Summary

The Business Systems Analyst will coordinate and participate in incident response activities, control audits, and data analysis. This position will assist in conducting regular security and risk assessments of applications, software and hardware platforms. This role will serve as a point of contact and security/compliance facilitator for business units across the Gaming Enterprise. The Analyst will focus on risks related to compliance and regulatory requirements as well as the Gaming Enterprise policies or security best practices. This Analyst will work as part of the Information Security team to analyze, document, and coordinate security assessments of both internal business units as well as 3rd party business partners. Additionally, the incumbent will serve as liaison with business units to ensure tasks and other deliverables are satisfied in a timely manner. The Analyst manages the selection, solution design, integration, implementation, enhancement and support of proprietary and third party application packages for security. The Analyst manages security projects of diverse scope and complexity and serves as the liaison between business, technology and external vendors.

Supervisory Responsibilities 

This job has no supervisory responsibilities.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Assist with the assessment of vendors, third parties, applications and internal IT processes in terms of security, compliance and regulations
• Coordinate with IT, Internal Audit and other business partners to assess and improve the Gaming Enterprise’s overall security posture
• Identify how actual work differs from best practices and documented policies and procedures.
• Assist with creating and documenting Information Security policies and procedures
• Gather and communicate regular metrics, reports and status updates on Information Security compliance efforts
• Assist in the analysis of compliance standards to ensure the Gaming Enterprise meets regulatory requirements; ADOG, NIGC, PCI-DSS, HIPAA etc.
• Analysis of business and user need, documentation of requirements, and translation into proper system requirements specifications.
• Work closely with technical staff to document and implement security controls within the Gaming Enterprise environment to support and improve overall security and compliance posture
• Assist with regular gap analysis of internal security controls
• Contribute as a member of the Security Incident Response Team to analyze and document security events and response.
• Assist in performing audits and reviews of all processes implemented to support or comply with the Gaming Enterprise Information Security policies
• Assist with technical and non-technical teams to analyze and respond to identified security vulnerabilities and control weaknesses.
• Provide support and guidance to business and technical stakeholders regarding information security requirements and recommendations
• Assist with communication of security initiatives across the Enterprise
• Perform other duties and responsibilities as assigned by manager.
• Responsible for analysis of business processes; assessment of the scope and impact of the business needs; identification, prioritization and documentation of business requirements; identification and documentation of functional requirements; development of workflow, gap analysis and system specifications; development of current and future operational scenarios; and working with the client and project team to ensure proper implementation of business requirements.
• Creates test plans, test scenarios, and expected results and works closely with clients to plan and conduct user acceptance tests.
• Ensures disaster recovery is in place for mission critical applications.
• Advises on technical direction and recommends new cost effective technological advances to solve business problems.
• Defines and writes procedures for users and support staff to describe installation, troubleshooting and operating procedures and writes technical documentation as required.
• Responsible for maintaining up-to-date knowledge of HIPAA security requirements, as required by employees exposed to ePHI data, by attending mandatory training provided annually by Casino Arizona.
• Responsible for maintaining up-to-date knowledge of Credit Card Compliance requirements commonly known as PCI (Payment Card Industry) Compliance by attending training provided by Casino Arizona, at least once a year or more if required by management. Signature verification of course attendance will be required.
• Responsible for following the PCI (Payment Card Industry) Compliance regulations to protect card holder data and adhere to the standards to protect guests’ private card information. This includes, but is not limited to, observing and reporting inappropriate card handling activity, of either customers or by employees, as defined by PCI.

Education and/or Experience:

• Bachelor’s degree in Information Technology, Computer Science or related discipline (or an equivalent of education and experience)
• Professional certification in business analysis or project administration is a plus (eg: CBAP or PMI-PBA)

Computer Skills

Must have experience with Visio, MS Office Suite and SharePoint. Software application and database development experience a plus. SQL Query skills preferred.

Required Qualifications

• The Business Systems Analyst must have strong project management, business analysis and technology skills to guide business users through the project lifecycle of application selection through implementation in support of business needs.
• Experience in managing projects utilizing standard project management disciplines and tools.
• Must have knowledge of requirements gathering, system design, system configuration, deliverables documentation, system test planning and execution, user training and procedures, and overall project lifecycle.
• Project accounting and budgeting skills are required.
• Demonstrated experience implementing and supporting enterprise third party packaged software.
• Strong analytical, technical and problem solving skills required.
• Proven customer service/user support skills and experience working with vendor support personnel.
• Must have the ability to resolve complex, functional, system issues.
• Must have the ability to work well with team members, external and internal, to develop new innovative solutions and have strong negotiation and conflict resolution skills.
• Must be able to communicate effectively and tactfully with all levels of personnel, both in verbal and written.
• Ability to manage multiple tasks, demonstrates flexibility when dealing with changing business priorities, and is a self-starter.
• Must be able to handle multiple tasks with changing priorities, communicating changes in scope and schedule to all parties concerned.
• Operates under minimal supervision, with wide latitude for independent judgment.
• Must be able to maintain confidentiality.

Preferred Qualifications

• Industry-specific knowledge in Hospitality / Hotel Management (Agilysys) Gaming (Scientific Games), Back Office Applications.
• Must be able available to work flexible hours 7x24, including hours beyond the normal schedule when necessary to support the Business Customer
• Occasionally, travel may be required as needed.
• Skilled at business analysis and project management
• Strong written and verbal communications skills
• Ability to multi-task and prioritize work effectively
• Ability to work collaborate with auditors and assessors
• Ability to maintain confidentiality
• Demonstrated ability to work independently and as part of a team
• Strong analytical, communication and documentation skills
• Flexible work schedule and off-hours availability as needed
• Positive attitude, self-motivated team player with a learning mind-set
• Constant desire to learn and challenge others to find the best solution, not afraid of failure
• The following experience is considered a plus for candidates interested in this role:
  • Experience analyzing risk assessments, security audits, and delivering IT compliance
  • Working knowledge of common compliance standards, e.g., PCI-DSS, ISO, ADOG, NIGC, etc.
  • Knowledge and experience using Governance Risk and Compliance (GRC) solutions
  • Familiarity with IT security frameworks (CIS20, NIST, etc.) and general IT security concepts
  • Experience working in a Gaming or other highly regulated environment

Language Skills

Must be able to read, write and understand English.