Resorts World NYC operates the only casino in New York City, a high-traffic entertainment complex that processes millions of guest interactions annually. The venue runs two distinct gaming floors - Times Square Casino and Fifth Avenue Casino - loaded with slot machines, electronic table games, and live dealer setups, plus high-limit rooms. Over 10 million guests pass through each year, generating a payments and identity verification surface at serious scale.
The threat model here is multifaceted: point-of-sale systems across gaming floors, high-volume financial transactions, patron identity and loyalty databases, and physical security integrations all require defense-in-depth. A $5.5 billion expansion is underway, meaning the attack surface is actively growing. The operation feeds nearly $5 billion into New York's state education system, making regulatory compliance and audit readiness non-negotiable.
Resorts World is part of a global hospitality and gaming group with presence in Malaysia, Singapore, the United Kingdom, and the Bahamas, so security work likely spans cross-border data flows and alignment with multiple regulatory regimes. The casino vertical carries specific compliance obligations around anti-money laundering, know-your-customer protocols, and gaming commission oversight - domains where security engineering and GRC intersect directly.
