Full Job Description
The Opportunity
BetMGM is seeking a Sr Manager, Information Security (Cloud) to lead the continued advancement of our enterprise cloud security program across AWS and Microsoft Azure. This role will provide strategic direction, hands-on technical expertise, and operational leadership for cloud security architecture, engineering, governance, risk reduction, and control automation. The Sr Manager will partner closely with technology, infrastructure, and business stakeholders to ensure cloud platforms, workloads, services, and emerging technologies are designed, deployed, and operated securely in alignment with enterprise standards, regulatory expectations, and BetMGM's overall risk posture. This position is under the supervision of the Sr Director Cyber & IT Risk.
The Sr Manager, Cloud Security will bring a strong technical foundation in AWS and/or Azure security, a risk-based mindset, and the ability to translate complex cloud security requirements into practical, scalable, and repeatable controls. Responsibilities include leading cloud security strategy and execution across identity and access management, network security, data protection, encryption, logging, monitoring, vulnerability management, cloud workload protection, DevSecOps, cloud security posture management, incident response readiness, and compliance enablement. The candidate will be expected to stay current with the evolving cybersecurity, cloud, AI, regulatory, and threat landscape and use that knowledge to strengthen BetMGM's security posture, reduce risk, and enable secure cloud adoption at scale
• Lead the enterprise cloud security program across AWS and Microsoft Azure, including strategy,
roadmap development, operating model maturity, risk reduction priorities, and measurable
security outcomes.
• Lead, coach, and provide day-to-day direction to a cybersecurity team responsible for cloud and
corporate IT security activities, ensuring work is aligned to business priorities, risk reduction
goals, regulatory requirements, and enterprise security standards.
• Design, implement, and maintain secure cloud architectures across AWS and Azure using
secure-by-design principles, cloud-native capabilities, and industry frameworks such as NIST, ISO
27001, PCI DSS, CIS Benchmarks, and cloud provider well-architected guidance.
• Provide hands-on technical leadership for AWS and Azure security controls across identity and
access management, privileged access, network segmentation, encryption and key
management, secrets management, logging, monitoring, vulnerability management, workload
protection, and incident response readiness.
• Develop and automate preventive and detective cloud security controls using infrastructure as
code, policy as code, cloud-native policies, continuous monitoring, and scalable guardrails that
enable secure and efficient cloud adoption.
• Manage cloud security posture management and cloud-native application protection capabilities
to identify misconfigurations, excessive permissions, exposed resources, vulnerable workloads,
compliance gaps, and emerging cloud risks across AWS and Azure.
• Conduct and oversee cloud security reviews, architecture assessments, threat modeling, control
validation, and risk assessments for new and existing cloud workloads, integrations, third-party
services, and business initiatives.
• Prioritize remediation of cloud security risks based on business impact, exploitability, regulatory
relevance, data sensitivity, operational urgency, and alignment to BetMGM's risk tolerance.
• Define and maintain cloud security standards, procedures, reference architectures, exception
processes, operational playbooks, metrics, dashboards, and executive reporting to drive
consistent and repeatable cloud security practices.
• Collaborate with governance, risk, compliance, legal, privacy, audit, and business stakeholders
to ensure AWS and Azure security practices align with internal policies, applicable laws,
regulatory expectations, contractual obligations, and industry standards.
• Support cloud incident response readiness by defining escalation processes, improving cloud
telemetry, validating detection use cases, maintaining runbooks, and partnering with security
operations teams during investigation and remediation activities.
• Evaluate the security implications of emerging cloud technologies, AI-enabled services,
automation, and third-party cloud solutions, including risks related to sensitive data exposure,
model access, service configuration, identity permissions, and acceptable use.
• Stay current with AWS and Azure security services, cloud security trends, threat intelligence, AI
governance developments, and regulatory changes, and recommend improvements that
strengthen the organization's cloud security posture.
Essential Functions
• Must be able to stand or sit and operate computers and other technological devices for
extended periods of time
Qualifications
• 8+ years of information security experience, including significant hands-on experience in cloud
security architecture, engineering, operations, governance, or risk management.
• Demonstrated experience securing either or both AWS and Microsoft Azure environments,
including cloud-native security services, enterprise landing zones, multi-account or multi-
subscription governance, and workload protection.
• Experience leading, coaching, prioritizing work for, or providing performance input to direct
reports.
• Bachelor's or advanced degree in technology, cybersecurity, information systems, engineering,
or a related field, or equivalent work experience.
• Strong working knowledge of cloud security architecture and controls across IAM, privileged
access, network security, encryption, key management, logging, monitoring, vulnerability
management, cloud workload protection, endpoint protection, secrets management, and
incident response.
• Experience with cloud security posture management, cloud-native application protection
platforms, infrastructure as code, policy as code, CI/CD security, container security, serverless
security, and DevSecOps practices.
• Strong working knowledge of AWS and/or Azure security capabilities such as AWS IAM, AWS
Organizations, AWS Security Hub, AWS Config, AWS GuardDuty, AWS KMS, Microsoft Entra ID,
Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, and related
monitoring and protection services.
• Strong understanding of security and technology control frameworks, including NIST, ISO 27001,
CIS Controls, CIS Benchmarks, ISACA/COBIT, PCI DSS, and other applicable regulatory or industry
standards.
• Experience conducting cloud security reviews, architecture assessments, threat modeling,
control validation, risk assessments, remediation planning, and audit support for cloud
environments.
• Experience supporting AI governance, responsible AI, or emerging technology risk management
programs is a plus, especially related to cloud-hosted AI workloads, data protection, model
access, third-party AI services, transparency, accountability, and acceptable use.
• Relevant certifications such as CISSP, CISM, CISA, CCSP, AWS Certified Security - Specialty, AWS
Solutions Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified:
Cybersecurity Architect Expert, CCSK, or similar are preferred.
• Excellent communication and interpersonal skills, with the ability to explain technical cloud
security risks and recommendations to engineering teams, business stakeholders, auditors, and
senior leadership.
• Detail-oriented mindset with a focus on accuracy, consistency, control quality, and measurable
risk reduction.
• Ability to work independently, manage multiple priorities, make risk-informed decisions, and
meet deadlines in a fast-paced environment.
• High level of integrity and professionalism with a commitment to maintaining confidentiality and
upholding high ethical standards in the conduct of all duties.
• Ability to collaborate with high-performing teams and individuals throughout BetMGM to
accomplish common goals.
Applicants must possess legal authorization to work for our company in the U.S. without the need for immigration sponsorship. At this time, this role is not eligible for immigration-related employment authorization sponsorship including H-1B, O-1, E-3, TN, OPT, etc.
Compensation
The pay range for this position is as follows:
136,300.00--181,800.00
Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. This position is also eligible for participation in a performance-based bonus plan.
Gaming Compliance & Licensing Requirements
As an online gaming company, BetMGM is required to comply with state gaming regulations which includes licensing obligations. Applicable employees must be licensed by at least one jurisdictional agency, although certain positions require licensing by multiple agencies. Failure to become licensed or maintain licensure with each agency as required for the role may result in termination of employment. Please note that the licensing process includes comprehensive background checks which may include a review of criminal records, financial history, and personal background verification.
In addition, candidates must comply with and support BetMGM's responsible gambling policies, procedures, and initiatives.
This job description is not an exclusive or exhaustive list of duties a person in this position may be asked to perform from time to time.
#LI-REMOTE
#LI-JLEE
