Lead iSeries Compliance Analyst

Operational Planning & Management

• The Team member will work directly as a Lead Security Matter Expert to provide in person written and conduct overviews with the following Teams:
  Gaming Control Board Representatives (all jurisdictions)
  External Auditors (i.e. Deloitte and Ernest & Young)
  Internal Auditors
  Internal Controls and Compliance
  Property Internal Auditors

• Minimize user productivity loss caused by security changes

• Provide the necessary support for clients to meet theirsecuritybusiness needs

• Provide detailed and effective communication tobothinternal team andleadership

• Supportinstall upgrade configurationdeploymentand administration of all iSeries security applications

• Monitor allhigh-levelusers and investigate any discrepancies.

Security Risk Management

• Manage theiSeriesaspect of various audits; SOXPCIGamingRegulatory (MICS)assessmentsetc. to ensure that all outstanding findings and gaps are resolved by the various properties and IT

• Developimplementand manage security policies standards procedures and guidelines in the iSeries environment

• Using the Cybersecurity risk management framework ensure that all iSeries activities (e.g. penetration testing vulnerability threat assessments threat modeling security reviews and assessments code reviews) are conducted with the utmost quality

Incident Management

• Perform as the iSeries security subject matter expert for the Incident Response team and investigating anypossible incidentsimpactingthe company

Research & Development

• Provide R&D and consulting support to theCybersecurity andEngineering teamsIT and business projects as needed

Documentation Reporting & Analytics

• Contribute to the design and implementation of an operational reporting frameworkas it relates to the iSeriessecuritythat will provide regular metrics and statistics about our business and IT environment; analyze trends in security events activities etc. to better understand risks insufficiencies in our solutions etc.; report security metrics and statistics to theSrArchitectDirector of EngineeringCISO and other key stakeholders

• Document and follow-up on security exceptions relating to IT and property activities that could negativelyimpactsecurity risks and/or not adhere toestablishedpolicies standards or procedures

• Manage all SOC requirements with regards toiSeriessecurity metrics and ensure that metrics are gatheredon a daily basis

• Drives and challenges the business area on their current processes and assumptions to define the best solutions for the business need

• Maintains documentation of recommended process flows and work instructions for processes

Performance and Training Management

• Provide training and advice to less experienced security staff and/or other non-security professionals (IT properties e.g.)

• Self-manage career in security byleveragingavailable courses in-house and courses offered externally; prepare a career plan for short-term and longer-term performance management

Organizational Planning and Management

• Contribute to projects with the IT and property teams and for projects internal toCybersecurity

• Interact with key business partners to drive business initiatives

• Assistin the preparation of projectplans and associated documentation

• Basic project management skills

• Abilityto workindependently as well as to collaborate with others

• Interact with key business partners to drive business initiatives

• Proven ability tomaintainand enterprise-grade iSeries infrastructure

• Basic project management skills

• Demonstrated ability to successfullyparticipatein multiple initiatives simultaneously

• Must be21 years of age or older(required for regulated gaming environments)

• Bachelors degree in information security Computer Science Information Systems orequivalent professional experience in IT Security orDatabase Administration

• Ability to pass background checks obtain and maintain gaming licenses in required jurisdictions.

• Strongverbal and written English communication skills

• Hands-on experience withIBM i (OS 7.3 and higher)in 24x7 production environments

• 10 yearsof experience administering IBM i platforms

• 5 yearsof experience installing maintaining and supporting IBM i security applications

• Proven experience identifying and remediatingIBM i security vulnerabilities in a regulated environment

• Working knowledge ofPCI SOXHIPAA MICS and/or Gaming Regulatory requirements

• General understanding of theIntegrated File System (IFS)and its security implications

• Working knowledge ofIBM Access Client Solutions (ACS) and IBMClient Access

• Support in a multi LPAR large scale production environment

ADDITIONAL REQUIREMENTS

• Fortra-PowerTechsecurity suite experience

• Trinity Guard-TGSecuresecurity tool

• CrowdStrike or similarSIEM service