Senior Security Governance Specialist
Core
Define and implement security controls, maintain ISO27001 and PCI-DSS accreditation, and manage security governance, risk, and compliance across the organization.
Role type
Senior Security Governance, Risk, and Compliance (GRC) Specialist
Builds
Security control frameworks, audit evidence, and compliance posture for gaming and hospitality sectors
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Security governance frameworks (ISO27001, PCI-DSS, NIST), security assessment, policy management, audit coordination, risk register management, corrective action planning, business continuity planning, vendor due diligence, security awareness program execution
Preferred skills
Gaming or hospitality industry knowledge, cross-functional team collaboration, project management
Technologies
ISO27001, PCI-DSS, NIST 800-53, Cloud Security Alliance, GRC systems
Responsibilities
Develop methods to monitor and measure security assurance efforts; Conduct technical security assessments of applications, systems, or networks; Interface with external auditors for license applications and ISMS audits; Manage the Security Risk Register and Corrective Action Plan; Coordinate Business Continuity Table-top exercises; Participate in security due diligence for new vendors
Seniority
Senior, hands-on IC