Analyst - Cyber Security Compliance

Location: California

Job Summary:

Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders:
Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide.  Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40+ countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year.

For additional information, visit .Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on!
** THE TEAM
** As a member of the Cyber Security Compliance team reporting to the Senior Manager, Governance, Risk and Compliance (GRC), you will play a key role in ensuring the security compliance posture across Ticketmaster and Live Nation Entertainment. You’ll join a team united by a shared mission—to embed compliance and governance practices that go beyond a simple “check-the-box” approach, driving meaningful and sustainable security outcomes.
** THE ROLE
** We are seeking a highly motivated and detail-oriented Cyber Security Analyst to join our Cyber Security Compliance team. This role will focus on conducting PCI Compliance assessments and providing subject matter expertise in security, ensuring the effective implementation, management, and oversight of all related security controls in alignment with organizational and regulatory standards.

This is an exciting time to join our growing team as we expand our scope to include additional cyber security controls and broaden our portfolio of compliance initiatives, further strengthening the organization’s global security posture.
** WHAT THIS ROLE WILL DO
*** Lead Payment Card Industry Data Security Standards (PCI DSS) Assessments as an ISA
* Document assessment findings, provide gap analysis and recommendations for remediation
* Provide advice and guidance to business units in all areas relating to payment security, including PCI DSS (Payment Card Industry Data Security Standards) and security best practices aligned to Cyber Security strategy
* Liaise with external security assessment firms to ensure on-time completion of projects
* Assist in preparing formal presentations of compliance status and issues to business units and management.
* Partner with business units on the creation and collection of evidence in preparation for internal and external assessments
* Lead Quarterly Security Reviews (QSRs) with business teams to ensure applicable PCI DSS controls are being performed and maintained
* Advocate security best practice throughout the business
* Assist in responding to compliance queries from third parties, clients, client reps, legal, advanced product specialists on behalf of the company
** WHAT THIS PERSON WILL BRING - TECHNICAL COMPETENCIES
*** A strong working knowledge of the PCI DSS requirements and accurate reporting
* 1-3 years of experience in PCI compliance programs as a PCI SSC ISA
* General knowledge of IT environments, including but not limited to scope reduction, network devices, technical implementation, and asset management
* Experience in cyber security/compliance/IT assessment projects and processes
* Experience facing technical and security challenges that are difficult and sometimes complex
* Familiarity with best practices around network security, configuration management, system hardening, data retention and disposal, encryption, key management, anti-virus, vulnerability management/scanning/patching, application security, logical and physical security, Software Development Life Cycle/change management procedures/Separation of Duties/Code Reviews, logging and monitoring, file integrity monitoring, intrusion detection, endpoint security, incident…