Engineer – InfoSec GRC (Governance, Risk, and Compliance)

Wynn Resorts•Las Vegas, NV

About The Position

Wynn Resorts is seeking an Engineer – InfoSec GRC to help advance the technical maturity, automation, and audit readiness of the Information Security Governance, Risk, and Compliance function. This role is ideal for a technically minded GRC professional who can translate regulatory, audit, and control requirements into practical system procedures, automated workflows, scheduled reporting, dashboards, and audit-ready evidence. The Engineer – InfoSec GRC will serve as a technical resource for control automation, evidence collection, compliance reporting, and continuous improvement across the GRC program. This position partners closely with Information Security, IT, Internal Audit, Finance, Legal, Compliance, and business stakeholders to improve the reliability, consistency, and efficiency of audit and compliance processes.

Requirements

Degree in computer science, cybersecurity, data analytics, or related field (or equivalent experience)
Four (4+) years of experience in cybersecurity, audit, risk, compliance, or related programs
Ability to translate regulations and controls into technical requirements, testing procedures, metrics, and reporting
Experience with audit automation, compliance reporting, dashboards, monitoring, and evidence collection
Ability to analyze and validate data from databases, applications, APIs, logs, identity systems, and other enterprise sources
Working knowledge of reporting, scripting, queries, workflows, and automation
Understanding of IT systems, security governance, risk, audit, and compliance principles
Strong analytical, documentation, troubleshooting, and communication skills
Ability to work independently, manage priorities, and collaborate with technical and non-technical teams

Nice To Haves

Experience automating audits, control testing, evidence collection, access reviews, and compliance reporting (SOX, PCI DSS, NIST, ISO, etc.)
Experience creating and maintaining compliance reports from enterprise systems and platforms
Knowledge of SQL, APIs, data validation, reconciliation, scripting, and workflow automation
Experience building dashboards, compliance metrics, scorecards, and management reports using tools such as Power BI, Excel, GRC, or SIEM platforms
Experience documenting reporting logic, data lineage, and control mappings
Experience partnering with IT, audit, engineering, and compliance stakeholders
Familiarity with AI-driven automation and continuous compliance concepts
Relevant certifications such as CISA, CRISC, CISSP, Security+, PCI-ISA, ISO 27001, SQL/Data Analytics, or Power BI

Responsibilities

Design, implement, and improve technical solutions that support repeatable, auditable compliance with applicable frameworks and requirements, including SOX ITGC, PCI DSS, Gaming MICS, NIST, ISO, and other relevant standards.
Automate audit procedures, control testing steps, evidence collection routines, and analyst-ready workflows to reduce manual effort and improve consistency, accuracy, and timeliness.
Build, maintain, and validate scheduled compliance reporting from authoritative systems, including databases, applications, identity platforms, asset repositories, change management systems, vulnerability management tools, SIEM/logging platforms, GRC platforms, and other enterprise data sources.
Develop dashboards, metrics, exception reports, control status reporting, remediation tracking outputs, and evidence artifacts that communicate compliance posture, control effectiveness, audit readiness, and risk trends.
Support systems and platforms where GRC is the business stakeholder, including tools used for audit automation, evidence management, control monitoring, asset management, application inventory, change management, and scheduled reporting.
Identify and implement technical improvements, data integrations, automation opportunities, and control monitoring enhancements that reduce recurring audit issues and strengthen stakeholder accountability.
Maintain technical details within the GRC control framework, including system and network scoping, technical control interpretations, control-to-system mappings, artifact descriptions, reporting logic, and validation steps.
Partner with internal and external auditors, assessors, IT teams, engineers, architects, application owners, and business stakeholders to explain control design, evidence, system data, reporting logic, and remediation status.
Support the continuous improvement of GRC processes through technology, documentation, workflow optimization, reporting automation, and responsible use of AI-enabled capabilities.
Perform other duties as assigned.