance requirements and scoped assets
Collaborate with the GRA team to draft policies/procedures that govern the security of PCI with a specific focus on compliance requirements
Familiar with Risk Assessment concepts to facilitate applicable control efficacy that pertain to PCI controls
Educate and build awareness of PCI compliance requirements across TELUS
Continuously improve the PCI compliance program with new information and asset scope control, procedures, or documentation
Coordinate with Third Party Risk management to ensure PCI compliance needs are being addressed and tracked appropriately with third party vendors
Coordinate with Privacy / Legal to ensure the overall compliance landscape is well understood and the program captures a complete view of our PCI compliance needs
Assist with other compliance activities for SOC, ISO and other programs.
Coach and mentor junior team members

You’re the missing piece of the puzzle - Be mindful about realistic expectations. Use no more than 8-10 points that highlight the knowledge, skills, abilities, experience, certification, and education needed to be successful

7 to 10+ years of experience with PCI compliance audits spanning from collecting PCI requirements to evolving and maintaining an already established PCI compliance framework.
Knowledge of information security technology, audit & control measures, monitoring including in-depth knowledge of compliance standards including but not limited to SOX, PCI, CSF and similar IT Compliance and Privacy regulations
Solid knowledge of firewall configuration standards, ruleset reviews, and documentation
Experience with facilitating compliance remediation activities with technical teams
Solid working knowledge of information security concepts, risk assessment and controls.
Excellent project management skills, with the ability to work within deadlines, juggle multiple priorities, design project plans, and regularly provide project updates.
Ability to work independently with little direction and/or supervision.
Superior communication skills with the ability to question, escalate roadblocks early, and interact effectively at multiple levels in the organization.
Keen attention to detail with the ability to correct on the fly and work independently.
Willingness to learn and help build other compliance frameworks

Great-to-haves

Professional certification (CISSP, CRISK, CISA, CISM or similar) is highly desired, with an intention of completing and maintaining the PCI-ISA certification.
Familiarity with other compliance and audit frameworks (SOC, ISO)
Former ISA or QSA experience preferred

TELUS Communications

New Jobs

Senior Cybersecurity Risk Assessor

Cybersecurity PCI Compliance Consultant