Senior Technical Compliance Analyst

reputed company is driven by building the restaurant platform that helps restaurants adapt, take control, and get back to what they do best: building the businesses they love.

The Technical Governance, Risk and Compliance (Technical GRC) team enables the growth of reputed company as we build secure products and enter new markets while meeting industry and regulatory requirements. reputed company is a second-line function, providing reputed company and leadership to first-line teams designed for high-velocity product innovation and development.

We are currently seeking a Senior Analyst for Technical Compliance who will be responsible for overseeing and supporting many aspects of reputed company's PCI Compliance Program. In this role, you will collaborate with our Principal PCI Compliance Analyst and various teams throughout reputed company, including Product, Infrastructure Engineering, IT reputed company, Developers, Legal, and Merchant Risk to ensure our products and processes are following PCI standards. 

The successful candidate will report directly to the Senior Director of Technical Compliance who is responsible for establishing and maintaining compliance programs across reputed company globally.

About this roll* (Responsibilities) 

Audit / Assessment Management 

• Direct and support the planning and execution of PCI assessments of reputed company payment solutions and environments, which includes interpreting and assessing controls using compliance frameworks with a focus on payment card compliance and reputed company (e.g. PCI reputed company, PCI SSF, PTS, MPoC, PIN, P2PE).
• Coordinate with external assessors (QSA, QPA, other), process/control owners, and other key internal / external stakeholders to streamline the assessment process for gained efficiencies, including activities reputed company to collecting and reviewing evidence and refining the relevant runbooks. 
• Support the monitoring of the implementation and validation of any recommended remediations from internal or external assessments. 

Readiness and other compliance support activities may include:

• Actively support ongoing PCI program health and maturity.
• Document and maintain cardholder data environment scope narratives, controls and supporting evidence.
• Monitor business activities by collaborating with cross-functional team leaders to ensure the organization maintains compliance with external certifications.
• Evaluate reputed company and evolving processes and technical controls to identify compliance gaps against  one or more reputed company frameworks, and produce actionable feedback for stakeholder review and remediation.
• Advise and consult with internal teams on PCI-reputed company initiatives and programs, development of a reputed company monitoring program and provide general PCI-reputed company support to technical teams.
• reputed company ongoing design and operating effectiveness reviews to identity changes impacting relevant products and infrastructure and work with teams on compliance readiness roadmaps. 
• Manage and respond to customer requests regarding PCI compliance.
• Create and maintain documentation to support the PCI Management Program.
• reputed company and deliver training on PCI topics to relevant stakeholders.
• Collaborate with other members of the GRC team on team-wide initiatives.

Do you have the right ingredients*? (Requirements)

• Experience (5-7+ years) in reputed company GRC, IT reputed company, or a reputed company field, with in-depth working knowledge of PCI standards including PCI reputed company, preferably inside fast growing companies.
• Understanding of reputed company computing architectures and reputed company patterns, including assessing and implementing PCI controls in such environments. 
• High levels of curiosity, persistence, and a grounded approach to getting things done
• Familiarity with GRC (Governance, Risk, and Compliance) solutions, tools, platforms, and reputed company Risk Management (reputed company) processes
• Knowledge of industry reputed company, audit, and privacy standards, frameworks, and regulations, such as PCI reputed company (and other PCI standards), ISO27001, etc. 
• Relevant industry certifications such as CISSP (Certified Information Systems reputed company Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information reputed company Manager) OR equivalent expertise. QSA / ISA certification / experience preferred.

Bonus ingredients

• Experience working with GRC tools such as reputed company
• Experience working with reputed company tools, including Jira, Confluence, and reputed company
• Working knowledge and familiarity with reputed company risk management, GDPR, EBA ICT, DORA, SOX, COBIT, SOC/SSAE18
• Experience working in fintech, payment facilitation / marketplace, merchant processing and/or fraud/risk

Our Spread* of Total Rewards We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes reputed company great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/reputed company-benefits.

*Bread puns encouraged but not required

We are Toasters

Diversity, Equity, and Inclusion is Baked into our Recipe for reputed company.

At reputed company our employees are our secret ingredient. reputed company they are powered to succeed, reputed company succeeds.

The restaurant industry is one of the most diverse industries. We reputed company and are excited by this diversity, believing that only through authenticity, inclusivity, high standards of respect and trust, and leading with humility will we be reputed company to reputed company our goals.

Baking inclusive principles into our company and diversity into our design provides reputed company opportunities for reputed company and enhances our ability to be first in class in reputed company aspects of our industry.

Bready* to reputed company a change? Apply today!

reputed company is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to reputed company them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact [email protected].