Sr. Manager, Information Security; Cloud

** Discover What's Possible at BetMGM
** As a valued team member, we're committed to giving you the resources and support you need to thrive. Our benefits and perks include:
* Medical, Dental, Vision, Life, and Disability Insurance
* 401(k) with company match
* Pre-tax spending accounts including health care FSA and commuter savings
* Flexible paid time off
* Professional development reimbursement and ongoing skills training opportunities
* Employee resource groups
* Swag, ticket giveaways, and more!

At BetMGM, we recognize that every individual plays a meaningful role in our success. That's why we're committed to building a respectful, inclusive workplace. It's the strategy behind every win. By meeting people where they are, we create a culture of belonging where everyone can thrive and a workplace that reflects our values, our people, and our drive to win.
** The Opportunity
** BetMGM is seeking a Sr Manager, Information Security (Cloud) to lead the continued advancement of our enterprise cloud security program across AWS and Microsoft Azure. This role will provide strategic direction, hands-on technical expertise, and operational leadership for cloud security architecture, engineering, governance, risk reduction, and control automation. The Sr Manager will partner closely with technology, infrastructure, and business stakeholders to ensure cloud platforms, workloads, services, and emerging technologies are designed, deployed, and operated securely in alignment with enterprise standards, regulatory expectations, and BetMGM's overall risk posture.

This position is under the supervision of the Sr Director Cyber & IT Risk.

The Sr Manager, Cloud Security will bring a strong technical foundation in AWS and/or Azure security, a risk-based mindset, and the ability to translate complex cloud security requirements into practical, scalable, and repeatable controls. Responsibilities include leading cloud security strategy and execution across identity and access management, network security, data protection, encryption, logging, monitoring, vulnerability management, cloud workload protection, Dev Sec Ops , cloud security posture management, incident response readiness, and compliance enablement.

The candidate will be expected to stay current with the evolving cybersecurity, cloud, AI, regulatory, and threat landscape and use that knowledge to strengthen BetMGM's security posture, reduce risk, and enable secure cloud adoption at scale
- Lead the enterprise cloud security program across AWS and Microsoft Azure, including strategy,roadmap development, operating model maturity, risk reduction priorities, and measurable security outcomes.

- Lead, coach, and provide day-to-day direction to a cybersecurity team responsible for cloud and corporate IT security activities, ensuring work is aligned to business priorities, risk reduction goals, regulatory requirements, and enterprise security standards.

- Design, implement, and maintain secure cloud architectures across AWS and Azure using secure-by-design principles, cloud-native capabilities, and industry frameworks such as NIST, ISO
27001, PCI DSS, CIS Benchmarks, and cloud provider well-architected guidance.

- Provide hands-on technical leadership for AWS and Azure security controls across identity andaccess management, privileged access, network segmentation, encryption and key management, secrets management, logging, monitoring, vulnerability management, workload protection, and incident response readiness.

- Develop and automate preventive and detective cloud security controls using infrastructure ascode, policy as code, cloud-native policies, continuous monitoring, and scalable guardrails that enable secure and efficient cloud adoption.

- Manage cloud security posture management and cloud-native application protection capabilities to identify misconfigurations, excessive permissions, exposed resources, vulnerable workloads,compliance gaps, and emerging cloud risks across AWS and Azure.

- Conduct and oversee cloud security reviews, architecture assessments, threat modeling, control validation, and risk assessments for new and existing cloud workloads, integrations, third-party services, and business initiatives.

- Prioritize remediation of cloud security risks based on business impact, exploitability, regulatory relevance, data sensitivity, operational urgency, and alignment to BetMGM's risk tolerance.

- Define and maintain cloud security standards, procedures, reference architectures, exception processes,…