Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III

Mass General Brigham (Enterprise Services)
United States, Massachusetts, Somerville
399 Revolution Drive (Show on map)
Aug 04, 2025
Summary The Payment Card Industry Data Security Standard (PCI DSS) Information Security Analyst III serves as the lead of Mass General Brigham's PCI DSS compliance program within Digital Information Security. The incumbent will be a subject matter expert in Payment Card Industry Standards, related technical infrastructure, and audit compliance. They will be responsible for leading Mass General Brigham up to the next level of PCI Compliance as an organization that processes payment card data. This role is responsible for assessing if MGB's information assets are protected in accordance with all PCI-DSS policies, controls, industry standards, and frameworks. They will work to develop, implement, and maintain a comprehensive information compliance program that encompasses all aspects of the PCI compliance management lifecycle-including scoping, control validation, evidence collection, remediation tracking, and annual third-party assessments. The PCI Information Security Analyst III will act as a strategic partner to internal stakeholders and external assessors, ensuring that cardholder data is properly secured, regulatory obligations are met, and enterprise risk is minimized. Essential Functions -Acts as a subject matter expert leader within the team, guiding and mentoring junior and mid-level teammates. -Drives innovation by researching and proposing improved security solutions and technologies within their domain. -Solves complex business problems, including system-wide issues and critical incidents by applying technical and security subject matter expertise in support of business goals. -Drives cross-functional collaboration with vendors, partners and stakeholders to maximize the effectiveness of our solutions. Education Associate's Degree Related Field of Study required or Bachelor's Degree Related Field of Study required Can this role accept experience in lieu of a degree? Yes Experience Relevant experience 5-7 years required Knowledge, Skills and Abilities - Expertise in cybersecurity concepts within their domain. - Strong understanding of cybersecurity concepts outside of specific individual domain. - Expertise with the tools and solutions supported by the team. - An ability to apply original and innovative thinking to produce new ideas. - Strong leadership, communication and project management skills. - Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one. M-F Eastern Business Hours required Hybrid onsite Flexible working model required weekly includes onsite in office (number of days weekly can vary, must be flexible for business needs) 1-2 onsite days per week Remote working days require stable, secure, quiet, compliant working station The salary range for this position is $92,102.14 to $155,032,25 annually. At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience, if applicable, education, certifications, and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums, and bonuses as applicable, and recognition programs designed to celebrate your contributions and support your professional growth. We invite you to apply, and our Talent Acquisition team will provide an overview of your potential compensation and benefits package Mass General Brigham Incorporated is an Equal Opportunity Employer. By embracing diverse skills, perspectives and ideas, we choose to lead. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.