Senior Manager, Information Security - Cloud

Discover What’s Possible at BetMGM

Ready to make your career legendary? Join us as we bring the magic of Vegas to our players. The BetMGM team has over 1,400 talented members, revolutionizing sports betting and online gaming in the United States and Canada. We’re a brand with technology at our hearts and the most driven and focused talent in the business.

As a valued team member, we’re committed to giving you the resources and support you need to thrive. Our benefits and perks include:

• Medical, Dental, Vision, Life, and Disability Insurance

• 401(k) with company match

• Pre-tax spending accounts including health care FSA and commuter savings

• Flexible paid time off

• Professional development reimbursement and ongoing skills training opportunities

• Employee resource groups

• Swag, ticket giveaways, and more!

At BetMGM, we recognize that every individual plays a meaningful role in our success. That’s why we’re committed to building a respectful, inclusive workplace. It’s the strategy behind every win. By meeting people where they are, we create a culture of belonging where everyone can thrive and a workplace that reflects our values, our people, and our drive to win. 

The Opportunity

BetMGM is seeking a Sr Manager, Information Security (Cloud) to lead the continued advancement of our enterprise cloud security program across AWS and Microsoft Azure. This role will provide strategic direction, hands-on technical expertise, and operational leadership for cloud security architecture, engineering, governance, risk reduction, and control automation. The Sr Manager will partner closely with technology, infrastructure, and business stakeholders to ensure cloud platforms, workloads, services, and emerging technologies are designed, deployed, and operated securely in alignment with enterprise standards, regulatory expectations, and BetMGM’s overall risk posture. This position is under the supervision of the Sr Director Cyber & IT Risk.

The Sr Manager, Cloud Security will bring a strong technical foundation in AWS and/or Azure security, a risk-based mindset, and the ability to translate complex cloud security requirements into practical, scalable, and repeatable controls. Responsibilities include leading cloud security strategy and execution across identity and access management, network security, data protection, encryption, logging, monitoring, vulnerability management, cloud workload protection, DevSecOps, cloud security posture management, incident response readiness, and compliance enablement. The candidate will be expected to stay current with the evolving cybersecurity, cloud, AI, regulatory, and threat landscape and use that knowledge to strengthen BetMGM’s security posture, reduce risk, and enable secure cloud adoption at scale

• Lead the enterprise cloud security program across AWS and Microsoft Azure, including strategy,

roadmap development, operating model maturity, risk reduction priorities, and measurable

security outcomes.

• Lead, coach, and provide day-to-day direction to a cybersecurity team responsible for cloud and

corporate IT security activities, ensuring work is aligned to business priorities, risk reduction

goals, regulatory requirements, and enterprise security standards.

• Design, implement, and maintain secure cloud architectures across AWS and Azure using

secure-by-design principles, cloud-native capabilities, and industry frameworks such as NIST, ISO

27001, PCI DSS, CIS Benchmarks, and cloud provider well-architected guidance.

• Provide hands-on technical leadership for AWS and Azure security controls across identity and

access management, privileged access, network segmentation, encryption and key

management, secrets management, logging, monitoring, vulnerability management, workload

protection, and incident response readiness.

• Develop and automate preventive and detective cloud security controls using infrastructure as

code, policy as code, cloud-native policies, continuous monitoring, and scalable guardrails that

enable secure and efficient cloud adoption.

• Manage cloud security posture management and cloud-native application protection capabilities

to identify misconfigurations, excessive permissions, exposed resources, vulnerable workloads,

compliance gaps, and emerging cloud risks across AWS and Azure.

• Conduct and oversee cloud security reviews, architecture assessments, threat modeling, control

validation, and risk assessments for new and existing cloud workloads, integrations, third-party

services, and business initiatives.

• Prioritize remediation of cloud security risks based on business impact, exploitability, regulatory

relevance, data sensitivity, operational urgency, and alignment to BetMGM’s risk tolerance.

• Define and maintain cloud security standards, procedures, reference architectures, exception

processes, operational playbooks, metrics, dashboards, and executive reporting to drive

consistent and repeatable cloud security practices.

• Collaborate with governance, risk, compliance, legal, privacy, audit, and business stakeholders

to ensure AWS and Azure security practices align with internal policies, applicable laws,

regulatory expectations, contractual obligations, and industry standards.

• Support cloud incident response readiness by defining escalation processes, improving cloud

telemetry, validating detection use cases, maintaining runbooks, and partnering with security

operations teams during investigation and remediation activities.

• Evaluate the security implications of emerging cloud technologies, AI-enabled services,

automation, and third-party cloud solutions, including risks related to sensitive data exposure,

model access, service configuration, identity permissions, and acceptable use.

