Senior Systems Analyst, Compliance Oversight
Metrolinx · Canada ·
- Seniority
- Senior
- Employment
- Full time
- Category
- Business analysis
PRESTO is an electronic transit fare payment system in the Greater Toronto, Hamilton and Ottawa areas that eliminates the need for tickets, passes and cash. PRESTO serves more than 5 million customers across 11 transit agencies and processes over $2.5 billion in fares through 67 million boardings per month (pre-pandemic). Today, PRESTO offers one of the most globally advanced fare payment systems in the world having delivered new ways to pay for customers, including real time PRESTO Contactless with credit and Interac debit and PRESTO in Mobile Wallet across its transit agency clients, including the Toronto Transit Commission (TTC). Enhancing the customer experience through continuous improvement while working with our transit agency clients to support their needs, and maintaining a system that performs exceptionally, continue to drive PRESTO toward making transit better for all.
Our PRESTO (Payments) office is hiring a PCI Senior Systems Analyst, in the Compliance Oversight team, to support PCI Compliance with technical oversight, along with advisory to the PRESTO Scheme Certification assessment program, to meet internal and external client, partner and vendor needs.
Contract length: 13 months
Leverages subject matter expertise to provide technical oversight and guidance for full compliance with Payment Card Industry Data Security Standards (PCI-DSS) - that aim to protect cardholder data during payment card transactions.
- Drives the coordination of PCI compliance annual Audit and reporting as appropriate in conjunction with Senior Compliance Analyst.
- Drives Remediation of PCI Audit findings / recommendations as per defined timelines
- Conducts Compliance Impact Assessment/Threat Risk Assessment against multiple projects/initiatives/third party engagements.
- Conducts internal and external Gap Assessment against PCI DSS standards/schedules/technical controls to identify gaps in compliance activities and make recommendations.
- Provides advisory to internal / external stakeholders on policies and procedures related to PCI-DSS compliance in conjunction with Senior Compliance Analyst.
- Reviews contracts and RFP documentation for PCI related considerations.
- Analyzes and documents technical Business Processes and Information Flows /Cardholder Dataflows.
- Provides technical recommendations to mitigate risks and improve compliance operations and streamline processes to safeguard payment card information and support the integrity of the PRESTO fare collection system.
- Provides technical advisory and back up to support the vendor/client testing of all interface components for PRESTO Scheme Governance at all stages of the Systems Development Life Cycle (SDLC). This includes, but not limited to, testing requirement and design, enhancements, and modifications, training and support as well as providing authoritative advice and recommendations for remedying risk and problems.
- Provides guidance on test strategies, plans, test scenarios, test scripts and execution of certification test for the application of technology in partnership with business leaders.
- Works with other team members to monitor PCI Compliance, and Certification testing, against system requirements to meet performance goals.
- Reviews technical and administrative procedures are in place, training is provided, and maintenance and support arrangements are made to ensure a smooth transition into production from PCI Compliance, Certification testing, perspective in conjunction with Senior Compliance Analyst.
- Monitors and tracks project progress and oversees vendor activities.
- Formulates and prepares project justifications in terms of the proposed scope, budget and schedule as appropriate.
- Completion of a degree in Computer Science or a related discipline – or a combination of education, training and experience deemed equivalent.
- Demonstrated years’ experience in the development and support of complex technology, PCI, and preferably code certification programs or systems that meet business needs. PCIP certification is a plus.
Certification in CISSP is considered as an asset.
Metrolinx is an equal opportunity employer and committed to a diverse and inclusive workforce. We are also committed to offering reasonable accommodation to job applicants in accordance with applicable legislation. If you require assistance or an accommodation at any point during the hiring process, please contact us at: 416-202-5601 or email [email protected].
#LI-MM3