Senior Information Security Analyst, Take Two Interactive

• Strong expertise in compliance, regulatory frameworks and policy development
• In-depth knowledge of industry standards and regulations (e.g., GDPR, PCI-DSS, ISO 27001, NIST CSF)
• Experience in drafting, updating, and maintaining security policies across multiple domains (e.g., data protection, access control, incident response)
• Solid understanding of audit processes and reporting to address gaps and ensure continuous improvement
• Solid understanding of basic information security controls (access, encryption, logging, data protection, patching, etc.) and ability to interpret control requirements for technical audience
• Strong analytical and problem-solving skills
• Strong collaboration and communication skills

Desirable

• We're looking for a dynamic Senior Information Security Analyst to lead our security policy, compliance, and governance efforts in the fast-paced world of gaming
• This role goes beyond crafting policies — you'll collaborate across teams to ensure our security practices meet regulatory requirements, lead audits, and stay ahead of emerging threats
• Your work will determine the strength of our security controls, making a significant impact on our company's success
• You will report to Director of Information Security and will be a part of organization's information security team
• This role will be a liaison technical and non-technical teams, which will involve collaboration with Information Technology, Information Security, Game Development, Legal and other teams
• Develop a policy management framework to ensure policies are aligned with organizational goals and risk tolerance
• Lead the design, review, approval and publishing of effective information security policies, standards, procedures, and guidelines
• Develop and implement a process to ensure regular review and updates of policies based on changes in regulations, technologies, and business operations
• Provide support on policy development to various business units within the organization
• Understanding of emerging technologies, trends, and threats to ensure policies remain current
• Collaborate with information security teams to prepare, design and publish documents that are distributed to employees
• Work with developers and information security experts to draft technical documents and communications
• Ensure strict compliance with information security policies
• Managing external relations with auditors, regulatory bodies, and third-party assessors
• Lead external and internal security audits, managing evidence collection, and ensuring timely audit completion
• Monitor the efficiency of security controls and implement necessary improvements
• Monitor regulatory changes and proactively update policies and controls
• Implement and maintain process to ensure compliance with all relevant laws, regulations, and standards (e.g., GDPR, PCI-DSS, ISO 27001, NIST CSF)
• Develop and maintain information security framework