• Stay current with AWS and Azure security services, cloud security trends, threat intelligence, AI

governance developments, and regulatory changes, and recommend improvements that

strengthen the organization’s cloud security posture.

Essential Functions

• Must be able to stand or sit and operate computers and other technological devices for

extended periods of time

Qualifications

• 8+ years of information security experience, including significant hands-on experience in cloud

security architecture, engineering, operations, governance, or risk management.

• Demonstrated experience securing either or both AWS and Microsoft Azure environments,

including cloud-native security services, enterprise landing zones, multi-account or multi-

subscription governance, and workload protection.

• Experience leading, coaching, prioritizing work for, or providing performance input to direct

reports.

• Bachelor’s or advanced degree in technology, cybersecurity, information systems, engineering,

or a related field, or equivalent work experience.

• Strong working knowledge of cloud security architecture and controls across IAM, privileged

access, network security, encryption, key management, logging, monitoring, vulnerability

management, cloud workload protection, endpoint protection, secrets management, and

incident response.

• Experience with cloud security posture management, cloud-native application protection

platforms, infrastructure as code, policy as code, CI/CD security, container security, serverless

security, and DevSecOps practices.

• Strong working knowledge of AWS and/or Azure security capabilities such as AWS IAM, AWS

Organizations, AWS Security Hub, AWS Config, AWS GuardDuty, AWS KMS, Microsoft Entra ID,

Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, and related

monitoring and protection services.

• Strong understanding of security and technology control frameworks, including NIST, ISO 27001,

CIS Controls, CIS Benchmarks, ISACA/COBIT, PCI DSS, and other applicable regulatory or industry

standards.

• Experience conducting cloud security reviews, architecture assessments, threat modeling,

control validation, risk assessments, remediation planning, and audit support for cloud

environments.

• Experience supporting AI governance, responsible AI, or emerging technology risk management

programs is a plus, especially related to cloud-hosted AI workloads, data protection, model

access, third-party AI services, transparency, accountability, and acceptable use.

• Relevant certifications such as CISSP, CISM, CISA, CCSP, AWS Certified Security – Specialty, AWS

Solutions Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified:

Cybersecurity Architect Expert, CCSK, or similar are preferred.

• Excellent communication and interpersonal skills, with the ability to explain technical cloud

security risks and recommendations to engineering teams, business stakeholders, auditors, and

senior leadership.

• Detail-oriented mindset with a focus on accuracy, consistency, control quality, and measurable

risk reduction.

• Ability to work independently, manage multiple priorities, make risk-informed decisions, and

meet deadlines in a fast-paced environment.

• High level of integrity and professionalism with a commitment to maintaining confidentiality and

upholding high ethical standards in the conduct of all duties.

• Ability to collaborate with high-performing teams and individuals throughout BetMGM to

accomplish common goals.

Applicants must possess legal authorization to work for our company in the U.S. without the need for immigration sponsorship. At this time, this role is not eligible for immigration-related employment authorization sponsorship including H-1B, O-1, E-3, TN, OPT, etc.

Compensation

The pay range for this position is as follows:

136,300.00--181,800.00

Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate.  This position is also eligible for participation in a performance-based bonus plan.

Gaming Compliance & Licensing Requirements 

As an online gaming company, BetMGM is required to comply with state gaming regulations which includes licensing obligations.  Applicable employees must be licensed by at least one jurisdictional agency, although certain positions require licensing by multiple agencies.  Failure to become licensed or maintain licensure with each agency as required for the role may result in termination of employment.  Please note that the licensing process includes comprehensive background checks which may include a review of criminal records, financial history, and personal background verification.

In addition, candidates must comply with and support BetMGM's responsible gambling policies, procedures, and initiatives.

About BetMGM

BetMGM is revolutionizing sports betting and online gaming in the United States and Canada. We are a partnership between two powerhouse organizations—MGM Resorts International and Entain Group. You know our name through our exciting portfolio of brands including BetMGM Casino, BetMGM Sportsbook, Borgata Online, Party Casino and Party Poker. We aim to bring our ideas into action and find ways to deliver the best quality in gaming platforms.

BetMGM LLC is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified individuals, regardless of race, religion, gender, gender identity, age, marital status, national origin, sexual orientation, citizenship status, veteran status, disability, or any other legally protected status. As an organization, we are unwavering in our commitment to maintaining a discrimination-free work environment, and fostering a culture of inclusivity, belonging and equal opportunity for all employees and applicants.

If you need assistance or accommodation with your application due to a disability, you may contact us at [email protected].

This job description is not an exclusive or exhaustive list of duties a person in this position may be asked to perform from time to time.

#LI-REMOTE

#LI-JLEE