Make an impact as we strengthen our Digital Compliance practice as a Qualified Security Assessor, focused on PCI and digital payment compliance. This diverse team of tech-savvy problem solvers enables clients to take a proactive and prepared approach to prevent cyber crime and capitalize on new technologies and innovations available with cloud solutions. As a team member and subject matter expert, you9ll participate and help drive our business advisory solutions services, advise clients on data security and compliance to help prevent potential security breaches before they occur as well as coach and mentor team members.
Responsibilities- Lead PCI-DSS compliance engagements, including scoping, gap analysis, risk assessments, and reporting using Report on Compliance (ROC) and Self-Assessment Questionnaires (SAQ).
- Participate in business development initiatives for our Business Advisory Services
- Coach and mentor junior resources and help shape the evolution of the PCI practice including incorporation of Artificial Intelligence tools
- Conduct digital compliance and cyber risk assessments, maturity assessments, and vulnerability evaluations across diverse environments.
- Advise clients on cloud security architecture, scope reduction, governance frameworks, and compliance requirements (PCI-DSS, Interac, CIS, NIST) and other industry standards).
- Prepare and present professional reports detailing findings and remediation recommendations to technical and non-technical audiences.
- Collaborate with clients to define payment systems, payment flows, and security controls across multiple channels.
- Contribute to the development of security policies, processes, and technical controls.
- Mentor and assist in the technical development of team members.
- Monitor project timelines and communicate status updates effectively in collaboration with our Project Management team.
Skills and Experience- Degree or diploma in IT, Computer Science, Engineering, or related field.
- 4+ years of experience in cyber security and compliance.
- Experience in business development including preparation of proposals in client relationships
- Candidates must currently hold or have previously held a valid Qualified Security Assessor (QSA) certification that can be transferred to MNP. Consideration will also be given to candidates that possess two active certifications related to technical and audit from list A and B below that could undertake the QSA exam within a maximum of three (3) months.
- Information Security certification (List A) one of CISSP, CISM, ISO Lead Implementer, RISS
- Audit certification (List B) one of ISACA, GIAC, ISO 27001 Lead Auditor, IRCA ISMS Auditor, IIA Certified Internal Auditor (CIA).
- Other relevant certifications in security and risk management are considered an asset.
- Proven ability to lead complex engagements and manage client relationships.
- Knowledge of security concepts: network/application security, encryption, incident response, vulnerability scanning, penetration testing, and cloud security.
- Expertise across multiple operating systems (Windows, Linux, Unix), networking, and cloud platforms (AWS, Azure, GCP, Salesforce, Oracle).
- Strong communication and presentation skills.
MY REWARDS @ MNPWith a focus on high-potential earnings, MNP is proud to offer customized rewards that support our unique culture and a balanced lifestyle to thrive at work and outside of the office. You will be rewarded with generous base pay, vacation time, 4 paid personal days, a group pension plan with 4% matching, voluntary savings products, bonus programs, flexible benefits, mental health resources, exclusive access to perks and discounts, professional development assistance, MNP University, a flexible 9Dress For Your Day9 environment, firm sponsored social events and more
This is a current opportunity with an ideal hiring range of between $95,000 and $120,000k depending on experience and skills.
