Senior Information Security Assurance Analyst

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.

As Take-Two continues to operate across a complex, federated environment spanning Corporate, Rockstar, 2K, and Zynga, demonstrating that our security controls are appropriately designed, implemented, and operating effectively is increasingly important. Traditional point-in-time compliance activities are not sufficient to provide sustained confidence in our security posture.

That’s where you come in. We are seeking an experienced Senior Information Security Assurance Analyst to help mature and scale our security assurance program. In this high-impact, consultative role, you will independently lead security audits, assessments, and control reviews across our Labels; evaluate technical evidence and control effectiveness; identify systemic gaps and drive remediation; and translate security requirements and findings into practical, risk-informed guidance. You will partner closely with Security Engineering and Platform teams to improve workflows and automate evidence collection and continuous control monitoring, while serving as a trusted advisor to security, technology, engineering, and business stakeholders. You will also provide functional guidance and mentorship to other members of the team, helping establish consistent, scalable assurance practices across T2.

• Independently lead label, studio, and enterprise security audits, assessments, and control reviews from planning and scoping through testing, findings, remediation, and closure.
• Evaluate control design, implementation, operating effectiveness, and technical evidence using a risk-based assurance approach.
• Identify control deficiencies and systemic weaknesses, assess business and security impact, and develop actionable remediation recommendations.
• Independently validate remediation and compensating controls before closing identified findings.
• Serve as a key operational lead for internal, external, partner, and regulatory audits and assessments, ensuring evidence is complete, relevant, and sufficient.
• Translate regulatory, contractual, and internal security requirements into practical control expectations and assurance activities.
• Maintain and continuously improve the enterprise security control framework and its alignment to standards such as NIST CSF, CIS Controls, PCI DSS, and other applicable requirements.
• Drive continuous assurance initiatives that move the organization beyond point-in-time compliance toward repeatable and ongoing control validation.
• Partner with Security Engineering and Platform teams to streamline evidence collection, reduce manual audit effort, and automate control monitoring and assurance workflows.
• Lead high-level discussions with Label and business stakeholders to communicate control deficiencies, navigate competing priorities, and drive risk-informed remediation decisions.
• Provide clear, evidence-based reporting to Information Security leadership on control effectiveness, systemic weaknesses, remediation progress, and emerging assurance risks.
• Provide subject-matter guidance, mentoring, and peer review to other GRC team members to improve the consistency and quality of assurance activities.
• Identify opportunities to standardize, automate, and continuously improve assurance methodologies, processes, and reporting across T2 and its Labels.

• Minimum of 5 years of progressive experience in Information Security Assurance, IT Audit, GRC, Security Compliance, or a related control assessment function, preferably within a large-scale, decentralized, or federated environment.
• Proven experience independently planning and executing security audits, assessments, or control reviews, including evaluating control design, implementation, operating effectiveness, and supporting evidence.
• Strong understanding of information security control frameworks and standards, including NIST CSF, CIS Controls, and relevant regulatory or contractual requirements.
• Demonstrated ability to identify control deficiencies, assess risk and business impact, develop remediation recommendations, and validate corrective actions.
• Experience translating technical security findings and control requirements into clear, actionable guidance for technical and non-technical stakeholders.
• Experience working with GRC, workflow, evidence management, and ticketing platforms such as ServiceNow and Jira; experience with ServiceNow GRC/AVR is a plus.
• Demonstrated ability to lead complex initiatives, manage competing priorities, and operate independently with limited managerial oversight.
• Strong analytical and critical-thinking skills, with the ability to challenge insufficient evidence and make defensible, risk-based judgments.
• Exceptional written and verbal communication skills, including the ability to communicate effectively with senior security, technology, engineering, and business stakeholders.
• Proven ability to influence outcomes and drive remediation across federated teams without relying on direct authority.
• Professional information security, audit, or risk certifications (e.g., CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor) are highly preferred.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Business Administration, or a related field; equivalent professional experience will also be considered.

Take-Two Interactive Software, Inc. (“T2”) is proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organization.  Employment at T2 is based on substantive ability, objective qualifications, and work ethic – not an individual’s race, creed, color, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offenses, reproductive health decision, or any other characteristics protected by applicable law.