Compliance & Risk Analyst - Information Security (SWC)

Job Title: Compliance and Risk Analyst Department: Information Security Reports to: Director of Information Security Qualifications & Experience Bachelor's Degree in Cybersecurity, Information Technology, Risk Management, Compliance, Business Administration, or related field. 3-5 year’s experience in security governance, compliance, audit, or risk management.

Preferred Certifications: CISA, CRISC, PCI ISA, ISO 27001 Lead Implementer, CGRC Technical Knowledge: PCI DSS, ISO 27001, NIST CSF, CIS Controls, GDPR, Third-Party Risk Management, Policy Development, Risk Assessment Methodologies. JOB PURPOSE The Compliance and Risk Analyst is responsible for supporting the organization's cybersecurity risk management, compliance, audit, privacy, and third-party risk management programs.

The role ensures the organization maintains compliance with regulatory requirements, contractual obligations, and security standards including PCI DSS, ISO 27001, NIST CSF, GDPR, and applicable gaming industry regulations.

KEY RESPONSIBILITIES

Compliance Support PCI DSS, ISF, CIS and Privacy compliance initiatives. Collect compliance evidence. Track corrective actions Support development and maintenance of security policies, standards, and procedures. Risk Management Maintain the information security risk register. Track risk treatment activities. Facilitate risk assessments.

Monitor risk acceptance approvals. Audit Support Coordinate requests from auditors. Manage evidence repositories. Monitor remediation plans. Third-Party Risk Management Conduct vendor security reviews. Evaluate third party risk. Track remediation commitments. Privacy & Data Protection Support DSAR activities. Support privacy impact assessments.

Assist with privacy compliance reporting.