Security Governance & Compliance Analyst II

sanmanuel; Highland (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

San Manuel Tribal Gaming Authority seeks a Governance Analyst II under the Director, Information Security Operations. You will develop, implement, and maintain policies, standards, baselines, and guidelines to safeguard assets and ensure confidentiality, integrity, and availability of information.

You will lead assessments, identify gaps, coordinate with cross-functional teams, and provide guidance on governance, risk, and compliance, including privacy considerations and regulatory obligations.

Qualifications

• Bachelor's degree in information security, technology, statistics, mathematics, or related field.

Responsibilities

• Create and review security policies and standards, updating process flow narratives.
• Lead PCI efforts, track remediation of control gaps, and support compliance objectives.
• Engage with business units to identify risks and track mitigation plans.
• Develop metrics for the information security risk management dashboard.
• Explain policies and procedures to stakeholders across the enterprise.
• Assist in vendor risk management and intake/review processes.
• Contribute to training and awareness initiatives with leaders and system owners.
• Perform other duties to support department operations.

Skills

Policy development

Risk management

Stakeholder communication

Regulatory knowledge

Education

Bachelor's degree in information security, technology, statistics, mathematics, or related field

Tools

GRC platforms

Job description

San Manuel Tribal Gaming Authority seeks a Governance Analyst II under the Director, Information Security Operations. You will develop, implement, and maintain policies, standards, baselines, and guidelines to safeguard assets and ensure confidentiality, integrity, and availability of information.

You will lead assessments, identify gaps, coordinate with cross-functional teams, and provide guidance on governance, risk, and compliance, including privacy considerations and regulatory obligations.