Senior GRC Analyst, Rockstar Games

$110-150k

Senior and Expert level

New York

5 days a week in office (Manhattan, NYC)

Multinational video game development and publishing company

Be an early applicant

Multinational video game development and publishing company

1001+ employees

B2CGamingDigital MediaSaaS

Be an early applicant

$110-150k

Senior and Expert level

New York

5 days a week in office (Manhattan, NYC)

1001+ employees

B2CGamingDigital MediaSaaS

Company mission

Rockstar Games focuses intently on quality and content to proudly produce exactly the kind of games we would want to play ourselves.

Job

Company

Role

Who you are

Bachelor's degree in Computer Science, Cybersecurity, or related
5+ years of experience in information security, risk management, or cyber supply chain security
Industry-recognized certifications such as CISSP, CISA, CRISC or other relevant certifications
Ability to communicate complex technical risk in a simple and understandable manner
Strong knowledge and experience across information security domains
Deep familiarity with the performance of third party vendor risk management, including methodologies, pitfalls, success factors, and the improvement of associated processes
Knowledge of industry frameworks and standards such as ISO27001, NIST, CIS, and familiarity with data privacy regulations (e.g., GDPR, CCPA) and diligence activities leveraged by vendors to evidence security maturity (e.g., penetration testing methodologies)
Familiarity with technologies — hardware, software, and protocols commonly used in applications and system-to-system communication (e.g., SAML/OAuth) and network security concepts
Experience with third-party risk management platforms (e.g., scorecard monitoring) and exposure to GRC platforms

What the job involves

Rockstar is on the lookout for a passionate Senior GRC Analyst who will work with business and technical stakeholders to help assess and lead information security risk. Using your cross-domain cybersecurity expertise, you will help identify, track, report, and mitigate risks
Your focus will be on third party vendor management that aligns with organizational and industry standards
The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk
We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards and procedures to safeguard our business and protect our players
We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incident and event monitoring solutions
We have a passion for identifying threats and vulnerabilities, and coming up with clever solutions to mitigate or remediate those risks
Evaluate the security posture of suppliers, vendors, and third-party service providers in coordination with relevant risk functions to identify potential vulnerabilities and threats
Maintain up-to-date inventory of third-party vendors and risk log, perform follow-up activities, and engage with stakeholders
Recommend and define specific security requirements and guidelines for third-party vendors, proposing controls and mitigation strategies, and validating the implementation of these controls
Coordinate with business stakeholders, engineering, and IT teams to ensure appropriate access controls, secure implementation and/or integration with third-party systems and services
Assist with the development and maintenance of policies and procedures related to vendor risk management tailored to the company's strategic objectives and regularly updated based on evolving threats and regulations
Assist in the review of vendor contracts to ensure appropriate security clauses and requirements are included
Participate in the cross-functional software clearance working group to review and assess new software requests
Support managing the security request queue, ensuring timely review of incoming requests, alerts, and incidents
Assist in the delivery and continuous improvement of security awareness training for new hires by reinforcing security standards and serving as a resource for employee questions

Application process

Please apply with a resume and cover letter demonstrating how you meet the skills above. If we would like to move forward with your application, a Rockstar recruiter will reach out to you to explain next steps and guide you through the process

Our take

Founded by brothers Dan and Sam Houser, Rockstar Games is a multinational video game developer and production house behind the hit series’ Grand Theft Auto and Red Dead Redemption. Formed as part of an acquisition of British video game company BMG Ventures by Take Two Interactive in 1998, Rockstar Games became the name of the parent company’s publishing label.

Rockstar has gone from hit to hit, Grand Theft Auto 5 remaining the second best-selling video game of all time and maintaining more than 20 million online players since its launch in 2013. Red Dead Redemption 2 has also had an impressive run, having sold over 70 million copies worldwide.

Online content is regularly released for both titles, whilst video game players eagerly await the release of Grand Theft Auto 6 in May 2026. It's projected that GTA 6 will make billions in its first year of launch alone, exemplifying Rockstar’s status as one of the most successful video game publishers of all time.