Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III

Site: Mass General Brigham Incorporated

 

Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.

 

 

Job Summary

Summary
The Information Security Analyst III assumes a leadership role within their security team at Mass General Brigham. They are a subject matter expert on their team, solving complex information security problems across the enterprise, potentially creating new processes to do so.

The Information Security Analyst III works with MGB employees across the enterprise, as well as external vendors and stakeholders to solve broad information security challenges. They are an active participant in projects to drive security improvements across MGB, and mentor junior and mid-level team members across the Information Security team.

The Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III serves as the lead of Mass General Brigham’s PCI DSS compliance program within Digital Information Security. The incumbent will be a subject matter expert in Payment Card Industry Standards, related technical infrastructure, and audit compliance. They will be responsible for leading Mass General Brigham up to the next level of PCI Compliance as an organization that processes payment card data.
This role is responsible for assessing if MGB’s information assets are protected in accordance with all PCI-DSS policies, controls, industry standards, and frameworks. They will work to develop, implement, and maintain a comprehensive information compliance program that encompasses all aspects of the PCI compliance management lifecycle—including scoping, control validation, evidence collection, remediation tracking, and annual third-party assessments.
The PCI Information Security Analyst III will act as a strategic partner to internal stakeholders and external assessors, ensuring that cardholder data is properly secured, regulatory obligations are met, and enterprise risk is minimized.


Essential Functions
-Acts as a subject matter expert leader within the team, guiding and mentoring junior and mid-level teammates.
-Drives innovation by researching and proposing improved security solutions and technologies within their domain.
-Solves complex business problems, including system-wide issues and critical incidents by applying technical and security subject matter expertise in support of business goals.
-Drives cross-functional collaboration with vendors, partners and stakeholders to maximize the effectiveness of our solutions.

 

Qualifications

Education
Associate's Degree Related Field of Study required or Bachelor's Degree Related Field of Study required

Can this role accept experience in lieu of a degree?
Yes

Experience
Relevant experience 5-7 years required

Knowledge, Skills and Abilities
- Expertise in cybersecurity concepts within their domain.
- Strong understanding of cybersecurity concepts outside of specific individual domain.
- Expertise with the tools and solutions supported by the team.
- An ability to apply original and innovative thinking to produce new ideas.
- Strong leadership, communication and project management skills.
- Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

 

Additional Job Details (if applicable)

-M-F Eastern Business Hours required

-Hybrid onsite Flexible working model required weekly includes onsite in office (number of days weekly can vary, must be flexible for business needs)

-1-3 onsite days per week

-Remote working days require stable, secure, quiet, compliant working station

 

Remote Type

Hybrid

 

Work Location

399 Revolution Drive

 

Scheduled Weekly Hours

40

 

Employee Type

Regular

 

Work Shift

Day (United States of America)

 

Pay Range

$92,102.40 - $134,056.00/Annual

 

Grade

7

 

At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experienc