Hospitality Risk Management Jobs in New York (NOW HIRING)

TKO Group Holdings, Inc. (NYSE: TKO) is a premium sports and entertainment company. TKO owns iconic properties including UFC, the world’s premier mixed martial arts organization; WWE, the global leader in sports entertainment; and PBR, the world’s premier bull riding organization. Together, these properties reach 1 billion households across 210 countries and territories and organize more than 500 live events year-round, attracting more than three million fans. TKO also services and partners with major sports rights holders through IMG, an industry-leading global sports marketing agency; and On Location, a global leader in premium experiential hospitality.

The Senior Director, IT Governance, Risk and Compliance, is responsible for leading and executing core elements of TKO’s IT compliance program, with a focus on SOX and IT General Controls, audit readiness, governance documentation, benchmarking against recognized security frameworks, third‑party assurance, and technical data reconciliation activities. Reporting to TKO’s SVP of IT Business Systems, this role will partner closely with Legal, IT, Security, Internal Audit, Finance, and business stakeholders to strengthen TKO’s control environment, support enterprise compliance obligations, help lead risk management, and drive consistent execution across systems and processes. This role requires both strategic oversight and hands‑on execution. The successful candidate will bring deep experience in IT compliance and controls, strong technical data management capability, and the ability to operate effectively across a complex environment with disparate systems, inconsistent data structures, and evolving business needs.

• IT Compliance Planning and Program Execution
• Establish an overall compliance strategy and roadmap which includes selecting and implementing an enterprise Governance, Risk and Compliance platform to automate RCM authoring and drive evidence collection workflows.
• Own prioritization, tracking, and delivery of key compliance initiatives including executive status updates regarding the program status and health.
• Provide subject matter expertise and guidance to system leads and business partners on compliance expectations, control execution, documentation standards, and system implementation lifecycle considerations.
• Advise and ensure PCI compliance is being sustained by in‑scope business units.
• Oversee internal resources, project‑based support, or cross‑functional contributors in connection with audit preparation, SOC reporting, PCI compliance adherence, and compliance execution.
• Governance, Risk, and Documentation Management Coordination across other risk management stakeholder functions (e.g. Legal, Finance, Internal Audit, Corporate IT, BU level IT organizations) to accomplish the following:
• Support and evolve existing IT Risk Management Program to ensure controls address Technology, Cybersecurity, Data, Resiliency/Recovery, and Emerging (AI, etc.) risks.
• Establish IT compliance requirements.
• Identify and eliminate redundant risk management processes and/or controls.
• Understand and support the risk management objectives of other risk management functions.
• Maintain current inventories of in‑scope systems and applications that are required to support key regulatory requirements (e.g., ICFR), in‑flight IT projects, and relevant stakeholders.
• Develop the framework and standards for core IT compliance documentation and templates, including Risk and Control Matrices, process flows, system interface documentation, and remediation plans.
• Determine the review criteria and cadence for assessing documentation prepared by system leads and control owners for quality, completeness, and alignment with compliance requirements.
• Establish policies, procedures, and governance practices that support effective and sustainable compliance execution.
• SOX, IT General Controls, and Audit Support: Act as primary point of contact for IT compliance supporting internal and external audits, including SOX and IT General Controls testing.
• Organize, collect, and maintain evidence required for audit requests and management review.
• Liaise with internal stakeholders and auditors to ensure timely and accurate delivery of required materials.
• Create repeatable processes for the identification, tracking, and remediation of control gaps, deficiencies, and related action plans.
• Create and support an IT risk assessments, control reviews, and compliance evaluations process.
• SOC Reporting and Third‑Party Assurance: Manage the lifecycle of Service Organization Control reporting.
• Ensure completion of management evaluation documentation related to third‑party controls and reliance.
• Support assessment of third‑party compliance risk in areas such as access management, vendor management, and change management.
• Technical Data Reconciliation and Compliance Operations: Partner with IT and Finance colleagues to monitor adherence with internal policies and key metrics regarding control environment activities (e.g. reconciliation activities, data analysis, data hygiene, etc.).
• As part of the user termination process, work closely with the infrastructure and application system owners to ensure terminations are completed timely and if any are missed (outside the acceptable window), a full look back analysis is conducted and send confirmation materials to internal audit.
• Establish continuous monitoring processes.
• Monitoring, Reporting, and Training: Monitor changes in relevant compliance, privacy, and security requirements and support translation of those requirements into practical business processes.
• Prepare reporting for management regarding compliance status, risks, remediation efforts, and control effectiveness.
• Collaborate with Internal Audit, financial controls and IT in the development of training materials related to IT compliance, data privacy, and security practices.
• Support awareness efforts for IT teams and business stakeholders to promote a culture of accountability and compliance.
• Supervisory Responsibilities: This role may oversee internal resources, project‑based support, or cross‑functional contributors in connection with audit preparation, SOC reporting, PCI compliance adherence, and compliance execution.

• Bachelor’s degree in Computer Science, Information Systems, Information Security, Accounting, Finance, or a related field.
• 10+ years of significant progressive experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance function.
• Demonstrated experience supporting SOX and IT General Controls in a complex environment.
• Experience developing and enhancing Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation.
• Strong cross‑functional partnership experience with Legal, IT, Security, Internal Audit, Finance, and business stakeholders.

