Security Compliance Operations Lead

At Rockstar Games, we create world-class entertainment experiences.

Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry.

Rockstar is on the lookout for a talented Security Compliance Operations Lead to manage and mature a security assurance function within Security GRC.

This role will help ensure key security safeguards are operating effectively across Rockstar’s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction.

This is a full-time, in-office position based in Rockstar’s large game development studio in Bangalore, India.

WHAT WE DO

• The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk.
• We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures to safeguard our business and protect our players.
• We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incidents and event monitoring solutions.
• We have a passion for identifying threats and vulnerabilities and coming up with clever solutions to mitigate or remediate those risks.

RESPONSIBILITIES

• Ensure key security safeguards are operating operate effectively across Rockstar’s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction.
• Lead and develop the Security Compliance Operations function, including control assurance strategy, operating model, validation cadence, evidence management, reporting, remediation follow-up, and stakeholder engagement.
• Build and maintain a practical control assurance program that leverages automation to improve coverage, reduces manual effort, increases repeatability, and strengthens control of health reporting.
• Assess control effectiveness and translate results into clear findings, risk-based priorities, remediation actions, and leadership reporting.
• Partner with cross-functional stakeholders to prioritize remediation and drive accountability for control gaps.
• Define and maintain repeatable validation of workflows, control test procedures, evidence collection methods, operational standards, and control health metrics.
• Support audits, assessments, and compliance reviews by ensuring control evidence is accurate, organized, repeatable, and aligned to applicable internal standards and external frameworks.
• Contribute to broader Security GRC initiatives, including risk management, standards development, exception management, control libraries, and continuous improvement of security governance processes.

REQUIREMENTS

• Bachelor’s degree preferably in Computer Science, Cybersecurity, Information Systems, or a related field.
• 7+ years of experience in information security, security compliance, security operations, GRC, technology risk management, or related cybersecurity role.
• Proven track record leading continuous control assurance and readiness, spanning information gathering, evidence collection, gap analysis, and remediation tracking.
• Hands-on experience designing, operating, or assessing security controls across enterprise technology environments.
• Experience leading the strategy, roadmap, and maturation of compliance, control assurance, or risk management programs, including collaborating with or directing automation engineers to translate manual testing into scalable, tool-driven workflows that balance automated and manual verification for measurable operational reporting.
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or other relevant certifications.
• Strong written and verbal communication skills.
• Strong experience applying CIS Critical Security Controls and frameworks to security assurance activities across identity and access management, endpoint, vulnerability, cloud, network, logging, incident response, and third-party risk domains.

HOW TO APPLY

Please apply with a resume and cover letter demonstrating how you meet the skills above. If we would like to move forward with your application, a Rockstar recruiter will reach out to you to explain next steps and guide you through the process.

Rockstar is committed to creating a work environment that promotes equal opportunity, dignity and respect. In line with this commitment, Rockstar will provide reasonable accommodations to qualified job applicants with disabilities during the recruitment process in order for such applicants to be considered for the position for which they are applying, as well as to qualified employees to enable them to perform the essential functions of their roles. If you need more information about Rockstar’s reasonable accommodation policies or process, or need to request an accommodation, please notify your recruiter during the interview process.

If you’ve got the right skills for the job, we want to hear from you. We encourage applications from all suitable candidates regardless of age, disability, gender identity, sexual orientation, religion, belief, race, or any other protected category.

#LI-PM1

Bachelor’s degree preferably in Computer Science, Cybersecurity, Information Systems, or a related field. 7+ years of experience in information security, security compliance, security operations, GRC, technology risk management, or related cybersecurity role. Proven track record leading continuous control assurance and readiness, spanning information gathering, evidence collection, gap analysis, and remediation tracking. Hands-on experience designing, operating, or assessing security controls across enterprise technology environments. Experience leading the strategy, roadmap, and maturation of compliance, control assurance, or risk management programs, including collaborating with or directing automation engineers to translate manual testing into scalable, tool-driven workflows that balance automated and manual verification for measurable operational reporting. Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or other relevant certifications. Strong written and verbal communication skills. Strong experience applying CIS Critical Security Controls and frameworks to security assurance activities across identity and access management, endpoint, vulnerability, cloud, network, logging, incident response, and third-party risk domains.