Sr. Manager, Information Security (Cloud)

BetMGM•Las Vegas, NJ

2d•$136,300 - $181,800•Remote

About The Position

BetMGM is seeking a Sr. Manager, Information Security (Cloud) to advance its enterprise cloud security program across AWS and Microsoft Azure. The role provides strategic direction, technical expertise, and operational leadership for cloud security architecture, engineering, governance, risk reduction, and control automation. The position partners with technology, infrastructure, and business stakeholders to ensure cloud platforms, workloads, services, and emerging technologies are designed, deployed, and operated securely in alignment with enterprise standards, regulatory expectations, and the organization’s risk posture. It reports to the Sr Director Cyber & IT Risk. The role leads cloud security strategy and execution across identity and access management, network security, data protection, encryption, logging, monitoring, vulnerability management, workload protection, DevSecOps, cloud security posture management, incident response readiness, and compliance enablement. It combines a strong technical foundation in AWS and/or Azure with risk-based decision-making and the ability to turn complex security requirements into practical, scalable, repeatable controls. The successful candidate is expected to stay current with cybersecurity, cloud, AI, regulatory, and threat developments and use that knowledge to strengthen security and enable cloud adoption at scale. The position requires the ability to stand or sit and operate computers and other technological devices for extended periods. Applicants must be authorized to work in the U.S. without immigration-related employment sponsorship. Applicable employees must obtain and maintain required gaming licenses and support BetMGM responsible gambling policies and initiatives. The stated pay range is $136,300–$181,800, with eligibility to participate in a performance-based bonus plan. Starting pay may vary based on factors such as geography, skills, education, and experience.

Requirements

At least 8 years of information security experience, including significant hands-on experience in cloud security architecture, engineering, operations, governance, or risk management.
Demonstrated experience securing AWS and/or Microsoft Azure environments, including cloud-native security services, enterprise landing zones, multi-account or multi-subscription governance, and workload protection.
Experience leading, coaching, prioritizing work for, or providing performance input to direct reports.
Bachelor’s or advanced degree in technology, cybersecurity, information systems, engineering, or a related field, or equivalent work experience.
Strong working knowledge of cloud security architecture and controls across IAM, privileged access, network security, encryption, key management, logging, monitoring, vulnerability management, workload and endpoint protection, secrets management, and incident response.
Experience with cloud security posture management, cloud-native application protection platforms, infrastructure as code, policy as code, CI/CD security, container security, serverless security, and DevSecOps practices.
Strong working knowledge of AWS and/or Azure security capabilities, including relevant identity, governance, monitoring, key management, and protection services.
Strong understanding of security and technology control frameworks, including NIST, ISO 27001, CIS Controls, CIS Benchmarks, ISACA/COBIT, PCI DSS, and other applicable standards.
Experience conducting cloud security reviews, architecture assessments, threat modeling, control validation, risk assessments, remediation planning, and audit support.
Excellent communication and interpersonal skills, including the ability to explain technical cloud security risks and recommendations to engineering teams, business stakeholders, auditors, and senior leadership.
Detail-oriented approach focused on accuracy, consistency, control quality, and measurable risk reduction.
Ability to work independently, manage multiple priorities, make risk-informed decisions, and meet deadlines in a fast-paced environment.
High integrity and professionalism, including a commitment to confidentiality and ethical conduct.
Ability to collaborate with teams and individuals throughout BetMGM.
Legal authorization to work in the U.S. without immigration-related employment authorization sponsorship.
Ability to stand or sit and operate computers and other technological devices for extended periods.
Applicable employees must obtain and maintain gaming licenses required for the role and comply with and support BetMGM responsible gambling policies, procedures, and initiatives.

Nice To Haves

Experience supporting AI governance, responsible AI, or emerging technology risk management, particularly for cloud-hosted AI workloads, data protection, model access, third-party AI services, transparency, accountability, and acceptable use.
Relevant certifications such as CISSP, CISM, CISA, CCSP, AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, CCSK, or similar.

Responsibilities

Lead the enterprise cloud security program across AWS and Microsoft Azure, including strategy, roadmap development, operating model maturity, risk-reduction priorities, and measurable security outcomes.
Lead, coach, and direct a cybersecurity team responsible for cloud and corporate IT security activities, aligning work with business priorities, risk-reduction goals, regulatory requirements, and enterprise standards.
Design, implement, and maintain secure AWS and Azure architectures using secure-by-design principles, cloud-native capabilities, and industry frameworks and provider guidance.
Provide hands-on technical leadership for cloud security controls covering identity and privileged access, network segmentation, encryption and key management, secrets management, logging, monitoring, vulnerability management, workload protection, and incident response readiness.
Develop and automate preventive and detective cloud security controls using infrastructure as code, policy as code, cloud-native policies, continuous monitoring, and scalable guardrails.
Manage cloud security posture management and cloud-native application protection capabilities to identify misconfigurations, excessive permissions, exposed resources, vulnerable workloads, compliance gaps, and emerging risks.
Conduct and oversee cloud security reviews, architecture assessments, threat modeling, control validation, and risk assessments for cloud workloads, integrations, third-party services, and business initiatives.
Prioritize remediation according to business impact, exploitability, regulatory relevance, data sensitivity, operational urgency, and organizational risk tolerance.
Define and maintain cloud security standards, procedures, reference architectures, exception processes, operational playbooks, metrics, dashboards, and executive reporting.
Collaborate with governance, risk, compliance, legal, privacy, audit, and business stakeholders to align cloud security with internal policies, laws, regulatory expectations, contractual obligations, and industry standards.
Support cloud incident response readiness by defining escalation processes, improving telemetry, validating detection use cases, maintaining runbooks, and working with security operations during investigation and remediation.
Evaluate security implications of emerging cloud technologies, AI-enabled services, automation, and third-party cloud solutions, including risks involving sensitive data, model access, configuration, identity permissions, and acceptable use.
Monitor developments in AWS and Azure security services, cloud security, threat intelligence, AI governance, and regulation, and recommend improvements to the organization’s cloud security posture.