• Experience supporting compliance activities in connection with mergers and acquisitions.
• Experience managing third‑party assurance processes, including SOC report review and evaluation.
• Familiarity with enterprise control frameworks such as NIST and ISO 27001.
• Experience in a public company or similarly regulated environment.
• Knowledge of SAP (S/4) a plus as this is our Enterprise Finance and Accounting ERP Knowledge.

• Strong knowledge of SOX, ITGC, and general compliance frameworks.
• Advanced proficiency in Excel with a strong working knowledge of PowerQuery, SQL, or similar tools preferred.
• Understanding of access management, vendor management, change management, and audit evidence requirements.
• Strong analytical and problem‑solving skills with exceptional attention to detail.
• Excellent written and verbal communication skills, including the ability to communicate technical concepts to non‑technical stakeholders.
• Strong organizational, project management, and documentation skills.
• High degree of integrity, discretion, and professional judgment.
• Ability to balance strategic priorities with hands‑on execution.
• Certifications Preferred: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC).

Per local requirements and in the interest of transparency, the hourly rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job‑related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short‑ and long‑term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.

Hiring Rate Minimum: $157,500 annually (minimum will not fall below the applicable State/local minimum salary thresholds)

Hiring Rate Maximum: $210,000 annually

TKO is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws regarding non‑discrimination in employment. TKO makes employment decisions based on merit and qualifications, without considering an employee’s or applicant’s race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, marital status, veteran status, or any other basis prohibited under federal, state or local laws governing non‑discrimination in employment in every location in which the Company has facilities. TKO also provides reasonable accommodations for qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state or local laws.

WWE is an integrated media organization and the recognized global leader in sports entertainment. The company consists of a portfolio of businesses that create and deliver original content 52 weeks a year to a global audience. WWE is committed to family‑friendly entertainment on its television programming, premium live events, digital media, and publishing platforms. WWE’s TV‑PG programming can be seen in more than 1 billion households worldwide in more than 20 languages through world‑class distribution partners including NBCUniversal, The CW and Netflix. In the United States, NBCUniversal’s streaming service, Peacock, is the exclusive home to all premium live events, a variety of original programming and a massive video‑on‑demand library. Netflix is the exclusive home for WWE programming around the world, other than select international markets. WWE is part of TKO Group Holdings (NYSE: TKO). Additional information on WWE can be found at wwe.com and corporate.wwe.com.

UFC is the world’s premier mixed martial arts organization (MMA), with more than 700 million fans and approximately 290 million social media followers. The organization produces more than 40 live events annually in some of the most prestigious arenas around the world while broadcasting to over 975 million households across more than 170 countries. UFC’s athlete roster features the world’s best MMA athletes representing more than 80 countries. The organization’s digital offerings include UFC FIGHT PASS, one of the world’s leading streaming services for combat sports. UFC is part of TKO Group Holdings (NYSE: TKO) and is headquartered in Las Vegas, Nevada. For more information, visit UFC.com and follow UFC at Facebook.com/UFC and @UFC on X, Snapchat, Instagram, and TikTok: @UFC.

IMG is a leading global sports marketing agency, specializing in media rights management and sales, multi‑channel content production, distribution, brand partnerships, strategic consulting, digital services, and events management. It powers growth of revenues, fanbases and IP for more than 200 federations, associations, events and teams, including the National Football League, English Premier League, International Olympic Committee, National Hockey League, Major League Soccer, ATP and WTA Tours, the AELTC (Wimbledon), Euroleague Basketball, CONMEBOL, DP World Tour, and The R&A, as well as UFC, WWE and PBR. IMG is a subsidiary of TKO Group Holdings, Inc. (NYSE: TKO), a premium sports and entertainment company.

PBR is the world’s premier bull riding organization. More than 1,000 bull riders compete in more than 200 events annually across the televised PBR Unleash The Beast tour (UTB), which features the top bull riders in the world; the PBR Pendleton Whisky Velocity Tour (PWVT); the PBR Touring Pro Division (TPD); and the PBR’s international circuits in Australia, Brazil and Canada. In 2022, PBR launched the nationally televised PBR Teams league—eight teams of the world’s best bull riders competing for a new championship expanding to 10 teams in 2024—as well as the PBR Challenger Series with more than 60 annual events nationwide. The organization’s digital assets include PBR RidePass on Pluto TV, which is home to Western sports. PBR is a subsidiary of TKO Group Holdings, Inc. (NYSE: TKO), a premium sports and entertainment company. For more information, visit PBR.com, or follow on Facebook at Facebook.com/PBR, X at X.com/PBR, and YouTube at YouTube.com/PBR.

On Location is a global leader in premium experiential hospitality, offering ticketing, curated guest experiences, live event production and travel management across sports, entertainment, fashion and culture. On Location provides unrivaled access for corporate clients and fans looking for official, immersive experiences at marquee events, including the Olympic and Paralympic Games, FIFA World Cup 2026, Super Bowl, NCAA Final Four, and more. An official partner and/or service provider to over 150 iconic rights holders, such as the IOC (the Milano Cortina 2026 and Los Angeles 2028 Olympic Games), FIFA, NFL, NCAA, UFC, WWE and PGA of America, the company also owns and operates a number of its own unique experiences. On Location is a subsidiary of TKO Group Holdings, Inc. (NYSE: TKO), a premium sports and entertainment company.

Zuffa Boxing is a joint ven