IT Controls Manager

Little River Casino Resort • Eastlake, MI

7h • $65,448 - $107,989 • Onsite

About The Position

The IT Controls Manager leads the development, implementation, and oversight of IT governance, risk, and compliance programs. Serving as the primary coordinator for technology audits, assessments, and policy management, this role ensures rigorous alignment with regulatory, legal, and industry standards. By partnering closely with IT, Internal Audit, Gaming Operations, Finance, Human Resources, and external regulators, the manager drives remediation efforts and cross-functional initiatives to mitigate organizational risk and strengthen cybersecurity practices.

Requirements

• High School diploma or GED
• 2-year degree in a computer-related discipline and 2 years of experience in IT governance, internal controls, risk management, policy administration, or technology controls; or 4 years of work experience in IT governance, internal controls, risk management, policy administration, or technology controls
• Minimum of 2 years of hands-on experience in IT governance, cybersecurity, information security, risk management, auditing, or a closely related field
• Background using enterprise tools for governance, risk, controls, identity management, security monitoring, vulnerability management, audit management, policy management, and administration
• Experience supporting audits, regulatory examinations, and working within regulated sectors (strongly preferring gaming, hospitality, financial services, healthcare, or government)
• Excellent computer skills with experience in word processing, databases, and spreadsheets
• Ability to maintain privacy and data protection regulations
• Strong analytical and problem-solving abilities
• Excellent organizational, written and verbal communication skills
• Excellent problem-solving skills
• Accurate and detail-oriented
• Ability to interpret complex regulatory requirements
• Ability to maintain confidentiality of sensitive information
• Ability to effectively communicate with regulators, auditors, executives, and technical personnel
• Ability to manage multiple extensive amounts of paperwork
• Ability to work independently with minimal supervision
• Ability to build collaborative relationships across departments
• At least 21 years of age

Nice To Haves

• Experience working with a Tribally run casino and/or resort preferred
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Security Manager (CISM)
• PCI Professional (PCIP)
• Certified Internal Auditor (CIA)
• A documented and verifiable combination of education and experience may be substituted for degree requirements.

Responsibilities

• Develop, implement, and maintain IT governance programs, controls, policies, and procedures.
• Ensure compliance with applicable Tribal, Federal, State, and Gaming regulatory requirements, including TMICS, Gaming Commission, and GLI standards.
• Monitor and enforce adherence to internal policies, cybersecurity standards, and regulatory controls.
• Coordinate governance, compliance, and audit activities across departments to support organizational objectives.
• Serve as the primary point of contact for regulatory examinations, audits, and controls reviews.
• Track audit findings and recommendations; coordinate and monitor remediation efforts to ensure timely resolution.
• Conduct risk assessments of information systems, processes, vendors, and technologies.
• Maintain accurate documentation to support audit readiness, regulatory compliance, and controls validation.
• Support the implementation, maintenance, and monitoring of cybersecurity frameworks and controls.
• Participate in security assessments, vulnerability management, and incident response activities as needed.
• Coordinate cybersecurity awareness and governance training programs for Team Members.
• Manage regulatory submissions and maintain supporting documentation for inspections and audits.
• Support privacy and data protection initiatives, including the handling of PII and other sensitive information.
• Participate in privacy impact assessments and controls reviews.
• Evaluate and monitor third-party vendors for compliance with governance, security, and risk requirements.
• Assist with third-party risk management activities, including review of vendor audits, certifications, and contracts.
• Maintain and update IT governance documentation to ensure accuracy and alignment with regulatory requirements.
• Track regulatory changes and provide recommendations regarding impacts to governance and controls.
• Promote a culture of compliance, accountability, and security awareness throughout the organization.
• Provide guidance and support to leadership and Team Members regarding governance, controls, and regulatory requirements.

Benefits

• Pre-employment drug test excluding marijuana
• Background investigation to secure a license from the Little River Band of Ottawa Indians Gaming Commission
• Resort background check to meet the employment eligibility requirements as they pertain to the position
• Successfully completing a 90-day introductory period

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: High school or GED