DIRECTOR, IT SECURITY & COMPLIANCE at Graton Resort & Casino

Rohnert Park, California, United States -

Full Time

Start Date

Immediate

Expiry Date

19 Jun, 26

Salary

0.0

Posted On

21 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Compliance, Cybersecurity Strategy, Risk Management, Regulatory Compliance, Gaming Regulations, PCI, SOX, Incident Response, Disaster Recovery, Data Protection, Vendor Risk Management, Security Operations, Tribal Gaming Commission, NIGC Guidelines, NIST

Industry

Gambling Facilities and Casinos

Description

Position Summary: The Director, Information Security & Compliance establishes and leads the enterprise information security vision, strategy, and program to ensure the confidentiality, integrity, and availability of all digital assets across Graton Resort & Casino, FIGR Tribal government, and Tribal Gaming Commission, while maintaining a seamless guest experience in a highly regulated environment. The role ensures compliance with gaming regulations, privacy laws, and industry standards across casino systems, payment platforms, and guest-facing technologies. This position also safeguards Tribal assets and sovereignty, partnering closely with Tribal leadership, Gaming Commissions, and federal agencies to drive secure innovation and uphold trust. Essential Functions: 1. Responsible for redefining hospitality at Graton Resort & Casino while living, supporting, and promoting our values. 2. Perform responsibilities in accordance with all Graton Resort & Casino standards, policies, and procedures. 3. Develop and execute a comprehensive cybersecurity strategy aligned with business goals, regulatory requirements, and guest experience priorities across the Graton Enterprise (this includes Graton Resort & Casino, FIGR Tribal government, and Tribal Gaming Commission). 4. Establish security policies and risk management frameworks consistent with Tribal Gaming Commission (TGC) regulations, NIGC guidelines, and industry standards (e.g., NIST). 5. Serve as the primary security liaison for executive leadership, Tribal Council, audit committees, and regulatory bodies. 6. Ensure cybersecurity compliance with gaming regulators, PCI, SOX, privacy laws, and internal policies. 7. Oversee secure management of systems and data including gaming systems, digital wallets, loyalty tools, and financial transaction platforms by developing and reviewing policies, SOPs, and internal auditing. 8. Build and lead a 24/7 security operations function with robust monitoring, threat detection, and rapid incident response capabilities. 9. Establish and test incident response playbooks integrated with business continuity and disaster recovery, including Tribal emergency coordination. 10. Safeguard sensitive personal data, payment systems, and identity management across hotel, casino, and online touchpoints; manage vendor risk and third-party/cloud security practices. 11. Champion a proactive cybersecurity culture through training, awareness, and certification programs; partner with cross-functional teams to enable secure digital innovation. 12. Stay current with gaming laws/regulations, auditing techniques, and IT trends; continuously review processes to align with best practices; perform other duties as assigned. 13. This job description is not an exclusive or exhaustive list of all job functions that a team member in this position may be asked to perform from time to time. Duties and responsibilities may be changed, expanded, reduced, or delegated by Management to meet the business needs of the property. Qualifications Required Qualifications: 1. Ability to communicate effectively with Guests, Team Members and Management in both written and verbal form. 2. Bachelor's degree in Cybersecurity, Information Security/Systems, Information Technology, Accounting, Computer Science, or related field. 3. 10+ years of progressive cybersecurity/security leadership experience in regulated environments. 4. Demonstrated experience managing regulatory compliance within gaming jurisdictions and Tribal Gaming Commission requirements. 5. Expertise in casino management and slot systems, payment processing (PCI), digital wallets, and hospitality PMS/POS systems. 6. Strong knowledge of cloud and hybrid environments and associated security models. 7. Exceptional communication skills to interact with executives, Tribal leaders, regulators, and cross-functional teams. 8. Prior internal audit experience, including IT general controls, SDLC/program management, and governance/security audits. 9. Familiarity with FIGR Regulations, Tribal-State Compacts, NIGC and GLI technical standards, and risk/control concepts across IT domains. 10. Ability to manage complex operations with strong judgment, initiative, organizational skills, and problem-solving rigor. 11. Proficiency with Microsoft Office Suite and Microsoft 365 tools for secure file and communication management. Preferred Qualifications: 1. Experience in gaming/hospitality and Tribal governance. 2. Master's degree in Cybersecurity, Information Security/Systems, Information Technology, Accounting, Computer Science, or related field. 3. Professional certifications such as CISSP, CISM, CRISC, CISA, or CGCS (Certified Gaming Compliance Specialist). Physical Requirements: Tasks are performed from a sitting or non-sitting position. Performance of job duties will require standing, walking, lifting, reaching, pushing, pulling and grasping. These tasks include the maintenance and care of assigned areas.

Responsibilities

This role is responsible for establishing and leading the enterprise information security vision and strategy to ensure the confidentiality, integrity, and availability of digital assets across the Graton Enterprise, maintaining compliance with gaming regulations and industry standards. Key functions include developing the cybersecurity strategy, establishing security policies, serving as the primary security liaison, overseeing secure system management, and building a 24/7 security operations function.