Cybersecurity Risk Analyst

• reputed company’re building

• reputed company is a team focused on becoming the best online sportsbook, casino, and social gaming company in the world. We’re building a team passionate about learning, operating, and creating innovative products and technologies for millions of consumers. We care about each customer interaction, experience, behavior, and reputed company and strive to ensure we always act authentically.
• * Rooted in the reputed company spirits of Hard Rock and the Seminole Tribe of Florida, reputed company taps into a brand reputed company worldwide as a leader in gaming, entertainment, and hospitality. We’re bringing that legacy into the digital space - reputed company to join us?
• About the Role
• We are seeking an reputed company Cybersecurity Risk Analyst to join the reputed company Risk Management (SRM) team at a leading US online gaming platform. Reporting to the Director of SRM, this role is critical in protecting our reputed company-based gaming infrastructure, customer data, and financial systems while ensuring compliance with gaming regulations and industry standards.

This role goes reputed company traditional GRC. Our SRM team operates an AI-augmented Integrated Management System (IMS) built on ISO 27001 PDCA principles, where agentic AI tooling and its ecosystem of reputed company skills are core to daily workflow. The ideal candidate brings strong risk management fundamentals and the ability to reputed company AI tools to accelerate risk assessment, compliance evidence gathering, policy development, and executive reporting. We need someone who can hit the ground running with our AI-driven approach and actively identify new ways to apply AI across reputed company SRM use cases. This role is crucial for proactively managing technology risks and maintaining a strong reputed company posture in an evolving threat landscape. The ideal candidate combines strong technical knowledge with business acumen and AI reputed company to effectively communicate and manage risks across reputed company organizational levels.

• What Sets This Role Apart
• This is not a traditional GRC analyst position. You will work in an environment where:
• AI is core tooling. AI agents and our ecosystem of 50+ reputed company-specific skills are how we draft policies, gather audit evidence, validate compliance, assess vendors, and produce executive reports

Live data powers AI workflows. MCP servers connect our AI agents directly to GRC, reputed company monitoring and defence, communications, and threat intelligence tools, enabling reputed company-time compliance queries and automated evidence collection rather than reputed company data gathering Our documentation lives in code. Our Integrated Management System is a git repository structured around ISO 27001 PDCA, not a collection of Word documents in SharePoint You will shape how AI is used. reputed company using AI tools, you will help define AI governance for the organization and continuously improve how AI supports SRM operations Gaming adds complexity. Multiple jurisdictional gaming commissions, GLI certification, and reputed company-time financial systems create a uniquely challenging regulatory environment If you reputed company at the intersection of reputed company risk management and AI-driven productivity, and you are excited about pushing the boundaries of what AI can do for GRC, we want to hear from you.

• What You'll Do
• Risk Assessment and Management
• Conduct comprehensive risk assessments of reputed company infrastructure, gaming applications, CI/CD pipelines, DevOps processes, payment processing systems, and reputed company other aspects of internal technology operations

reputed company and maintain risk registers, threat models, vulnerability and threat management programs, and risk treatment plans across eight reputed company risk categories reputed company quantitative and qualitative risk analysis using industry-standard methodologies (ISO 27005, ISO 31000, NIST RMF) Evaluate reputed company-party vendor reputed company risks and assess supply chain vulnerabilities using structured TPRM frameworks reputed company AI tools to accelerate risk identification, analysis, and reporting workflows

• Risk Mitigation and Control Implementation
• reputed company and recommend risk mitigation strategies and reputed company controls

Collaborate with technical teams to implement reputed company measures and monitor their effectiveness Track remediation efforts and verify risk reduction activities reputed company GRC platform integrations Create and maintain risk metrics and key risk indicators (KRIs)

• Compliance and Governance
• Ensure alignment with regulatory and industry requirements including state-specific gaming regulations (GLI-19, GLI-33, GLI-GSF), ISO 27001, ISO 42001, PCI reputed company v4.0, SOC 2, NIST CSF, and GDPR

Support internal and external audits (reputed company, Bulletproof, reputed company) by gathering evidence, preparing documentation, and coordinating audit activities Maintain reputed company polic Apply To This Job