Posted 4 days ago
PCI Quality Assurance Analyst
@ GFL Environmental
Vaughan, Ontario
Overview
GFL Environmental is hiring an IT Compliance & Quality Assurance Specialist (PCI / GRC) in Vaughan to build compliance across its IT enterprise. The role tests controls against PCI DSS v4.0 and SOX, manages remediation with IT and external auditors, and reports to the IT GRC Manager. The posting offers health, wellness, RRSP matching, profit sharing and competitive wages.
Responsibilities:
- Test PCI DSS and SOX controls and configurations
- Review ROCs, SAQs and audit documentation
- Track vulnerabilities and non-compliance findings
- Map controls to the risk control matrix
- Collaborate with IT teams and external auditors
Requirements summary:
- 3 to 5 years in security, risk or compliance
- Deep knowledge of PCI DSS and SOX controls
- Knowledge of NIST, COSO and COBIT
- Strong written and verbal communication
- Post-secondary education in technology or auditing preferred
Source and dates
Employer career site / ATS feed · paradox
- Employer posting date
- 2026-11-03
- First seen by our source
- 2026-11-03
- Source record updated
- 2026-11-03
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Mid level |
| Department | IT |
| Experience | 3+ years |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | ISA |
| Education | College diploma (preferred) |
| Fields of study | technology, auditing |
| Perks mentioned | Generous paid time off, Retirement plan, Performance bonus, Wellness |
Summary and details written by AI from the posting; the employer’s posting is the authority.
GFL Environmental
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
Full company description
GFL Environmental is the only major diversified environmental services company in North America offering services in solid waste management, liquid waste management and soil remediation. Through a strategically located network of facilities across Canada and the United States, GFL’s dedicated, professional team of employees provides local service to more than 4 million households under municipal contracts and to more than 135,000 industrial, commercial and institutional customers. We offer an unparalleled commitment to customer service, reliability and efficiency and maintain an unwavering focus on safety and compliance with environmental and legislative requirements. At GFL, we believe that by providing accessible, cost-effective environmental solutions we will encourage greater environmental responsibility and allow our customers and the communities we serve to be Green For Life. ------------------------------------------------------------------------------------------ GFL Environnement est la seule grande entreprise de services environnementaux diversifiés en Amérique du Nord offrant des services de gestion des déchets solides, de gestion des déchets liquides et d'assainissement des sols. Grâce à un réseau stratégiquement situé au Canada et aux Etats-Unis, l'équipe professionnelle et dévouée d'employés de GFL offre un service local à plus de 4 millions de foyers sous contrat municipal et à plus de 135 000 clients industriels, commerciaux et institutionnels. Nous offrons un engagement inégalé à l'égard du service à la clientèle, de la fiabilité et de l'efficacité, et nous mettons l'accent sur la sécurité et le respect des exigences environnementales et légales. Chez GFL, nous croyons qu'en offrant des solutions environnementales accessibles et rentables, nous encouragerons une plus grande responsabilité environnementale et nous permettrons à nos clients et aux collectivités.
- LinkedIn followers
- 170,621
- People associated on LinkedIn
- 8,102
- Reported office locations
- 100 New Park Place, Vaughan, Ontario L4K 0H9, CA
- Business categories
- Environmental Consulting
- Waste Management
- GreenTech
- Other recorded names
- GFL Environmental Inc.
- Specialties
- Municipal / Residential Waste
- Industrial / Commercial / Construction Waste
- Construction & Demolition Services
- Used Oil Collection
- Hazardous Waste Management
- Excavation Services
- Shoring & Foundations
- Soil Remediation
- Vacuum Truck Services
- Infrastructure Development
- Recycling
- Organics
- Industrial Cleaning
- HAZMAT Emergency Response
- Landfill Disposal & Diversion
- and Environmental Remediation
- Profile identifies a recruitment agency
- No
- Reported total investment
- 5,167,778,866
Currency and observation date were not supplied; this is not a current valuation or a funding round.
