Compliance Analyst

Cybersecurity Iseries Lead Compliance AnalystThe Cybersecurity iSeries Lead Compliance Analyst for Caesars is responsible for reviewing and maintaining the Cybersecurity program and strategy at a tactical and operational level for the iSeries platform to ensure that security controls are functioning efficiently and effectively, more specifically in the realm of security logging, monitoring, alert management, incident handling, vulnerability, and configuration management. Furthermore, this position supports the Cybersecurity iSeries Team in doing security research and development, and any other security-related tasks needed to support the overall requirements of the program and strategy.The Cybersecurity iSeries Lead Compliance Analyst provides security expertise to establish and implement security-related standards, procedures, and guidelines appropriate to securing the existing iSeries environment in partnership with various properties and Information Technology.How You Will Create the ExtraordinaryOperational Planning & ManagementThe team member will work directly as a Lead Security Matter Expert to provide in person, written and conduct overviews with the following Teams: Gaming Control Board Representatives (all jurisdictions) External Auditors (i.e., Deloitte and Ernest & Young) Internal Auditors Internal Controls and Compliance Property Internal AuditorsMinimize user productivity loss caused by security changesProvide the necessary support for clients to meet their security business needsProvide detailed and effective communication to both internal team and leadershipSupport install, upgrade, configuration, deployment, and administration of all iSeries security applicationsMonitor all high-level users and investigate any discrepancies.Security Risk ManagementManage the iSeries aspect of various audits; SOX, PCI, Gaming Regulatory (MICS), assessments etc. to ensure that all outstanding findings and gaps are resolved by the various properties and ITDevelop, implement, and manage security policies, standards, procedures, and guidelines in the iSeries environmentUsing the Cybersecurity risk management framework, ensure that all iSeries activities (e.g., penetration testing, vulnerability threat assessments, threat modeling, security reviews and assessments, code reviews) are conducted with the utmost qualityIncident ManagementPerform as the iSeries security subject matter expert for the Incident Response team and investigating any possible incidents impacting the companyResearch & DevelopmentProvide R&D and consulting support to the Cybersecurity and Engineering teams, IT and business projects as neededDocumentation, Reporting & AnalyticsContribute to the design and implementation of an operational reporting framework as it relates to the iSeries security that will provide regular metrics and statistics about our business and IT environment; analyze trends in security events, activities, etc. to better understand risks, insufficiencies in our solutions, etc.; report security metrics and statistics to the Sr Architect, Director of Engineering, CISO and other key stakeholdersDocument and follow-up on security exceptions relating to IT and property activities that could negatively impact security risks and/or not adhere to established policies, standards, or proceduresManage all SOC requirements with regards to iSeries security metrics and ensure that metrics are gathered on a daily basisDrives and challenges the business area on their current processes and assumptions to define the best solutions for the business needMaintains documentation of recommended process flows and work instructions for processesPerformance and Training ManagementProvide training and advice to less experienced security staff and/or other non-security professionals (IT, properties, e.g.)Self-manage career in security by leveraging available courses in-house and courses offered externally; prepare a career plan for short-term and longer-term performance managementOrganizational Planning and ManagementContribute to projects with the IT and property teams and for projects internal to CybersecurityInteract with key business partners to drive business initiativesAssist in the preparation of project plans and associated documentationBasic project management skillsAbility to work independently as well as to collaborate with othersInteract with key business partners to drive business initiativesProven ability to maintain and enterprise-grade iSeries infrastructureBasic project management skillsDemonstrated ability to successfully participate in multiple initiatives simultaneouslyWhat You Will NeedMust be 21 years of age or older (required for regulated gaming environments)Bachelor's degree in information security, Computer Science, Information Systems, or equivalent professional experience in IT Security or Database AdministrationAbility to pass background checks, obtain and maintain gaming licenses in required jurisdictions.Strong verbal and written English communication skillsHands-on experience with IBM i (OS 7.3 and higher) in 24x7 production environments10+ years of experience administering IBM i platforms5+ years of experience installing, maintaining, and supporting IBM i security applicationsProven experience identifying and remediating IBM i security vulnerabilities in a regulated environmentWorking knowledge of PCI, SOX, HIPAA, MICS, and/or Gaming Regulatory requirementsGeneral understanding of the Integrated File System (IFS) and its security implicationsWorking knowledge of IBM Access Client Solutions (ACS) and IBM Client AccessSupport in a multi LPAR large scale production environmentAdditional RequirementsFortra - PowerTech security suite experienceTrinity Guard - TGSecure security toolCrowdStrike or similar SIEM serviceAbout UsAt Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe® and Eldorado® brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework. Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, "Create the Extraordinary". Our vision, "Create spectacular worlds. That immerse, inspire and connect you. We don't perform magic; we create it with excellence. #WeAreCaesars". If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.Job InfoJob Identification 88417Job Category Information TechnologyJob Schedule Full timeLocations Caesars Las Vegas_Corporate (Hybrid)