IT Risk and Compliance Consultant

Job Description : This position will manage and participate in day-to-day activities associated with achievement of the Tenerity PCI compliance program. They will coordinate, plan and execute deliverables for PCI compliance requirements to meet or exceed each requirement. Role will encompass processes and technology across the organization in all domains of information security and control with the need to ensure evolving requirements are proactively anticipated and planned against. Will interface with Internal Stakeholders and Sr. Management across the organization as well as produce concise reporting of findings including resolution of gap / remediation activities. This role ensures adherence to rigorous security standards while strengthening defences across a complex multinational environment.

Responsibilities :

• Manage end to end PCI DSS compliance lifecycle, including readiness, scope definition, audit coordination, remediation efforts while working with a QSA
• Ensure all network diagrams, data flows, asset inventories, evidence repositories and compliance evidence tracking evolve with current PCI scope documentation requirements
• Ensure timely response to remediation activity is in place
• Develop risk posture analysis models to trend and report on gap exposure
• Validate security architecture design within compliance environment to ensure appropriate controls to protect Tenerity’s sensitive data
• Provide technical security expertise, including evaluation of processes to validate risk
• Manage the planning, execution and oversight of penetration testing for networks, applications, API’s, cloud environment and internal / external systems
• Maintain archives of process narratives, control descriptions, testing methods and materials
• Communicate self-assessment schedules to IT departments and track status thereof
• Perform role of auditor on self-assessments
• Support audits from our client base or vendor network as needed
• Train project participants in sure of audit techniques and mandated tools
• Meet or exceed published service levels

Qualifications :

Required Skills :

Preferred Skills :