Lead iSeries Compliance Analyst

About the Role

The Cybersecurity iSeries Lead Compliance Analyst is responsible for reviewing and maintaining the Cybersecurity program and strategy at a tactical and operational level for the iSeries platform. This role ensures security controls function efficiently and effectively, particularly in security logging, monitoring, alert management, incident handling, vulnerability, and configuration management. Additionally, this position supports the Cybersecurity iSeries Team in security research and development and other security-related tasks to meet program requirements. The analyst provides security expertise to establish and implement standards, procedures, and guidelines for securing the iSeries environment in partnership with various properties and Information Technology teams.

Responsibilities

• Operational Planning & Management
  • Act as a Lead Security Matter Expert, providing in-person, written, and overview support to teams including Gaming Control Board Representatives, external auditors (e.g., Deloitte, Ernest & Young), internal auditors, and property internal auditors.
  • Minimize user productivity loss caused by security changes.
  • Support clients in meeting their security business needs.
  • Provide detailed and effective communication to internal teams and leadership.
  • Support the install, upgrade, configuration, deployment, and administration of all iSeries security applications.
  • Monitor high-level users and investigate discrepancies.
• Security Risk Management
  • Manage the iSeries aspect of audits (SOX, PCI, Gaming Regulatory (MICS), etc.) to ensure resolution of outstanding findings and gaps.
  • Develop, implement, and manage security policies, standards, procedures, and guidelines in the iSeries environment.
  • Ensure all iSeries activities (e.g., penetration testing, vulnerability assessments, threat modeling, security reviews) are conducted with high quality using the Cybersecurity risk management framework.
• Incident Management
  • Serve as the iSeries security subject matter expert for the Incident Response team, investigating potential incidents impacting the company.
• Research & Development
  • Provide R&D and consulting support to Cybersecurity, Engineering teams, IT, and business projects as needed.
• Documentation, Reporting & Analytics
  • Contribute to designing and implementing an operational reporting framework for iSeries security, providing regular metrics and statistics about the business and IT environment.
  • Analyze trends in security events to identify risks and insufficiencies in solutions.
  • Report security metrics and statistics to senior leadership, including the Sr Architect, Director of Engineering, and CISO.
  • Document and follow up on security exceptions related to IT and property activities that may impact security risks or compliance.
  • Manage SOC requirements for iSeries security metrics, ensuring daily data collection.
  • Drive and challenge business areas on current processes and assumptions to define optimal solutions.
  • Maintain documentation of recommended process flows and work instructions.
• Performance and Training Management
  • Provide training and advice to less experienced security staff and non-security professionals (e.g., IT, properties).
  • Self-manage career development in security by leveraging in-house and external courses, and prepare a career plan for performance management.
• Organizational Planning and Management
  • Contribute to projects with IT, property teams, and internal Cybersecurity initiatives.
  • Interact with key business partners to drive business initiatives.
  • Assist in preparing project plans and associated documentation.
  • Demonstrate basic project management skills and the ability to work independently or collaboratively.
  • Maintain an enterprise-grade iSeries infrastructure.
  • Successfully participate in multiple initiatives simultaneously.

Requirements

• Must be 21 years of age or older (required for regulated gaming environments).
• Bachelor’s degree in Information Security, Computer Science, Information Systems, or equivalent professional experience in IT Security or Database Administration.
• Ability to pass background checks and obtain/maintain gaming licenses in required jurisdictions.
• Strong verbal and written English communication skills.
• Hands-on experience with IBM i (OS 7.3 and higher) in 24x7 production environments.
• 10+ years of experience administering IBM i platforms.
• 5+ years of experience installing, maintaining, and supporting IBM i security applications.
• Proven experience identifying and remediating IBM i security vulnerabilities in a regulated environment.
• Working knowledge of PCI, SOX, HIPAA, MICS, and/or Gaming Regulatory requirements.
• General understanding of the Integrated File System (IFS) and its security implications.
• Working knowledge of IBM Access Client Solutions (ACS) and IBM Client Access Support in a multi-LPAR, large-scale production environment.

Additional Requirements

• Fortra - PowerTech security suite experience.
• Trinity Guard - TGSecure security tool experience.
• CrowdStrike or similar SIEM service experience.

About Us

At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since our beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through development, expansions, and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe®, and Eldorado® brand names. We focus on building loyalty and value with our guests through impeccable service, operational excellence, and technological leadership. The company is committed to its Team Members, suppliers, communities, and the environment through its PEOPLE PLANET PLAY framework.

Our Caesars family is driven by our Mission, Vision, and Values. We take pride in living these values – Together We Win, All In On Service, and Blaze the Trail – every day. Our mission is to "Create the Extraordinary." Our vision is to "Create spectacular worlds that immerse, inspire, and connect you. We don’t perform magic; we create it with excellence."