GRC Analyst (Entry‑Level) — Risk, Compliance & Privacy

Fontainbleau; Las Vegas (NV); On-site; USD 80,000 - 100,000; Full time

Job summary

Fontainebleau Las Vegas is seeking an entry-level Governance, Risk, and Compliance Analyst to support risk management, regulatory compliance, audit, and policy management. You will work with IT, Legal, and other units to document, test, and align security and privacy practices with gaming regulations, PCI DSS, and privacy laws.

You will assist with risk assessments, policy control mappings, training, and reporting while building hands-on experience across multiple GRC disciplines.

Qualifications

• Foundational knowledge of cybersecurity concepts and IT fundamentals with at least one framework such as NIST, ISO/IEC 27001/27002, PCI DSS, or SOC 2.
• Strong written and verbal communication; ability to translate technical concepts into business language.
• Excellent attention to detail and ability to follow documented procedures and maintain records.
• Excellent time management to handle multiple priorities in a fast-paced environment.
• Ability to handle sensitive information confidentially.
• Strong interpersonal skills to work with diverse contacts.
• Willingness to learn and obtain gaming/regulatory licenses and adapt to policies.
• Proficiency with Microsoft Office Suite (Excel, Word, SharePoint, Teams).
• Experience or familiarity with gaming/hospitality regulatory environments preferred.
• Flexible schedule including holidays, nights, and weekends.

Responsibilities

• Supports vendor risk assessments, intake, security questionnaires, evidence review, and tracking findings.
• Documents and tracks IT and cybersecurity risks in the risk register with treatment plans.
• Performs internal IT audit and control tests, including user access reviews and audit evidence.
• Coordinates audits, maps controls to frameworks, tracks findings and corrective actions.
• Supports policy management, policy exceptions, and policy change workflows.
• Contributes to cybersecurity training and awareness programs and phishing response.
• Assists with program metrics, reporting, and maintaining GRC documentation.
• Supports privacy program activities as needed.

Skills

Cybersecurity concepts

IT fundamentals

Frameworks knowledge

Written communication

Verbal communication

Time management

Attention to detail

Handling sensitive information

Interpersonal skills

MS Office

Gaming regulations knowledge

Flexible schedule

Education

Bachelor's degree in Information Security/Information Systems/CS/Business or related field

1-3 years in cybersecurity GRC/IT audit or related field

Tools

GRC platforms

Security awareness training platforms

Job description

Fontainebleau Las Vegas is seeking an entry-level Governance, Risk, and Compliance Analyst to support risk management, regulatory compliance, audit, and policy management. You will work with IT, Legal, and other units to document, test, and align security and privacy practices with gaming regulations, PCI DSS, and privacy laws.

You will assist with risk assessments, policy control mappings, training, and reporting while building hands-on experience across multiple GRC disciplines.