Governance Analyst II

San Manuel Band of Mission Indians; Kentucky; On-site; USD 75,000 - 110,000; Full time

Job summary

San Manuel Band of Mission Indians is seeking a Governance Analyst II under the Director, Information Security Operations, to develop, implement, and maintain security policies, standards, baselines, and guidelines safeguarding enterprise assets.

The role leads PCI efforts, coordinates with cross-functional teams, assesses risks, and supports data protection, privacy practices, and regulatory obligations, with ongoing monitoring and reporting to Information Security leadership.

Qualifications

• Bachelor’s degree in information security, technology, statistics, mathematics, or related field required.
• Minimum four (4) years of experience in documentation, procedures and/or policies of information technology, information systems, risk management, controls audit, vendor management, data privacy or information security required.
• Experience with Casino and Tribal government technology and security goals strongly preferred.
• Related, relevant, and/or direct experience may be considered in lieu of minimum educational requirements indicated above.

Responsibilities

• Responsible for creating and reviewing security policies and standards, supporting the management process including regular updates to process flow narratives.
• Leads annual PCI efforts, including tracking remediation of control gaps and escalating critical issues to senior management.
• Engages with business units to identify risks and track mitigation plans.
• Drives the development of metrics that inform executive decision-making for the Information Security risk management reporting dashboard.
• Leverage specialized knowledge to enhance project and operational decisions, and explain policies, standards, practices, and procedures of the job area/department to others within the enterprise.
• Assist in vendor risk management efforts by assisting in vendor intake and review process.
• Contribute to training and awareness initiatives with functional leaders, team leaders, and system owners.
• Performs other duties as assigned to support the efficient operation of the department.

Skills

Policy development

Security governance

Risk assessment

PCI compliance

Cross-functional collaboration

Communication skills

Regulatory awareness

Training & awareness

Education

Bachelor’s degree in information security

Job description

Under the direction of the Director, Information Security Operations, the Governance Analyst II is responsible for the development, implementation, and maintenance of policies, standards, baselines, and guidelines to safeguard enterprise assets and ensure the confidentiality, integrity, and availability of information. This position plays a key role in enhancing the enterprise’s security posture by evaluating and improving existing security measures, while supporting effective data protection and privacy practices in alignment with applicable regulations and business needs.

This role leads assessments of current practices, identifies gaps, and recommends improvements in alignment with industry standards and emerging risks. The position involves complex projects, coordination with cross-functional teams, and providing guidance on security governance, risk, and compliance, including consideration of privacy principles and regulatory obligations where applicable. This role also assists in the strategic planning of the Information Security program, ensuring its effectiveness through continuous monitoring and reporting to Information Security leadership.

ESSENTIAL DUTIES AND RESPONSIBILITIES

1. Responsible for creating and reviewing security policies and standards, supporting the management process including regular updates to process flow narratives. Ensures alignment with business objectives, security frameworks, and data protection/privacy requirements where applicable.

2. Leads annual Payment Card Industry (PCI) efforts, including tracking remediation of control gaps and escalating critical issues to senior management. Acts as a cross-functional lead to support PCI compliance objectives and ensure readiness for assessments and deliverables, including proper handling of sensitive and regulated data.

3. Engages with business units to identify risks and track mitigation plans. Assesses risk management tools, techniques, and procedures to enhance enterprise capabilities, including risks related to the collection, use, and protection of sensitive and personal data.

4. Drives the development of metrics that inform executive decision-making for the Information Security risk management reporting dashboard.

5. Leverage specialized knowledge to enhance project and operational decisions, and explain policies, standards, practices, and procedures of the job area/department to others within the enterprise.

6. Assist in vendor risk management efforts by assisting in vendor intake and review process.

7. Contribute to training and awareness initiatives with functional leaders, team leaders, and system owners.

8. Performs other duties as assigned to support the efficient operation of the department.

EDUCATIONAL, EXPERIENCE AND QUALIFICATIONS

• Bachelor’s degree in information security, technology, statistics, mathematics, or related field required.

• Minimum four (4) years of experience in documentation, procedures and/or policies of information technology, information systems, risk management, controls audit, vendor management, data privacy or information security required.

• Experience with Casino and Tribal government technology and security goals strongly preferred.

• Experience with the following preferred:

• Related, relevant, and/or direct experience may be considered in lieu of minimum educational requirements indicated above.

KNOWLEDGE, SKILLS AND ABILITIES (KSA)

• Must have strong communication and presentation skills.

• Must understand the value of standards, policy and procedures, operational effectiveness, and high availability.

LICENSES, CERTIFICATIONS AND REGISTRATIONS

• At the discretion of the San Manuel Tribal Gaming Commission, you may be required to obtain and maintain a gaming license.

• Driving Responsibilities: Role requires regular commuting between locations. A valid driver’s license and vehicle insurance with minimum liability limits is required. Role will not operate or drive Tribe-owned vehicles or patron vehicles.

PHYSICAL REQUIREMENTS/ WORKING CONDITIONS – ENVIRONMENT

The physical demands and working environment described here are representative of those that an employee encounters and must be met by an employee to successfully perform the essential functions of this job.

• Primary work environment is in a climate-controlled office setting.

• Work requires travel to attend meetings, trade shows, and conferences.

• Incumbents may be required to work evening, weekend and holiday shifts.

• Must be able to work in a fast-paced, high-demand environment.

• Strength sufficient to exert up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects and/or move up to 40 pounds occasionally.

• Sedentary work: involves sitting most of the time. Constantly operates a computer and other

• office productivity machinery, such as a calculator, copy machine, and computer printer.

• Physical activities that apply to the essential functions of the position are balancing, stooping, kneeling, crouching, reaching, pushing, pulling, lifting, grasping, talking, hearing, and repetitive motions.

• Hearing sufficient to hear conversational levels in person, via videoconference and over the telephone.

• Speech sufficient to make oneself heard and understood in person, in front of groups, in meetings,

• via videoconference and over the telephone.

• Visual acuity that meets the requirements of the position: The worker is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal; expansive reading and visual inspection of employees, visitors or facility.

• Mobility sufficient to safely move in an office environment, walk, stoop, bend and kneel, and enter, exit and operate a motor vehicle in the course of travel to promotional events, meetings, conferences, trade shows and San Manuel properties.

• Endurance sufficient to sit, walk and stand for extended periods, and maintain efficiency throughout the entire work shift and during extended work hours.

• The employee may be exposed to fumes or airborne particles including secondhand smoke.

Reasonable accommodation will be made in compliance with all applicable law.

As one of the largest private employers in the Inland Empire, San Manuel deeply cares about the future, growth and well-being of its employees. Join our team today!