Senior CPO & Treasury Operations Analyst

Banner Health•Scottsdale, AZ

2d•$31 - $51•Remote

About The Position

This position supports the Central Payment Office (“CPO”) to ensure that compliance standards and operational requirements and goals are met. This position will handle internal compliance efforts, identify and assess risks, and work with internal stakeholders to appropriately document and test payment compliance.

Requirements

Requires a Bachelor's Degree in Information Technology, Computer Information Systems, or equivalent experience.
Four to five years of related experience including knowledge, skills and abilities in treasury functions, payment programs, financial analysis, compliance trends and regulations, and hands-on payment compliance solution assessments and quality assurance.
Payment Card Industry Professional (PCIP) certification within 12 months of hire date.
Knowledge of governance frameworks, including but not limited to: ISO 27001, NIST CSF, COBIT, ITIL.

Nice To Haves

Certified Internal Auditor (CIA), Master of Business Administration (MBA) or equivalent preferred.
Additional related education and/or experience preferred.
Two years’ experience with PCI
Will have a PCIP certification or meet the qualifications and obtain one within 6 months of onboarding
Understanding of “Merchant Services” is a plus
Experience in CRMs

Responsibilities

Develop and maintain processes and controls to manage and assess system-wide payment compliance. This includes staying knowledgeable on current industry processes, in-scope payment compliance requirements and assessment techniques in developing and maintaining databases for reconciling, recording and reporting information to Treasury leadership and stakeholders.
Conduct site assessments for all locations that accept payments. This includes, but is not limited to, travel to one western region area for site assessments annually. Site assessments include inspection of payment equipment for tampering, fraudulent replacement, and skimming devices, inventory verification, education, etc.
Document assessment results and provide to internal stakeholders and others, as needed, to ensure all pertinent parties are aware of findings where corrective action(s) or improvements are required.
Coordinate and collaborate with assigned business unit contacts to understand their payment acceptance needs, identified issues and successes.
Collaborates closely with stakeholders to understand the future needs for using payment data, then using that information, along with business strategies to formulate a future state process and system design.
Conduct end-to-end PCI DSS compliance system reviews for new and proposed cardholder applications, vendors, and services. Support efforts involving third party Qualified Security Assessors (“QSA”) to validate compliance with all payment standards. Monitor corrective actions and process improvement plans.
Coordinate annual attestation of compliance (AoC) submissions and quarterly vulnerability scans or periodic penetration tests, if applicable. Document findings, develop remediation plans, and tracking/reporting.
Promote the use of technology during assessments to ensure efficiency and effectiveness. Ability to work independently and as a team with minimal oversight to identify and establish scope and parameters of required analysis in order to define outcome criteria and deliver measurable actions for continuous monitoring and projects.
Responsibilities are system-wide and require maintained knowledge of Treasury functions. This position involves complex problems. Internal stakeholders include all levels of management. External stakeholders including but not limited to QSA, PCI vendors, consultants, advisors, trustees, custodians, etc. to ensure accuracy and timeliness of information.