Job Description
The Cybersecurity iSeriesLeadComplianceAnalystfor Caesars is responsible forreviewing and maintainingthe Cybersecurity program and strategy at a tactical and operational level for the iSeries platform to ensure that security controls are functioning efficiently and effectively, more specifically in the realm of security logging, monitoring, alert management, incident handling,vulnerability,and configuration management. Furthermore, this position supports the CybersecurityiSeriesTeam in doing security research and development, and any othersecurity-relatedtasks needed to support the overall requirements of the program and strategy.
The Cybersecurity iSeriesLeadComplianceAnalystprovidessecurityexpertisetoestablishand implement security-related standards, procedures, and guidelinesappropriate tosecuring the existing iSeries environment in partnership with various properties and Information Technology.
Responsibilities
Operational Planning & Management
- The Team member will work directly as a Lead Security Matter Expert to provide in person, written and conduct overviews with the following Teams: Gaming Control Board Representatives (all jurisdictions) External Auditors (i.e., Deloitte and Ernest & Young) Internal Auditors Internal Controls and Compliance Property Internal Auditors
- Minimize user productivity loss caused by security changes
- Provide the necessary support for clients to meet theirsecuritybusiness needs
- Provide detailed and effective communication tobothinternal team andleadership
- Supportinstall, upgrade, configuration,deployment,and administration of all iSeries security applications
- Monitor allhigh-levelusers and investigate any discrepancies.
Security Risk Management
- Manage theiSeriesaspect of various audits; SOX,PCI,GamingRegulatory (MICS),assessmentsetc. to ensure that all outstanding findings and gaps are resolved by the various properties and IT
- Develop,implement,and manage security policies, standards, procedures, and guidelines in the iSeries environment
- Using the Cybersecurity risk management framework, ensure that all iSeries activities (e.g., penetration testing, vulnerability threat assessments, threat modeling, security reviews and assessments, code reviews) are conducted with the utmost quality
Incident Management
- Perform as the iSeries security subject matter expert for the Incident Response team and investigating anypossible incidentsimpactingthe company
Research & Development
- Provide R&D and consulting support to theCybersecurity andEngineering teams,IT and business projects as needed
Documentation, Reporting & Analytics
- Contribute to the design and implementation of an operational reporting frameworkas it relates to the iSeriessecurity that will provide regular metrics and statistics about our business and IT environment; analyze trends in security events, activities, etc. to better understand risks, insufficiencies in our solutions, etc.; report security metrics and statistics to theSrArchitect,Director of Engineering,CISO and other key stakeholders
- Document and follow-up on security exceptions relating to IT and property activities that could negativelyimpactsecurity risks and/or not adhere toestablishedpolicies, standards, or procedures
- Manage all SOC requirements with regards toiSeriessecurity metrics and ensure that metrics are gatheredon a daily basis
- Drives and challenges the business area on their current processes and assumptions to define the best solutions for the business need
- Maintains documentation of recommended process flows and work instructions for processes
Performance and Training Management
- Provide training and advice to less experienced security staff and/or other non-security professionals (IT, properties, e.g.)
- Self-manage career in security byleveragingavailable courses in-house and courses offered externally; prepare a career plan for short-term and longer-term performance
Organizational Planning and Management
- Contribute to projects with the IT and property teams and for projects internal toCybersecurity
- Interact with key business partners to drive business initiatives
- Assistin the preparation of projectplans and associated documentation
- Basic project management skills
- Abilityto workindependently as well as to collaborate with others
- Interact with key business partners to drive business initiatives
- Proven ability tomaintainand enterprise-grade iSeries infrastructure
- Basic project management skills
- Demonstrated ability to successfullyparticipatein multiple initiatives simultaneously
Qualifications
- Must be21 years of age or older(required for regulated gaming environments)
- Bachelor’s degree in information security, Computer Science, Information Systems, orequivalent professional experience in IT Security orDatabase Administration
- Ability to pass background checks, obtain and maintain gaming licenses in required jurisdictions.
- Strongverbal and written English communication skills
- Hands-on experience withIBM i (OS 7.3 and higher)in 24x7 production environments
- 10+ yearsof experience administering IBM i platforms
- 5+ yearsof experience installing, maintaining, and supporting IBM i security applications
- Proven experience identifying and remediatingIBM i security vulnerabilities in a regulated environment
- Working knowledge ofPCI, SOX,HIPAA, MICS, and/or Gaming Regulatory requirements
- General understanding of theIntegrated File System (IFS)and its security implications
- Working knowledge ofIBM Access Client Solutions (ACS) and IBMClient Access
- Support in a multi LPAR large scale production environment
Additional Requirements
- Fortra-PowerTechsecurity suite experience
- Trinity Guard-TGSecuresecurity tool
- CrowdStrike or similarSIEM service
About Us
At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe® and Eldorado® brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.
Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #WeAreCaesars”. If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.