Senior Manager, Information Security – Cloud

This is a fully remote position, open to applicants in Nevada, +3 more states.

📋 Description

• Oversee the enterprise cloud security initiative across AWS and Microsoft Azure, which encompasses strategy formulation, roadmap development, operating model enhancement, risk mitigation priorities, and quantifiable security results.

• Direct, mentor, and provide daily guidance to a cybersecurity team tasked with cloud and corporate IT security operations.

• Create, implement, and uphold secure cloud architectures within AWS and Azure by applying secure-by-design principles and industry frameworks.

• Offer practical technical leadership for cloud security measures related to identity and access management, privileged access, network segmentation, encryption, key management, secrets management, logging, monitoring, vulnerability management, workload protection, and readiness for incident response.

• Design and automate preventive and detective cloud security measures utilizing infrastructure as code, policy as code, cloud-native policies, continuous monitoring, and scalable guardrails.

• Oversee cloud security posture management and capabilities for cloud-native application protection.

• Conduct and supervise cloud security evaluations, architectural assessments, threat modeling, control validation, and risk assessments.

• Prioritize the remediation of cloud security vulnerabilities based on business impact, exploitability, regulatory significance, data sensitivity, operational urgency, and risk tolerance.

• Define and sustain cloud security standards, procedures, reference architectures, exception processes, operational playbooks, metrics, dashboards, and executive reporting.

• Collaborate with governance, risk, compliance, legal, privacy, audit, and business stakeholders.

• Enhance cloud incident response readiness by establishing escalation processes, refining cloud telemetry, validating detection use cases, maintaining operational runbooks, and partnering with security operations teams.

• Assess the security implications of new cloud technologies, AI-enabled services, automation, and third-party cloud solutions.

• Keep abreast of AWS and Azure security services, cloud security trends, threat intelligence, AI governance advancements, and regulatory updates.

• Report to the Senior Director of Cyber & IT Risk.

⛳️ Requirements

• A minimum of 8 years of information security experience, with substantial hands-on involvement in cloud security architecture, engineering, operations, governance, or risk management.

• Proven expertise in securing either or both AWS and Microsoft Azure environments, including cloud-native security services, enterprise landing zones, multi-account or multi-subscription governance, and workload protection.

• Experience in leading, coaching, prioritizing tasks for, or providing performance feedback to direct reports.

• Bachelor’s degree or higher in technology, cybersecurity, information systems, engineering, or a related discipline, or equivalent professional experience.

• Strong foundational knowledge of cloud security architecture and controls encompassing IAM, privileged access, network security, encryption, key management, logging, monitoring, vulnerability management, cloud workload protection, endpoint protection, secrets management, and incident response.

• Experience with cloud security posture management, cloud-native application protection platforms, infrastructure as code, policy as code, CI/CD security, container security, serverless security, and DevSecOps methodologies.

• Comprehensive understanding of AWS and/or Azure security features such as AWS IAM, AWS Organizations, AWS Security Hub, AWS Config, AWS GuardDuty, AWS KMS, Microsoft Entra ID, Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, and related monitoring and protection services.

• Strong comprehension of security and technology control frameworks, including NIST, ISO 27001, CIS Controls, CIS Benchmarks, ISACA/COBIT, PCI DSS, and other relevant regulatory or industry standards.

• Experience in conducting cloud security evaluations, architectural assessments, threat modeling, control validation, risk assessments, remediation planning, and audit support for cloud environments.

• Familiarity with supporting AI governance, responsible AI, or emerging technology risk management initiatives is an advantage.

• Relevant certifications such as CISSP, CISM, CISA, CCSP, AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, CCSK, or similar are preferred.

• Exceptional communication and interpersonal abilities.

• Detail-oriented approach with an emphasis on accuracy, consistency, quality control, and measurable risk reduction.

• Capability to work independently, manage multiple priorities, make risk-informed decisions, and meet deadlines in a dynamic environment.

• High level of integrity and professionalism with a dedication to maintaining confidentiality and adhering to high ethical standards.

• Ability to collaborate with high-performing teams and individuals throughout BetMGM.

• Must be capable of standing or sitting and operating computers and other technological devices for extended durations.

• Candidates must have legal authorization to work for the company in the U.S. without requiring immigration sponsorship.

• Must adhere to applicable gaming licensing requirements and responsible gambling policies.

🏝️ Benefits

• Medical, Dental, Vision, Life, and Disability Insurance.

• 401(k) with company match.

• Pre-tax spending accounts, including health care FSA and commuter savings.

• Flexible paid time off.

• Professional development reimbursement and ongoing skills training opportunities.

• Employee resource groups.

• Swag, ticket giveaways, and more.

• Performance-based bonus plan.