GFL Environmental is the only major diversified environmental services company in North America offering services in solid waste management, liquid waste management and soil remediation. Through a strategically located network of facilities across Canada and the United States, GFL’s dedicated, professional team of employees provides local service to more than 4 million households under municipal contracts and to…
| Field | Value |
|---|---|
| Industry | Environmental Services |
| Company size | 10,001+ employees |
| Headquarters | Vaughan, Ontario |
| Organization type | Privately Held |
| Specialties | Municipal / Residential WasteIndustrial / Commercial / Construction WasteConstruction & Demolition ServicesUsed Oil CollectionHazardous Waste ManagementExcavation ServicesShoring & FoundationsSoil RemediationVacuum Truck ServicesInfrastructure Development |
| Open jobs on Jobsy | 580 |
| View page |
Ready to elevate your career? GFL is expanding! We are officially hunting for our next IT Compliance & Quality Assurance Specialist (PCI / GRC) in Vaughan—someone ready to bring fresh ideas and grow alongside a dynamic team.
About Us
GFL is one of the largest diversified environmental services companies in North America, providing comprehensive solid waste management services from its platform of facilities throughout Canada and 18 U.S. states. Recognized by our signature fleet of bright green trucks and equipment, we offer a wide range of environmental and industrial services to businesses, communities and households, providing a consolidated and sophisticated approach to meeting our customers’ needs. One of the keys to our success lies in the diversity of our services and our ability to deliver robust integrated solutions, all from a single efficient company. We believe that, by providing safe, accessible and cost-effective solutions, we encourage greater environmental responsibility and allow our customers and the communities we serve to be Green for Life.
The Role
We are looking for a talented IT Compliance & Quality Assurance Specialist to join our team. In this role, you will play a crucial role in building compliance across the IT enterprise by monitoring, testing, and evaluating internal controls and security reports to ensure alignment with PCI DSS v4.0 and SOX requirements. You will work closely with IT, Security, Product, Finance, and external audit teams to identify non-compliance areas, manage remediation plans, and safeguard sensitive cardholder data across GFL's IT platform. The role reports to the Information Technology GRC Manager.
Key Responsibilities
PCI DSS & SOX Control Testing: Test and validate security controls, network diagrams, data flows, and system configurations against PCI DSS v4.0 requirements while balancing SOX Control Self-Assessments.
Audit & Remediation Management: Review ROCs/SAQs, manage audit documentation, track identified vulnerabilities or non-compliance findings, and collaborate with IT teams to verify corrective actions.
Risk & GRC Integration: Map general controls to the PCI DSS Risk Control Matrix (RCM), catalog in-scope environments, define Key Risk Indicators (KRIs), and integrate PCI requirements into the IT Compliance Control Self-Assessment process.
Program Maturation & Automation: Drive automation across the GRC function, update compliance policies and SOPs, and assess new IT projects during planning phases for PCI DSS design and worthiness.
Stakeholder & Auditor Collaboration: Partner with internal teams and external auditors through assessments, presenting compliance status, metrics, and QA findings confidently to management and leadership.
What We’re Looking For
Experience: 3–5 years of hands-on experience in information security, risk management, quality assurance, or regulatory compliance within a fast-paced environment.
Education: Post-secondary education, preferably in technology, auditing, or a related field.
Technical Skills: Deep knowledge of PCI DSS (including SAQ requirements for Level 2+ merchants), SOX IT General & Application controls, regulatory frameworks (NIST, COSO, COBIT), cloud computing security, network/data protection controls (NAC, DLP), and API/scanning mechanisms (AVS). Held an Internal Security Assessor (ISA) designation at one point in time.
Soft Skills: Excellent written and verbal communication skills with the ability to convey complex technical topics to senior leaders, strong project management skills, and the ability to collaborate across technical and non-technical teams.
Bonus Points: Industry credentials such as CISA, CISSP, CISM, AAIA, or PCIP; experience in the Tech Sector; familiarity with data privacy regulations (GDPR, PIPEDA).
What We Offer
Why join us? We believe in taking care of our team. Here is a snapshot of our total rewards you can expect:
Health: Comprehensive medical, dental, and vision insurance.
Wellness: Employee Assistance Program, life insurance, and paid time-off.
Financial: RRSP matching, profit sharing and competitive wages.
Culture: Growth opportunities and continuous learning opportunities.
Join us and become part of "Team Green" at GFL Environmental, where your skills and dedication will be valued and rewarded. Apply now for this exciting opportunity!
#GFLTalent
Journal
Only you can see this. Kept on this device, and in your account when you sign in.