Business Solution Security Architect

J  o  b    D  e  s  c  r  i  p  t  i  o  n

Job Profile Title:

Business Solution Security Architect

Job Code:

11632

Profile Title:

11632 Business Solution Security Architect

Grade / Band:

IC5

FLSA Status:

Exempt

The Director, Information Security Business Solution Architect (ISBSA) analyzes business and technology stakeholders' unique information security needs and designs solutions in conjunction with the Company's mission, vision, and strategy. Working closely with the Cybersecurity, Enterprise Architecture, Governance, Risk and Compliance, Security Engineering and Identity & Access Management (IAM) teams, this role develops and delivers customized business solution architecture and design, and supports program delivery for critical Technology Risk Management enterprise programs.

The BSA will bridge the gap between business innovation and technical resilience by translating complex security needs into requirements and will ensure the alignment of Information Security requirements with business-critical initiatives, ensuring that every platform and program is "secure by design".  There is the opportunity to collaborate with Business Units and COEs to drive and support Product Development and implementation, and design and advocate for high-performance security solutions that empower business units rather than hinder them. The candidate is the primary liaison responsible for the "voice of the customer" (the business) within the security organization, ensuring that all policies, standards, and services are integrated seamlessly into the business lifecycle.

This role is focused on the continuous delivery of projects, products, security standards and managing a complex landscape of regulatory requirements including SOX, PCI-DSS, and Gaming regulations. The BSAs mission is to ensure that all technical products not only meet industry best practices but also serve as scalable, compliant assets that protect the organization's reputation and operational integrity.

Acts as the key liaison between Information Security, relevant business units, and outside vendors to understand and translate business requirements to functional and technical solutions to achieve commercial objectives.  Builds and continuously develops effective working relationships with the relevant business stakeholders.

Proactively identifies information security deficiencies or opportunities for improvement and facilitates development of pragmatic solutions. Monitors information security trends internal and external to the Company and keeps LOB leadership informed about information security-related trends

Analyze business and technology stakeholders' information security needs and design solution architecture that meets MGMRI's security requirements and policies, keeping security seamless and user-friendly.

Design, develop, and communicate Information Security policies, standards, controls, solutions, and services in response to business requirements, leading continuous communication of these requirements to the business.

Analyze infrastructure and application architecture through security-focused reviews to ensure our developer and business technology teams maintain high cyber security standards.

Develop techniques, procedures, and analytical frameworks for conducting cyber security risk assessments, and evaluate critical business processes for potential impact on various business units.

Define and own the long‑term product vision, roadmap, and strategy, ensuring alignment with business goals, enterprise architecture standards, and regulatory/security requirements

Identification of opportunities for product consolidation, optimization, automation, or rationalization to reduce technical debt and improve user experience.

Analyze and design technical products, platforms, programs, and solutions in partnership with enterprise architecture to ensure adherence to MGM's Information Security Policies and Standards and regulatory and internal requirements. These requirements include but not limited to Sarbanes-Oxley, payment card industry standards, and Gaming regulations.

Serve as a business unit subject matter expert and escalation point, providing technical analysis and recommendations on cyber security processes, initiatives, and policy questions.

Communicate with other business units to translate Information Security requirements into practical guidance, driving the seamless execution of evolving policies.

Contribute technical analysis to the evolution of information security maturity in alignment with organizational strategy and objectives for security and IT.

Performs other job-related duties as requested

Proof of eligibility to work in the United States

Bachelor's Degree

Information Systems/Technology, Computer Science, Computer Engineering, or a related field

Required

8+ Years of Prior Relevant Experience

Experience in a variety of information security disciplines

Required

Familiar with IT governance and compliance concepts, practices and procedures, which includes IT General Controls, PCI-DSS, SOX and Gaming MICS (Minimal Internal Control Standards).

Required

Ability to lead and prioritize in a high-pressure environment.

Required

CISSP, CISM and/or CISA highly desired.

Preferred

Previous experience building, deploying, supporting, maintaining, troubleshooting and communicating Information Security solutions with business stakeholders and vendors.

Preferred

Previous experience working in a similar industry such as hospitality or gaming.

Preferred

Proven experience defining and executing multi-year product roadmaps for enterprise-level platforms, with a specific focus on balancing technical debt, security requirements, and business innovation.

Preferred

Previous experience in Project Management and/or Product management.

Preferred

Proven ability to communicate technical concepts to non-technical people to enhance understanding and drive to decisions that lead to positive outcomes.

Proven ability to collaborate, build relationships and influence individuals at all levels in a matrix-management environment (as well as external vendors and service providers) to ensure alignment.

Strong organizational skills, the ability to perform under pressure and management of multiple priorities with competing demands for resources

Strong analytical, data processing and problem-solving skills.

Proficiency in process formulation and continual improvement.

Written and oral communication skills including interaction with business partners, vendors, and technical staff.

Demonstrated track record in the development and deployment to production of increasingly more complex solutions.

Knowledge of networking concepts and communication protocols.

Ability to organize, prioritize and delegate workload and withstand the pressure of multiple work assignments and short notice deadlines.

Proven ability to provide Product support and direction across the Product Lifecycle.

Balancing

X

Bending

X

Carrying 10 pounds

X

Clear speech - simple

X

Clear speech - complex

X

Climbing

X

Distant vision

X

Driving

X

Flexibility - upper body

X

Flexibility - lower body

X

Hearing/Listening

X

Kneeling

X

Lifting 10 pounds

X

Near vision

X

Normal vision

X

Pushing/Pulling

X

Reaching

X

Sitting

X

Standing

X

Typing

X

Walking

X

Communication - verbal

X

Communication - written

X

Confined area

X

Contacts - works alone

X

Contacts - works around others

X

Contacts - works with others

X

Exposure to dust / dirt

X

Exposure to fumes / odors

X

Extreme cold

X

Extreme heat

X

Fast pace

X

Hazardous conditions - chemicals

X

Hazardous conditions - high structures

X

Hazardous conditions - high voltage

X

Indoors

X

Noise levels - low to moderate

X

Noise levels - high

X

Office conditions

X

Outdoors

X

Restricted area

X

Shifts

X

Smoke

X

Travel

X

Wet/Humid

X

Analytical

X

Clerical

X

Comprehension

X

Crisis incidents

X

Customer service

X

Decision making

X

High pressure

X

Judgment

X

Long hours

X

Math skills - advance

X

Math skills - basic

X

Organization

X

Reading - simple

X

Reading - complex

X

Repetition

X

Tight deadlines

X

Writing - simple

X

Writing - complex

X