Cyber Compliance Analyst

• Lead and contribute to cyber compliance activities across global audits
• Collect audit evidence and improve compliance processes
• Mentor less experienced team members
• Assist with SOC1, SOC2, MUSL, ISO 27001, IT General Controls, GLI, and PCI audits
• Support third-party assessments and cybersecurity policy creation and updates
• Partner with internal audit on cyber responses to findings and remediation efforts
• Identify, track, and resolve risks through structured risk management processes
• Support the information security program and critical metrics
• Identify cybersecurity gaps and recommend improvements
• Help advance the global cybersecurity strategy and execute key security initiatives
• Collaborate with teams across the company and with external customers, suppliers, and partners

• 2+ years of proven track record in information security audit/compliance field
• Practical experience participating in and leading SOC 1, SOC 2, and MUSL audits
• Familiarity with ISO 27001 and PCI DSS certifications
• Familiarity with NIST CSF and NIST 800-53 frameworks
• Experience with gaming industry standards such as GLI-GSF, GLI-19, and GLI-33, or U.S. gaming regulations such as MUSL
• Experience with AI and automation technologies to support GRC process automation
• CISA, CISSP, CCSP, CISM, and/or CompTIA Security+ certifications preferred
• Ability to travel up to 25%
• Must be authorized to work in the United States without current or future visa sponsorship
• Subject to mandatory background screening and regulatory approvals
• May be required to complete a criminal background check, submit fingerprints, and obtain licenses or registrations with applicable gaming regulatory authorities

Demonstrates expertise in cyber compliance and information security audits, with a strong focus on SOC 1, SOC 2, and ISO 27001 standards. Proven ability to mentor team members and enhance compliance processes while managing risks and supporting cybersecurity initiatives.

• Information Security Audit Experience
• SOC 1, SOC 2, MUSL Audit Leadership
• ISO 27001 Familiarity
• CISA, CISSP, CCSP, CISM Certifications
• Risk Management Process Implementation

• Cyber Compliance Activities
• Audit Evidence Collection
• Risk Management
• Cybersecurity Policy Creation
• GRC Process Automation
• NIST CSF Familiarity
• NIST 800-53 Familiarity
• Gaming Industry Standards Knowledge
• Third-Party Assessment Support
• Critical Metrics Support

• Mentoring
• Collaboration
• Communication

• CISA
• CISSP
• CCSP
• CISM
• CompTIA Security+

• SOC 1
• SOC 2
• MUSL
• ISO 27001
• PCI DSS
• GLI
• GLI-GSF
• GLI-19
• GLI-33
• U.S. Gaming Regulations

• AI Technologies
• Automation Technologies