Cyber and Information Security Consultant

Our Technology team wakes up every day with one goal in mind - connecting Canadians to the people and things that matter most. Together, we are proud to support 30 million Canadians each month through managing a robust portfolio that champions leading-edge technology. We drive large-scale, complex, and high-visibility technology projects and programs that shape the future of technology in Canada and expand connectivity from coast to coast. Rogers is seeking a Security Compliance Advisor to support the Cyber Security Compliance program. Manager of PCI Compliance, this individual will be responsible for supporting adherence to regulatory compliance requirements, including but not limited to SOC 2, PCI-DSS, and is responsible for managing related compliance activities. Ensure policies and processes are properly designed and controls operating effectively, to meet regulatory requirements. Provide subject matter expertise for SOC 2 and Payment Card Industry Data Security Standard (PCI DSS)
Work with key stakeholders to translate regulatory requirements and standards into policies, processes and controls.
Assess changes to regulatory requirements and standards and determine impact on internal policies, controls and processes. Make recommendations for associated changes to policies, controls and processes, and simplify implementation.
Identify and evaluate technology risks, internal controls to mitigate risks, and related opportunities for continuous control improvement. Facilitate and document risk assessments and communicate key findings.
Evaluate implementation of new technologies / processes and agreements with third-party service providers to ensure continual compliance with regulatory requirements.
Payment Card Industry Data Security Standard (PCI DSS) assessments
Service Organization Controls (SOC 2 Type II & III)
Responding to RFPs about data protection, trust services, our attestations, etc.
Customer Contract reviews and negotiations regarding data protection clauses, related regulations, and compliance commitments.

Undergraduate degree in Information Management, Computer Science, Engineering, or emphasis in technology or related fields.
Experience with information security, IT Control audit, SOC 2 and PCI-DSS are assets.
Experience interpreting industry and regulatory requirements and authoring supporting controls.
Experience with information security related frameworks (NIST, ISO 27001, COSO, Cloud Security Alliance).
Previous experience working with/as PCI QSA is an asset.

CISSP, CISA, CISM, CA, PCIP or similar certification are assets.
Prior audit experience is an asset
Demonstrable understanding of how to network and develop working relationships with various key stakeholders.
Strong business and technical acumen.
Strong analytical, research, writing, and communication skills.
Creates clear and coherent written materials.
Can work independently with minimal supervision and direction.

We believe in investing in our people and helping them reach their potential as valuable members of our team. Competitive salary & annual bonus
Competitive & flexible health and dental benefits, pension plan, RRSP, TFSA, and Stock matching programs.
Enjoy up to 50% off Rogers Services and Blue Jays Tickets, 25% off TSC items, and a 20% discount on all wireless accessories sold in Rogers stores.
Homewood employee & family assistance program
Cognitive Behavioural Therapy (CBT) & Virtual therapy sessions
Our commitment to the environment and diversity:
Work for an organization committed to environmental protection
Strong commitment to diversity and inclusion with employee resource groups supporting equity-deserving groups including groups representing People of Colour, 2SLGBTQIA+, Indigenous Peoples, Persons with Disabilities and Women. To protect our people, brand and assets, a pre-employment background check will be conducted. Schedule: Full time
Shift: Day
Length of Contract: Not Applicable (Regular Position)
Travel Requirements: Criminal Record and Credit Check
Technology & Information Technology
To support career growth, collaboration, and high-performing teams, all Corporate Employees are expected to work onsite. We believe that in-person connection strengthens our culture and drives industry-leading performance.

At Rogers, we believe the key to a strong business, is a diverse workforce where equity and inclusion are core to making everyone feel like they belong. We do this by embracing our diversity, celebrating our different perspectives, and working towards creating environments that empower our people to bring their whole selves to work. We work with our candidates who are experiencing a disability throughout the recruitment process to ensure that they have what they need to be at their best.