Engineer – InfoSec GRC (Governance, Risk, and Compliance) at Wynn Resorts — Las Vegas, NV

Wynn Resorts is seeking an Engineer – InfoSec GRC to help advance the technical maturity, automation, and audit readiness of the Information Security Governance, Risk, and Compliance function. This role is ideal for a technically minded GRC professional who can translate regulatory, audit, and control requirements into practical system procedures, automated workflows, scheduled reporting, dashboards, and audit-ready evidence.

The Engineer – InfoSec GRC will serve as a technical resource for control automation, evidence collection, compliance reporting, and continuous improvement across the GRC program. This position partners closely with Information Security, IT, Internal Audit, Finance, Legal, Compliance, and business stakeholders to improve the reliability, consistency, and efficiency of audit and compliance processes.

Ideal Candidate

Detail-oriented, technically curious GRC professional who enjoys improving complex processes, building reliable reporting, and making audit and compliance activities easier for analysts and stakeholders to execute. Ability to work independently, collaborate across teams, and communicate technical concepts clearly in a practical, audit-ready manner.

Essential Job Duties & Responsibilities

• Design, implement, and improve technical solutions that support repeatable, auditable compliance with applicable frameworks and requirements, including SOX ITGC, PCI DSS, Gaming MICS, NIST, ISO, and other relevant standards.
• Automate audit procedures, control testing steps, evidence collection routines, and analyst-ready workflows to reduce manual effort and improve consistency, accuracy, and timeliness.
• Build, maintain, and validate scheduled compliance reporting from authoritative systems, including databases, applications, identity platforms, asset repositories, change management systems, vulnerability management tools, SIEM/logging platforms, GRC platforms, and other enterprise data sources.
• Develop dashboards, metrics, exception reports, control status reporting, remediation tracking outputs, and evidence artifacts that communicate compliance posture, control effectiveness, audit readiness, and risk trends.
• Support systems and platforms where GRC is the business stakeholder, including tools used for audit automation, evidence management, control monitoring, asset management, application inventory, change management, and scheduled reporting.
• Identify and implement technical improvements, data integrations, automation opportunities, and control monitoring enhancements that reduce recurring audit issues and strengthen stakeholder accountability.
• Maintain technical details within the GRC control framework, including system and network scoping, technical control interpretations, control-to-system mappings, artifact descriptions, reporting logic, and validation steps.
• Partner with internal and external auditors, assessors, IT teams, engineers, architects, application owners, and business stakeholders to explain control design, evidence, system data, reporting logic, and remediation status.
• Support the continuous improvement of GRC processes through technology, documentation, workflow optimization, reporting automation, and responsible use of AI-enabled capabilities.
• Perform other duties as assigned.
• Degree in computer science, cybersecurity, data analytics, or related field (or equivalent experience)
• Four (4+) years of experience in cybersecurity, audit, risk, compliance, or related programs
• Ability to translate regulations and controls into technical requirements, testing procedures, metrics, and reporting
• Experience with audit automation, compliance reporting, dashboards, monitoring, and evidence collection
• Ability to analyze and validate data from databases, applications, APIs, logs, identity systems, and other enterprise sources
• Working knowledge of reporting, scripting, queries, workflows, and automation
• Understanding of IT systems, security governance, risk, audit, and compliance principles
• Strong analytical, documentation, troubleshooting, and communication skills
• Ability to work independently, manage priorities, and collaborate with technical and non-technical teams

Highly Preferred Qualifications

• Experience automating audits, control testing, evidence collection, access reviews, and compliance reporting (SOX, PCI DSS, NIST, ISO, etc.)
• Experience creating and maintaining compliance reports from enterprise systems and platforms
• Knowledge of SQL, APIs, data validation, reconciliation, scripting, and workflow automation
• Experience building dashboards, compliance metrics, scorecards, and management reports using tools such as Power BI, Excel, GRC, or SIEM platforms
• Experience documenting reporting logic, data lineage, and control mappings
• Experience partnering with IT, audit, engineering, and compliance stakeholders
• Familiarity with AI-driven automation and continuous compliance concepts
• Relevant certifications such as CISA, CRISC, CISSP, Security+, PCI-ISA, ISO 27001, SQL/Data Analytics, or Power BI