Senior Information Security Risk Analyst

Who We Are

Take-Two Interactive is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. The Company develops and publishes products principally through Rockstar Games, 2K, Private Division, and Zynga. Our products are currently designed for console gaming systems, PC, and Mobile, including smartphones and tablets, and are delivered through physical retail, digital download, online platforms, and cloud streaming services. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO.

While our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun, and believe that we provide a great place to come to work each day to pursue your passions.

The Challenge

The Information Security Risk Management team at Take-Two Interactive (T2) is an aspiring, hard working and collaborative group which works together to mature the security posture of T2 and its labels, Rockstar, 2K and Zynga.

The team is looking for a Senior Information Security Risk Analyst to help manage the internal and external Information Technology (IT) risks for the organization. The analyst will assist with planning, organizing, coordinating, and performing risk assessments to identify key controls, critical risks, action plans, and recommendations.

The candidate must build working relationships and lead change with various levels of management on an enterprise scale, and be able to articulate how risk assessment results translate to business risk for the organization.

What You’ll Take On

• Lead the development, implementation, and maturity of the innovative Information Security Risk Management program.
• Lead, plan, and manage the execution and delivery of comprehensive risk-based cyber assessments, including vendors, IT applications, IT infrastructure, IT operational process reviews, IT governance & strategy design assessments, and SOX compliance-related activities.
• Collaborate with internal (e.g., T2 business units, labels, studios) and external parties (e.g., vendors, partners) to communicate, track, and provide guidance on remediation activities for identified security gaps.
• Prepare detailed and insightful deliverables and reports for risk management and senior leadership that highlight issues, trends, and micro/macro-level risks identified through IT internal control work and other assurance-related activities.
• Define and prepare key metrics that measure the effectiveness of the overall information security program and report these to management, showcasing your impact.
• Serve as a trusted advisor and consultant between T2 information security and labels on internal and external information security audit requests (e.g., SOX, external compliance audits).
• Ensure strict compliance with information security policies and standards, maintaining our reputation for excellence.
• Mentor junior team members and perform quality reviews of their work, fostering a collaborative and supportive team environment.
• Be responsible for the design, implementation, and operation of an advanced IT Governance, Risk, and Compliance (GRC) solution.
• Support T2 and labels in the development and implementation of GRC workflows to meet evolving business objectives.
• Stay informed on the latest security, privacy, and regulatory trends and best practices impacting T2 and labels, ensuring we remain innovative.
• Perform other duties as assigned, with opportunities to expand your role and responsibilities.

What You Bring

• Passionate about serving, eager to learn, and humble in your approach.
• 7+ years of experience in IT risk management, IT governance, or internal controls.
• Bachelor’s degree in Business Management, Risk Management, Computer Science, or equivalent job experience.
• In-depth understanding of core information technology processes and controls.
• Experience in supporting, analyzing using risk scoring, managing, communicating, and acting as a primary resource for risk reviews (new and ongoing).
• Extensive experience with information security-related work (e.g., implementing and/or conducting audits or assessments based on relevant security control frameworks), and familiarity with security standards such as CIS, NIST CSF, or ISO 27001.
• Consistent track record in leading information security, vendor, or cloud security risk assessments.
• H