Information Security Principal

October 26, 2024

The Information Security Principal supporting PCI Compliance will focus on the collection of evidence for PCI compliance, ensuring that all technologies, processes, and procedures align with PCI regulations. This role requires strong technical skills and the ability to work independently with minimal guidance, while also providing understanding of PCI requirements to team members when needed.

What you do

• Technical Knowledge: Develop and Review technical solutions to address regulatory compliance requirements.

• Evidence Collection: Gather, validate, and maintain evidence required for regulatory compliance.

• Compliance Monitoring: Regularly monitor and review compliance status and ensure adherence to regulations.

• Incident Management: Identify, manage, and escalate IT security incidents related to regulatory compliance.

• Documentation: Maintain comprehensive documentation of compliance processes, procedures, and evidence collected.

• Collaboration: Work closely with the PCI Manager and other stakeholders to ensure continuous compliance and improvement of security measures.

Other Jobs You May Be Interested In

What you bring

• Education: Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent work experience.

• Experience:

• 7-10 total years of experience in Information Technology and Information Security,

• 5 years infrastructure engineer and/or cloud developer experience,

• 3-5 years with a focus on PCI compliance

• Technical Skills:

o Strong understanding of PCI regulations and requirements.

o Proficiency in monitoring and processing data related to IT security.

o Deep understanding IT solutions, including:

• Operating Systems:

• Proficiency in Windows, macOS, and Linux operating systems.

• Experience with server operating systems such as Windows Server and various Linux distributions (e.g., Ubuntu, CentOS).

• Networking:

• Understanding of network protocols (TCP/IP, DNS, DHCP, etc.).

• Experience with configuring and managing routers, switches, firewalls, and VPNs.

• Knowledge of network troubleshooting tools and techniques.

• Hardware and Software Troubleshooting:

• Ability to diagnose and resolve hardware and software issues.

• Experience with computer hardware components, peripheral devices, and software applications.

• Security:

• Knowledge of cybersecurity principles and best practices.

• Experience with antivirus software, firewalls, and intrusion detection/prevention systems (IDS/IPS).

• Familiarity with data encryption, access controls, and security compliance standards (e.g., PCI DSS, GDPR).

• Cloud Services:

• Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.

• Knowledge of cloud computing concepts, including IaaS, PaaS, and SaaS.

• Virtualization:

• Proficiency in virtualization technologies such as VMware, Hyper-V, or KVM.

• Experience with creating and managing virtual machines and virtual networks.

• Database Management:

• Knowledge of database systems such as SQL Server, MySQL, PostgreSQL, or Oracle.

• Experience with database administration, backup, and recovery.

• Scripting and Automation:

• Proficiency in scripting languages such as PowerShell, Bash, or Python.

• Experience with automation tools and frameworks.

• System Administration:

• Experience with user account management, group policies, and directory services (e.g., Active Directory).

• Knowledge of system monitoring and performance tuning.

• Backup and Recovery:

• Experience with backup solutions and disaster recovery planning.

• Knowledge of data backup and restoration processes.

o Strong problem-solving skills and ability to work independently.

• Good communication skills, both written and verbal.

Competency Levels:

• Autonomy: Works with little guidance and performs the majority of tasks independently. May mentor junior or new team members.

• Complexity: Carries out a variety of tasks in non-standardized work situations. Solves problems based on practice, precedent, and factual information analysis.

Knowledge:

• Profound knowledge and work experience of processes, procedures, and concepts within IT security.

• Basic knowledge of related topics in the overall context of information security governance.

Certifications:

• Certifications in IT/IS domains strongly preferred:

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Offensive Security Certified Professional (OSCP)

• Certified Cloud Security Professional (CCSP)

• AWS and/or Azure Solutions Architect

• Certified Information Systems Auditor (CISA)

Back to blog

Other Jobs You May Be Interested In

Related Posts

Chat Jobs from Home: Work Remotely as a Chat Agent

Remote Data Entry Clerk – Entry Level In Canada

Remote Data Entry Clerk - Typing - Part Time Entry Level

SAP EWM (Extended Warehouse Management) Consultant 2iSolutions Inc. Canada

Job Opportunity at FedEx: Data Entry Associate [Entry Level/No Experience]

Amazon Customer Service Jobs

Amazon Product Tester and Reviewer – Work Remotely In Canada

Dog walking jobs near me | Markham, ON | Rover