Engineer - Data Security

The Sr. Engineer - Data Security is responsible for technical design and execution of the Data Security Program for Wynn Resorts. Reporting to the Executive Director of Information Security, this role will be key in assuring effective enforcement of company data processing policy and utilization of advanced data security control systems., * Operationalize company policies regarding storage, transmission, and destruction of data.

• Operationalize company policies regarding classification of data with appropriate levels of access by user, device, and location.
• Develop procedures, guidelines, and implementation of necessary tools to operationalize and enforce the corporate data classification and data loss prevention program.
• Apply sensitivity labels to unstructured files to ensure proper classification and protection of critical information.
• Enforce technical and procedural controls to govern and restrict the movement of sensitive data within and outside the organization.
• Recommend, implement, and manage procedures and tools for data protection, retention, and lifecycle management in accordance with regulatory and internal standards.
• Continuously monitor Wynn-hosted structured data systems to ensure compliance against company security standards (encryption, obfuscation, privileged access, etc.).
• Ensure the encryption of sensitive data, both at rest and in transit, across all relevant systems and platforms.
• Restrict the use of production data strictly to its intended environment, preventing unauthorized access or replication in non-production areas.
• Maintain and update inventories of applications and systems that store or process sensitive data.
• Map access to sensitive data, monitoring permissions, roles, and user activity to support robust access control and auditing.
• Develop metrics for the department and opportunities for improvement.
• Other duties as assigned.

• College diploma or university degree in computer/data science or IT management and/or 7 years of equivalent work experience
• Hands-on experience and practical understanding of unstructured data storage systems is required, including Network-Attached Storage systems, SMB/CIFS shares, and cloud-based file collaboration systems (Google Drive, OneDrive, Box, etc.)
• Unstructured: Understanding of volume shadow copies / previous versions, immutable backups, etc.
• Hands-on experience and practical understanding of structured data storage and processing systems is required, including on premises and cloud-based Database Management Systems (MySQL, MSSQL, OracleDB, etc.)
• Practical understanding of permissions, roles, groups, users, and Non-Human Identity (NHI) as it relates to authorized and unauthorized access to sensitive data in various applications, SaaS, file shares (NTFS permissions), etc.
• Ability to create and manage high quality and accurate documentation is a must
• Excellent written and oral communication and presentation skills for leadership, technical, and business audiences
• General ability to pull data from database tables, database views, application sources, and other data stores for the purpose of compliance reporting
• Understanding of database table relationships, primary/foreign key handling, and broad effects of modifying, manipulating, or deleting data in a DBMS is preferred
• Understanding of structured data recovery techniques, transaction log handling, database replication, immutable backups, etc. is preferred
• Understanding of the fundamentals of data minimization and electronic records management is preferred
• Familiarity with industry standard tools for Data Loss Prevention, Sensitivity Labeling, and Record Identification is preferred
• Understanding of project management principles including problem statements, use cases, success criteria, is preferred
• High level of personal integrity and ability to show an appropriate level of judgment and maturity
• Poise and ability to act calmly and competently in high-pressure, high-stress situations
• Must be a critical thinker with strong problem-solving skills
• Detail oriented, self-motivated and disciplined, with excellent time management skills