Sr. Engineer - Data Security

Sr. Engineer - Data Security Full-time FLSA Status: Exempt Division: 22700 - G&A Career Areas: Information Technology Status: Full-Time Job Description Role Summary The Sr. Data Security Engineer is responsible for the technical design and maturity of the controls that enforce Wynn Resorts' data processing policies. The role reports into the Executive Director of GRC, Architecture, and Data Security, takes ownership of the tools that protect data, and operationalizes company policy for the storage, classification, movement, protection, retention, and destruction of sensitive data. The Data Security team is a specialized function within Wynn's established, global Information Security organization; it concentrates on where sensitive data resides, how it moves, how it can be accessed, and ensures it is classified, protected, retained, and defensibly deleted, while partner security teams carry broader responsibility for networks, endpoints, operations, incident response, identity, etc. The Sr. Data Security Engineer is the senior-most hands-on technical role in the Data Security team, and is an accomplished engineer experienced in technical areas including systems engineering, development, or data management, focused on applying data protection principles using industry standards and frameworks. The ideal candidate brings experience with the platforms where enterprise data lives and grows, and will demonstrate the capability to problem-solve, operate as the top point of technical escalation, and serve as a mentor to the Data Security Engineer and Analyst.

Advance and mature the data security tools, developing expertise beyond vendor support across configuration, tuning, integration, and troubleshooting. As a customer to Wynn’s vendor partners, drive the vendor’s product roadmap to better serve Wynn’s security program. Operationalize company policy for the storage, transmission, classification, and destruction of data into working controls, procedures, guidelines, and tooling. Mature sensitivity labeling and DLP enforcement across unstructured and structured data, and restrict the movement of sensitive data within and outside the organization. Identify data repositories with excessive access, inappropriate exposure, or inadequate security controls. Work with data owners to remediate data-security risks. Implement, manage, and advance data protection, retention, and lifecycle controls, including encryption at rest and in transit, obfuscation and masking, and privileged-access restriction, in accordance with regulatory and internal standards. Drive and optimize technical remediation efforts to enforce compliance against company security standards (encryption, obfuscation, privileged access) for Wynn-hosted structured data. Identify patterns and root cause for non-compliance, implement technical controls to remove friction while working with other teams to achieve success. Restrict production data strictly to its intended environment, preventing unauthorized access to or replication in non-production areas. Advance the effectiveness and efficiency of the tools used to inventory structured and unstructured data sources for evaluation against Wynn's policies and standards. Improve operational efficiency of driving remediation of gaps in access, storage, encryption, obfuscation, retention, and deletion. Advance the effectiveness of the defensible deletion and data loss prevention (DLP) programs, supporting metrics and KPIs for evaluation by management. Effectively enforce minimal access to sensitive data (permissions, roles, groups, users, and NHI across applications, SaaS, file shares, NTFS, and databases) through technical controls and data-sensitivity lens. Build automations (scripting, workflow, and AI-enabled) that enhance the data security program, uplevel the GRC team's technical effectiveness where the two overlap on permissions, roles, and access, and fold more advanced data governance into the