Sr. Information Security Compliance Analyst

Joins the Global Information and Content Security (GICS) team to support the organisation globally across all US and international brands and divisions. It leads and supports PCI audits globally and collaborates with key business units and stakeholders to ensure security and compliance with Payment Card Industry (PCI) requirements and other cybersecurity regulatory and policy requirements. The team validates that critical processes and controls are functioning end-to-end, identifies risk areas and control mitigation, and participates in projects to determine potential impact on regulatory compliance components.

• Lead and support PCI assessments globally, including targeted compliance assessments, audits, and reviews, and testing to demonstrate the effectiveness of controls.
• Communicate security compliance status, risks, assessment results, and recommendations to executive leadership, management, and stakeholders across technology disciplines.
• Maintain detailed project plans, task lists, audit calendars, and centralised issues logs, establish and track goals and assessment status, and stay abreast of existing and upcoming projects to plan work effectively.
• Assist in information security assessments, audits, risk mitigation, and remediation, and track remediation plans for control deficiencies and regulatory or policy gaps.
• Drive process improvements and control implementation across business functions, including resolution of assessment findings and independent initiatives.
• Validate system requirements, flows, and written procedures through testing and observations, and perform analysis based on testing results to identify system and process gaps, reducing risk, and document all work and findings for relevant stakeholders.
• Conduct ongoing security compliance monitoring activities and identify and measure key metrics reflecting the status of audits and assessments, monitoring the effectiveness of the compliance assessment process to drive continuous improvements.
• Organise and lead meetings with stakeholders across the company and globe, build rapport with partners and teams, and participate in cross-functional teams supporting regulatory compliance subject matters.
• Assist in implementation of the company GRC system, policies, standards, and processes, and in creation of comprehensive metrics and status updates for management.
• Drive and report on status of audit completion and remediation of regulatory and policy issues.
• Keep current with the latest security technology advances and evolving compliance requirements and propose innovations that may benefit the business.
• Ensure data and evidence meet audit expectations and regulatory requirements, and partner with other team members to contribute to a positive team culture and effective deliverables.

• Bachelor's degree in computer science, business administration or a related technical field.
• 4+ years working in audit or compliance environments in a corporate or consulting capacity, with experience in a highly technical setting.
• 3+ years working in PCI regulatory assessments or requirements.
• Previous PCI Qualified Security Assessor (QSA) certification.
• Experience as a PCI Qualified Security Assessor (QSA) across multiple compliance domains in audit process/procedure, risk analysis and mitigation, control testing, and continuous improvement initiatives.
• Experience completing PCI 4.0 assessment types including but not limited to SAQ-A, ROC, SAQ-D, SAQ B-IP, and SAQ P2PE.
• Experience remediating vulnerabilities related to PCI ASV scanning processes.
• Ability to be precise and display superb attention to detail.
• Ability to effectively apply training and feedback.
• Experience testing cloud controls across AWS, Azure, and GCP.
• Experience defining certification/action plan roadmaps balancing compliance deliverables, business requirements, and resource allocation.
• Relevant certification (CISA, PCIP, CISM, CISSP, etc.).
• Experience with cross-functional risk, compliance and/or information security disciplines.
• Subject matter expertise in PCI, Data Privacy, SSAE 18, Swift, SOX, etc.
• Superior analytical and problem-solving skills.

• 3+ years of Big 4 experience in a related field.
• 3+ years of prior experience in a related field (media, tech, entertainment, business development or streaming services industry experience).
• Knowledge of and passion for media, entertainment, and technology industries (including key players, growth trends and drivers, new media models, industry structure, etc.).
• Familiarity with streaming and similar products/services.
• Experience working in a national or global company.
• Some visualisation tool knowledge (e.g., Tableau, Power BI).
• Comfortable working in a highly iterative environment.
• Creative problem solver with sound business discernment and high attention to detail.
• Passion for accuracy and translating insights into a compelling narrative; able to maintain a balance between the details and the larger picture.

• Must work a hybrid schedule (3 days onsite) out of the Atlanta office.

• Health insurance coverage.
• Employee wellness programme.
• Life and disability insurance.
• Retirement savings plan.
• Paid holidays, sick time, and vacation.