Senior Analyst - Cyber Security Compliance

Location: California
Job Summary:

Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders:
Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide.  Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40+ countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year.

For additional information, visit .Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on!
** THE ROLE
** We are seeking a highly motivated and detail-oriented Senior Analyst to join our Cyber Security Compliance team. This role will focus on conducting PCI Compliance assessments and providing subject matter expertise in security, ensuring the effective implementation, management, and oversight of all related security controls in alignment with organizational and regulatory standards.

As a member of the Cyber Security Compliance team reporting to the Senior Manager, Governance, Risk and Compliance (GRC), you will play a key role in managing the security compliance posture across Ticketmaster and Live Nation Entertainment. You’ll join a team united by a shared mission—to embed compliance and governance practices that go beyond a simple “check-the-box” approach, driving meaningful and sustainable security outcomes.

This is an exciting time to join our growing team as we expand our scope to include additional cyber security controls and broaden our portfolio of compliance initiatives, further strengthening the organization’s global security posture.
** WHAT THIS ROLE WILL DO
*** Lead Payment Card Industry Data Security Standards (PCI DSS) Assessments as an ISA
* Document assessment findings, provide gap analysis and recommendations for remediation
* Serve as the subject matter expert in the development, implementation, and maintenance of information related to all aspects of compliance
* Track the status of known Cyber Security risks and work with appropriate teams to promote remediation of known exposures
* Liaise with external security assessment firms to ensure on-time completion of projects
* Create and collect evidence from business teams in preparation for internal and external assessments
* Assist in implementing risk mitigation strategies for security issues using the NIST framework(s)
* Lead Quarterly Security Reviews (QSRs) with business teams to ensure applicable PCI DSS controls are being performed and maintained
* Advocate security best practice throughout the business
* Respond to compliance queries from third parties, clients, client reps, legal, advanced product specialists on behalf of the company
** WHAT THIS PERSON WILL BRING - TECHNICAL COMPETENCIES
*** 3-5 years of experience managing PCI compliance programs as a PCI SSC ISA or QSA
* 3-5 years of proven experience in regulatory compliance, IT audit, Cyber Security, IT Operations
* Knowledge and experience in reducing PCI Assessment Scope
* Strong working knowledge of the PCI DSS requirements and the importance of accurate reporting
* Experience managing cyber security/compliance/IT assessment projects and processes, working independently with limited supervision
* Experience facing technical and security challenges that are difficult and sometimes complex
* Familiarity with best practices around network security, configuration management, system hardening, data retention and disposal, encryption, key management, anti-virus, vulnerability management/scanning/patching, application security, logical and physical security, SDLC/change management procedures/SOD/Code Reviews, logging and monitoring, file integrity monitoring, intrusion detection, endpoint…