Senior Data Security Analyst III

Brigham and Women's Hospital•Boston, MA

45d•Hybrid

About The Position

Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham. MGB Digital is hiring a vital member of the team, Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III The Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III serves as the lead of Mass General Brigham's PCI DSS compliance program within Digital Information Security. The incumbent will be a subject matter expert in Payment Card Industry Standards, related technical infrastructure, and audit compliance. They will be responsible for leading Mass General Brigham up to the next level of PCI Compliance as an organization that processes payment card data. This role is responsible for assessing if MGB's information assets are protected in accordance with all PCI-DSS policies, controls, industry standards, and frameworks. They will work to develop, implement, and maintain a comprehensive information compliance program that encompasses all aspects of the PCI compliance management lifecycle-including scoping, control validation, evidence collection, remediation tracking, and annual third-party assessments. The PCI Information Security Analyst III will act as a strategic partner to internal stakeholders and external assessors, ensuring that cardholder data is properly secured, regulatory obligations are met, and enterprise risk is minimized.

Requirements

Associate's Degree Related Field of Study required
Bachelor's Degree Related Field of Study highly preferred
Can this role consider and review experience in lieu of a degree? Yes
Relevant experience 5-7 years required
Expertise in cybersecurity concepts within their domain.
Strong understanding of cybersecurity concepts outside of specific individual domain.
Expertise with the tools and solutions supported by the team.
An ability to apply original and innovative thinking to produce new ideas.
Strong leadership, communication and project management skills.
Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

Responsibilities

Acts as a subject matter expert leader within the team, guiding and mentoring junior and mid-level teammates.
Drives innovation by researching and proposing improved security solutions and technologies within their domain.
Solves complex business problems, including system-wide issues and critical incidents by applying technical and security subject matter expertise in support of business goals.
Drives cross-functional collaboration with vendors, partners and stakeholders to maximize the effectiveness of our solutions.