Cybersecurity Manager

About Us

We are BetMGM. We are revolutionizing sports betting and online gaming in the United States. We are a partnership between two powerhouse organizations—MGM Resorts International and Entain Group. You know our name through our exciting portfolio of brands including BetMGM Sportsbook, Borgata online, Party Casino and Party Poker. We aim to bring our ideas into action and find ways to deliver the best quality in gaming platforms.

We understand that each card in the deck plays a unique role in any given hand, just as our employees each play a unique role in accomplishing our goals as a company. We strive to create a culture of empathy where our employees feel valued, heard, and comfortable bringing their authentic selves to work. We want to build a product and a workplace that reflect the communities we serve so we approach our work fearlessly, take responsibility when we get it wrong, and ante-up again. We play to win, and we are all-in together.

We were recognized as one of Glassdoor’s “Best Places to Work”.

About the Role

BetMGM is seeking a Cybersecurity Manager to design, implement, and oversee comprehensive information security strategies to help continually advance our cybersecurity posture and protect against evolving threats and vulnerabilities. The Cybersecurity Manager will lead initiatives to enhance the BetMGM InfoSec team’s capabilities while also overseeing ongoing regulatory compliance of the security program to ensure required procedures and practices are continually followed. This position is under the supervision of the Sr Director Cyber & IT Risk.

The Cybersecurity Manager will exhibit strong analytical skills, a detailed oriented mindset, and strong communication and interpersonal skills to facilitate communication within the team and to internal stakeholders. Responsibilities will also include developing security policies, conducting risk assessments, staying abreast of relevant regulations and standards, align cybersecurity support and initiatives to individual department or overall business objectives, and continual learning to be at the leading edge of emerging threats and technology. Additionally, the candidate will be responsible for overseeing third-party audits to ensure compliance to regulatory requirements and industry standard security frameworks. The Cybersecurity Manager will be expected to leverage your expert knowledge of today's ever-changing cybersecurity, technical state regulations and risk landscape to increase BetMGM’s security posture, mitigate risk and ensure resilience and integrity of our systems.

Responsibilities

• Support and oversee work conducted by third-party audit firms that audit BetMGM regularly for regulatory compliance for the jurisdictions where BetMGM operates as well as compliance to industry standard information security frameworks (ISO 27001, NIST 800-53, PCI, etc).

• Contribute to internal audits focused on information security controls and facilitate support for the audits working within the information security team and across cross functional teams.

• Contribute to the design and enforcement of comprehensive security policies, procedures, and SOPs specifically to ensure ongoing compliance to all jurisdictional, industry framework or similar requirements.

• Contribute to the design and implementation of security architecture and controls including onboarding new applications in furtherance of these objectives.

• Day to day involvement in the adherence to and enforcement of information security policies, procedures and practices.

• Monitor and analyze for emerging threats or vulnerabilities. Stay current with the latest cybersecurity trends and technologies to enhance BetMGM’s preparedness and overall security posture.

• Contribute to the development and delivery of the cybersecurity training and awareness program for all employees to create a culture of security and risk mitigation.

• Stay current with emerging security trends, threats, and technologies in general as well as specifically related to Snowflake and user access management.

• Be knowledgeable of and work to implement strategies to ensure BetMGM adheres to industry best practices for information security, is in compliance with relevant cyber and data privacy laws and regulations, and is in compliance with applicable regulatory requirements for information security and data privacy.

• Prepare comprehensive reports and be able to provide presentations summarizing cybersecurity initiatives, ongoing performance and overall cybersecurity posture.

• Provide insights and recommendations based on data-driven analysis to support decision-making processes.

• Communicate findings and recommendations to relevant stakeho