TransUnion's Job Applicant Privacy Notice

What We'll Bring:

At TransUnion, we are dedicated to finding ways information can be used to help people make better and smarter decisions. As a trusted provider of global information solutions, our mission is to help people around the world access the opportunities that lead to a higher quality of life, by helping organizations optimize their risk-based decisions and enabling consumers to understand and manage their personal information. Because when people have access to more complete and multidimensional information, they can make more informed decisions and achieve great things.

Every day TransUnion offers our employees the tools and resources they need to find ways information can be used in diverse ways. Whether it is helping businesses better manage risk, providing better insights so a consumer can qualify for his first mortgage or working with law enforcement to make neighborhoods safer, we are improving the quality of life for individuals, families, communities and local economies around the world.

What You'll Bring:

• A University degree in an IT-related field.
• 7 + years of experience working in Information Security in progressive roles and level of responsibility.
• Experience in two or more of the following: cyber security, application security, infrastructure security, business and third-party risk analysis, and making complex business/risk trade-off recommendations.
• PCI ISA, PCIP, CISA, CISM, or CISSP are preferred.
• A solid understanding of project management principles.
• Previous years of experience with PCI assessments and Soc 2 audits
• Pragmatic and results-driven with an innate ability to prioritize.
• Outstanding attention to details coupled with excellent organizational skills and time management skills.
• Exceptional communication skills with an ability to clearly communicate complex information and influence at all levels.
• Strong interpersonal skills. The incumbent will be skilled at developing and maintaining strong relationships across all levels of the organization.
• Leadership qualities to ensure an understanding of the program as well as the importance to the business.
• A high level of confidence and diplomacy.
• A proven ability to work and excel in a fast-paced, deadline-driven environment.
• An ability to direct and lead resources without direct authority.
• Resource must be able to work in Canada.

Impact You'll Make:

Working in a dynamic and fast-paced environment, the incumbent will play a key and strategic role in enabling the business while supporting and demonstrating TransUnion’s compliance with various Information Security policies and standards. The Senior Information Security Consultant will execute on various aspects of the assurance program, ensuring compliance objectives are consistently met. As a subject matter expert for Information Security, this role will provide in-depth consultation and make recommendations that may influence products, services or process. This role is recognized as advanced individual contributor within the organization and will oversee multiple concurrent assignments while working with diverse stakeholders to fulfill the requirements, evaluating and mitigating potential risks.

• As a self-starter, you will work with limited supervision in a complex environment and with latitude for independent judgement. May mentor less experienced associates and display leadership as needed.
• Manage deployment of solutions to mitigate risks and enhance maturity of the Information Security within the region.
• Communication involves providing a professional level detail or consultation on TransUnion products, services or internal information as necessary. Internal contacts are typically IT/Infrastructure SME’s, international peers, and senior management. External contracts are typically TransUnion clients/customers, auditors, vendors or occasionally government agencies.
• Act as a subject matter expert for organizational information security policies and industry standards such as NIST, ISO 27001,SSAE-18 and PCI.
• Perform quarterly PCI assessment with documented evidence as described in the PCI DSS 3.2.1.
• Facilitate end-to-end assessments inclusive of internal and external assessments.
• Establish key performance indicator (KPI) metrics; track and report on performance, provide reporting to senior management on operational performance and status of initiatives.
• Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of Security services being delivered. Ensure Security Operations procedures are documented and followed.
• Develop and maintain partnerships with key partners to ensure alignment and execution of deliverables.
• Promote the program’s objectives in alignment with business needs and priorities.
• Maintain an understanding of emerging information security trends.

Accommodation is available, including for applicants with disabilities, in accordance with applicable laws.

TransUnion's Internal Job Title:

Sr Consultant, Information Security