Engineer - Data Security

The Engineer - Data Security is responsible for technical design and execution of the Data Security Program for Wynn Resorts. Reporting to the Executive Director of Information Security, this role will be key in assuring effective enforcement of company data processing policy and utilization of advanced data security control systems.

Essential Job Duties & Responsibilities

• Develop and implement comprehensive data security strategies and policies
• Operationalize company’s data classification and protection program by defining and enforcing policies, procedures, and access controls based on user, device, and location.
• Implement and manage tools-including sensitivity labeling, data loss prevention, retention, and lifecycle management-to ensure proper classification, protection, and compliant handling of structured and unstructured data
• Enforce technical and procedural controls to govern the movement and exposure of sensitive data within and outside the organization.
• Continuously monitor Wynn-hosted structured data systems to ensure compliance against company requirements including encryption, obfuscation, privileged access, etc.
• Implement and manage encryption solutions for data at rest and in transit across all relevant systems and platforms.
• Restrict the use of production data strictly to its intended environment, preventing unauthorized access or replication in non-production areas.
• Maintain and update inventories of applications and systems that store or process sensitive data.
• Architect and implement identity and access management solutions to ensure appropriate use, permissions, roles and auditing of user activity
• Perform regular penetration testing and vulnerability assessments to proactively identify and address security weaknesses
• Stay up-to-date with the latest data security trends, technologies, and compliance requirements
• Other duties as assigned.

• Must be 21 years of age or older
• Bachelor’s degree in Computer Science, Data Science, Information Security, or / or IT management
• 7+ years of experience in data security or a related field
• Advanced knowledge of data security protocols, encryption techniques, and key management
• Hands-on experience and practical understanding of unstructured data storage systems is required, including Network-Attached Storage systems, SMB/CIFS shares, and cloud-based file collaboration systems (Google Drive, OneDrive, Box, etc.)
• Hands-on experience and practical understanding of structured data storage and processing systems is required, including on premises and cloud-based Database Management Systems (MySQL, MSSQL, OracleDB, etc.)
• Practical understanding of permissions, roles, groups, users, and Non-Human Identity (NHI) as it relates to authorized and unauthorized access to sensitive data in various applications
• Excellent written and oral communication and presentation skills for leadership, technical, and business audiences
• Understanding of the fundamentals of data minimization and electronic records management is preferred
• Advanced knowledge of data security protocols, encryption techniques, data recovery techniques, and key management
• Proficiency in security information tools and systems preferred
• Understanding of project management principles including problem statements, use cases, success criteria, is preferred
• Exercise strong judgment in fast-moving situations with multiple priorities, making informed decisions that balance risk, business needs, and stakeholder expectations Must be a critical thinker with strong problem-solving skills
• Detail oriented, self-motivated and disciplined, with excellent time management skills
• Must be able to obtain and maintain any licensing or active work cards required, at present or in the future, for this position at all times
• Excellent professionalism and ability to maintain strict confidentiality of company and employee information