Sr Security Compliance Analyst

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

At Hasbro, our mission is to inspire imagination in children and adults alike. We believe the best experiences come from people who love what they do, in an environment that values them and their ideas. We ensure that everyone has the opportunity to contribute to our collective success, whatever their role. As a leading global play and entertainment company, we help enrich a catalog of games and toys that has inspired generations. You get to play your part as a valued member of an open and dedicated team within a magical world of play and imagination.

The Sr Security and Compliance Analyst plays a key role in safeguarding Hasbro's technology landscape by ensuring our security controls are practical, measurable, and aligned with regulatory requirements. This role focuses on improving how compliance is managed, tracked, and reported through efficient processes and data informed insight.

Primary Responsibilities

• Develop and maintain information security policies and standards aligned to frameworks such as ISO 27001, NIST, SOX, GDPR, and HIPAA, ensuring requirements are clearly understood and actionable.
• Translate regulatory requirements into practical, measurable controls and work with process owners to implement and sustain them effectively.
• Improve and streamline compliance processes by collaborating with system owners and team members to automate evidence collection, control tracking, and reporting where possible.
• Support internal and external audits by coordinating documentation across teams and demonstrating control effectiveness through clear, organized evidence.
• Develop and lead phishing simulation campaigns and collaborate with leaders to address behavioral risk trends and strengthen awareness.
• Develop targeted security awareness content tailored to different employee audiences to promote a strong and balanced security culture.
• Perform vendor risk assessments and broader security risk analyses in coordination with business and technology teams.
• Build clear, executive ready reports and dashboards that provide relevant insight into compliance posture and human risk trends.
• Identify and implement AI-enabled automation opportunities to streamline audit, compliance, and control validation processes.

What You Will Bring

• Degree in Computer Science, Information Systems, or related field or equivalent experience.
• 5 or more years of experience in information security, IT compliance, or risk management.
• Strong working knowledge of regulatory standards including ISO 27001, the NIST Cybersecurity Framework, SOX, GDPR, and HIPAA.
• Experience developing and maintaining security policies and translating requirements into operational controls.
• Hands on experience running phishing simulations and analyzing awareness metrics.
• Ability to interpret data and identify trends that inform risk decisions.
• Experience improving or automating recurring compliance or audit processes preferred.
• Strong written and verbal communication skills with the ability to create concise, executive ready summaries.
• Collaborative approach and ability to work effectively across technical and non technical teams.

Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.

Pay Range

$109,500—$164,300 USD

Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:

• Health & Wellness
• Time Off to Recharge
• Financial Well-being
• Life & Family Support
• Volunteer and Community Initiatives
• Learning & Development
• Exclusive Perks

Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

- Develop and maintain information security policies and standards (ISO 27001, NIST, SOX, GDPR, HIPAA). - Translate regulatory requirements into practical, measurable controls. - Improve and streamline compliance processes, including automation of evidence collection and reporting. - Support internal and external audits. - Develop and lead phishing simulation campaigns. - Develop targeted security awareness content. - Perform vendor risk assessments and broader security risk analyses. - Build executive-ready reports and dashboards for compliance posture and human risk trends. - Identify and implement AI-enabled automation for audit, compliance, and control validation. - 5+ years of experience in information security, IT compliance, or risk management. - Strong working knowledge of ISO 27001, NIST, SOX, GDPR, and HIPAA. - Hands-on experience running phishing simulations and analyzing awareness metrics. - Ability to interpret data and identify trends. - Strong written and verbal communication skills.