Senior IT Security Administrator is responsible for overseeing the planning, implementation, and maintenance of security measures to protect WRG’s IT systems and networks. This role focuses on identifying, managing, and mitigating security risks, responding to incidents, and ensuring regulatory compliance while collaborating with various stakeholders.

Salary Grade (15)  90,278 - 115,104 - 139,930

• Oversee the design, deployment, and management of security systems such as firewalls, intrusion detection/prevention systems, and SIEM platforms.
• Maintain the organization's security architecture, ensuring that it aligns with industry best practices and company policies.
• Lead security incident detection, response, and investigation efforts, including containment, remediation, and post-incident analysis.
• Develop, document, and implement incident response plans and manage threat intelligence feeds.
• Conduct regular security audits, vulnerability assessments, and risk analysis to identify and address potential risks.
• Manage patching and system hardening practices to reduce vulnerability exposure.
• Ensure compliance with relevant regulations, and assist with audit preparation and reporting.
• Develop, update, and enforce IT security policies, procedures, and standards.
• Manage user access controls, ensuring appropriate role-based access and enforcing least-privilege principles.
• Oversee data protection practices, including encryption, backup, and recovery planning.
• Develop and deliver IT security training programs for employees at all levels, including topics such as phishing prevention, secure password practices, and data protection.
• Foster a culture of security awareness across the organization, ensuring staff are informed about evolving threats and safe computing practices.
• Collaborate with other departments to identify security requirements for new projects and applications.
• Provide guidance and support to ensure that security measures are incorporated in the early stages of projects.

Required Qualifications

• Posses a degree in a related technical discipline.
• 3-5 years of relateable IT technical experience.
• Excellent verbal and written communication skills are required.  

NA

Job Location:

ONSITE- OFFICE

Job Description Summary

Responsible for assisting the Director of IT Security and Compliance with the security-related design, implementation, and support of Agua Caliente’s infrastructure and systems. Assists with ensuring that all technology platforms and systems are protected against threats and vulnerabilities while maintaining their overall integrity and security.

Essential Duties and Responsibilities (other duties may be assigned)

• Assist with ensuring all technology platforms and systems are protected against threats and vulnerabilities while maintaining their overall integrity and security.
• Work with internal and external resources on designing, configuring, implementing, and troubleshooting I.T. Security applications and systems.
• Detect, investigate and respond to I.T. Security related incidents.
• Identify and define security requirements for operating systems and applications.
• Assist with the creation, development, and maintenance of I.T. security-related policies, procedures, and standards documentation.
• Participate in vulnerability detection and associated remediation efforts
• Ensures completion of regular reviews of system-generated security-log exception reports and compliance sampling of internal and regulatory policies, procedures, standards and controls.
• Ensure all systems operate in accordance with all applicable Tribal regulatory controls, federal standards (PCI, GDPR, CCPA, etc.).
• Maintain knowledge of current and emerging vulnerabilities, malware, infiltration techniques, forensics, and threats.
• Perform internal and external (vendors, contractors, consultants) vulnerability assessments to identify weaknesses and assess the effectiveness of existing controls.
• Assist with audit requests for documentation, responses and remediation.
• Assist with I.T. Security training and User Awareness Programs.
• Assist the I.T. teams with identifying and resolving I.T. security-related issues.
• Implement education and training programs on information security and privacy matters for team members and other authorized users.
• Develop, implement and maintain risk assessment, incident reporting and response systems, to address security breaches, policy violations and grievances from external parties.
• Participate in investigations of situations in which security may have been compromised and notify IT management of any unusual transactions impacting system security.
• Work closely with other IT security leadership on ensuring system enhancements do not compromise compliance requirements or security standards.
• Develop and maintain collaborative partnerships with all relevant internal departments as well as external vendors, regarding IT security-related information technology solutions.
• Keep abreast of the latest I.T. security and privacy legislation, regulations, advisories, alerts and vulnerabilities and develops implementation strategies to ensure the company’s security program and software remain current and secure.
• Provide outstanding customer service in a timely manner to both guests and fellow team members.
• Backup Cyber Security Analyst II as required

Education and/or Experience

• Minimum of three years of I.T. security experience plus an additional 2 years of experience in I.T. security administration, server administration or network administration
• Industry certification (such as CompTIA Security+, CySA+, or similar) is highly desired.
• Experience with I.T. security systems, including firewalls, endpoint protection, SSO, authentication systems, MDM, log management, content filtering, remote access, etc.
• Experience with and understanding of the NIST Cyber Security Framework.
• Experience with multiple industry-leading security testing environments and tools, as well as, network assessment tools such as SIEM, Nessus, Tenable Security Center
• Working knowledge of Tribal compliance, regulations and standards preferred
• Problem-solving skills and the ability to work under pressure in a constantly evolving environment.
• Must have a reliable means of transportation
• Willing and able to work any and all shifts as assigned, including weekends and holidays
• Must possess excellent written and verbal communication skills. Must be able to communicate in English.
• Bachelor’s degree in computer science or information sciences from a four-year college or university, an equivalent combination of education and experience will be considered.

Working Conditions/Physical Demands

To perform this job successfully, the individual must be able to stand, move and work throughout the office area and properties, including walking up to 1 ½ mile, climbing stairs, and sitting at a desk or workstation for the duration of the shift.

Typically, the individual will be housed in an office environment. The noise level in the work environment is usually moderate but will escalate when located in the casino environment. Must be able to grasp, bend, lift and/or carry or otherwise move goods weighing a minimum of 25 lbs. on an intermittent basis, and sufficient dexterity of hand to use office equipment including, but not limited to: a computer keyboard, calculator, general office equipment and multi-line telephone.

Company Description

At Western Digital, we are on a mission to unlock the potential of data so people, companies and organizations everywhere can create what’s next. To fulfill our vision, we are always on the lookout for potential team members who share our passion for solving problems to empower others.

When you join Western Digital, you join a legacy more than 50 years in the making. Across our Western Digital®, SanDisk®, SanDisk® Professional, WD® and WD_BLACK™ brands, we have brought some of the most storied advancements in memory and data storage technology to market—and our best, most innovative work is yet to come.

From energizing gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

Here’s how you can help.

• Implement enterprise-wide risk management frameworks that aligns with industry standards (e.g. ISO27001, NIST, etc).
• Lead technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
• Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
• Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
• Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.
• Analyze security data to identify trends, vulnerabilities, and areas for improvement.
• Collaborate with internal and external auditors to facilitate security audits and assessments.
• Stay current with industry trends, emerging threats, and best practices for information security and risk management.
• Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.

REQUIRED:

• Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
• 8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following: security engineering, network security, identity and access management, security operations, and/or software development security.
• 4+ years of experience in technical roles, or similar technical proficiency are highly desirable.
• Proficiency in risk assessment methodologies, tools, and techniques.
• Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
• Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
• Experience in generating and interpreting information security metrics and reports.

SKILLS:

• Excellent analytical and problem-solving skills with attention to detail.
• Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced environment.
• Experience in building and maturing information security risk management practices.

PREFERRED:

• Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable.
• Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the “Know Your Rights: Workplace Discrimination is Illegal” poster. Our pay transparency policy is available here: Pay Transparency Nondiscrimination Provision (dol.gov)

Western Digital thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Western Digital is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [email protected] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

Based on our experience, we anticipate that the application deadline will be 01/08/2025 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline.

#LI-AS1

Compensation & Benefits Details

• An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.
• The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.
• You will be eligible to participate in Western Digital’s Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Western Digital’s Standard Terms and Conditions for Restricted Stock Unit Awards.
• We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Western Digital Savings 401(k) Plan.
• Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.