Key Notes
IT security or payment-processing experience is required for this Salfords-listed compliance position within Cubic Transportation Systems. You will assess transaction-processing controls and coordinate audits covering PCI DSS, ISO 27001 and SOC requirements. Applicants must live within commuting distance of CTS offices and be able to travel periodically within the region.
What You'll Work On
- Lead information-security control reviews and audit coordination, assessing transport transaction-processing solutions against PCI DSS, ISO 27001 and relevant SOC requirements.
- Record compliance gaps and remediation plans in OneTrust, assigning stakeholder actions and escalating unresolved information-security risks across technology and operations teams.
- Review supplier contracts, SOC reports and technical controls, maintaining audit documentation and advising engineering colleagues on practical responses to identified deficiencies.
Why This Role Matters
- CTS fare and payment-card environments face security-compliance requirements, with control assessments identifying gaps that must be addressed during the audit and remediation process.
- Supplier control reports and contract reviews expose security dependencies beyond CTS’s own infrastructure, giving technology and operations teams evidence for remediation and the reported payment-service risk position.
What They Are Looking For
- Experience: Relevant experience includes IT security/payment processing and critical IT-service environments.
- Qualification: Relevant qualifications include relevant technical degree, or business degree with IT experience.
- Domain: Relevant domain knowledge includes PCI DSS 4, ISO 27001:2022 or SOC audits.
- Preferred: Preferred attributes include relevant security/compliance certification.