Senior Analyst, Cyber Security Compliance – Live Nation (Remote)
Live Nation Entertainment, the parent company of Ticketmaster, is the world’s leading live entertainment company. This Senior-level, Remote role (Work From Home – California) is a specialized position within the Governance, Risk, and Compliance (GRC) team. You will primarily act as an Internal Security Assessor (ISA), focusing on the massive scale of PCI DSS (Payment Card Industry Data Security Standard) compliance required to secure over 620 million annual ticket sales.
- Requisition ID: JR-84959
- Location: Remote (California residency usually required for tax/legal)
- Experience Required: 3–5 years as a PCI SSC ISA or QSA.
- Key Frameworks: PCI DSS 4.0, NIST CSF.
- Reporting To: Senior Manager, GRC.
Key Responsibilities: Leading the PCI Lifecycle
Live Nation operates one of the most complex payment environments in the world. Your role is to ensure that security is “sustainable” rather than just a yearly audit.
1. PCI DSS Assessment Leadership
As a certified ISA (Internal Security Assessor), you will lead the company’s PCI DSS assessments. This involves documenting findings, performing gap analyses, and providing remediation recommendations. A major focus of this role is Scope Reduction—finding ways to segment the network so that fewer systems are subject to the rigorous (and expensive) PCI requirements.
2. Quarterly Security Reviews (QSRs)
Compliance at Live Nation is not an annual event. You will lead Quarterly Security Reviews with various business units (Concerts, Ticketmaster, Media). These reviews verify that critical PCI controls—such as firewall rule reviews, user access audits, and vulnerability scans—are being performed consistently throughout the year.
3. Subject Matter Expertise & Liaison
You will act as the technical bridge between Network Engineers, Architects, and Finance teams. You’ll also liaise with external QSAs (Qualified Security Assessors) to ensure global audit projects are completed on time. When a client or legal team asks a compliance query, you are the voice of the company providing the technical validation.
Required Technical Competencies
Live Nation needs an auditor with “boots-on-the-ground” technical knowledge who can challenge complex configurations.
- Certifications: Must be a current or former PCI SSC ISA or QSA. CISA or CISM is highly preferred.
- Audit Experience: 3–5 years in IT Audit, Regulatory Compliance, or SecOps.
- Technical Breadth: Familiarity with:
- Network Security: Encryption, Key Management, and IDS/IPS.
- System Integrity: File Integrity Monitoring (FIM) and Logging/Monitoring.
- Development: SDLC security, Code Reviews, and Change Management (SOD).
- Environment: Experience in large, global environments spanning multiple time zones and business units.
Why This Role Matters
With approximately 10,000 clients and 145 million fans, the security of Ticketmaster’s payment systems is essential to the global economy of live events. In this role, you aren’t just “checking boxes.” You are architecting a global compliance posture that protects fans’ financial data while enabling the “School of Live” to operate at an incredible scale. You help turn compliance into a competitive advantage by building trust with artists, sponsors, and fans.
Job Features
| Job Category | IT & Cybersecurity |