Who We Are

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.

The Challenge

As Take-Two continues to operate across a complex, federated environment spanning Corporate, Rockstar, 2K, and Zynga, demonstrating that our security controls are appropriately designed, implemented, and operating effectively is increasingly important. Traditional point-in-time compliance activities are not sufficient to provide sustained confidence in our security posture.

That’s where you come in. We are seeking an experienced Senior Information Security Assurance Analyst to help mature and scale our security assurance program. In this high-impact, consultative role, you will independently lead security audits, assessments, and control reviews across our Labels; evaluate technical evidence and control effectiveness; identify systemic gaps and drive remediation; and translate security requirements and findings into practical, risk-informed guidance. You will partner closely with Security Engineering and Platform teams to improve workflows and automate evidence collection and continuous control monitoring, while serving as a trusted advisor to security, technology, engineering, and business stakeholders. You will also provide functional guidance and mentorship to other members of the team, helping establish consistent, scalable assurance practices across T2.

What You’ll Take On

Independently lead label, studio, and enterprise security audits, assessments, and control reviews from planning and scoping through testing, findings, remediation, and closure.
Evaluate control design, implementation, operating effectiveness, and technical evidence using a risk-based assurance approach.
Identify control deficiencies and systemic weaknesses, assess business and security impact, and develop actionable remediation recommendations.
Independently validate remediation and compensating controls before closing identified findings.
Serve as a key operational lead for internal, external, partner, and regulatory audits and assessments, ensuring evidence is complete, relevant, and sufficient.
Translate regulatory, contractual, and internal security requirements into practical control expectations and assurance activities.
Maintain and continuously improve the enterprise security control framework and its alignment to standards such as NIST CSF, CIS Controls, PCI DSS, and other applicable requirements.
Drive continuous assurance initiatives that move the organization beyond point-in-time compliance toward repeatable and ongoing control validation.
Partner with Security Engineering and Platform teams to streamline evidence collection, reduce manual audit effort, and automate control monitoring and assurance workflows.
Lead high-level discussions with Label and business stakeholders to communicate control deficiencies, navigate competing priorities, and drive risk-informed remediation decisions.
Provide clear, evidence-based reporting to Information Security leadership on control effectiveness, systemic weaknesses, remediation progress, and emerging assurance risks.
Provide subject-matter guidance, mentoring, and peer review to other GRC team members to improve the consistency and quality of assurance activities.
Identify opportunities to standardize, automate, and continuously improve assurance methodologies, processes, and reporting across T2 and its Labels.