Manager - Identity Access Management

The Venetian Resort Las Vegas; Las Vegas (NV); On-site; USD 120,000 - 170,000; Full time

Job summary

The Venetian Resort Las Vegas is seeking a Manager – IT Identify Access Management to lead a team delivering enterprise security standards, role-based access, and compliance. You will oversee provisioning for AS400 and web applications, manage access reviews, and drive security improvements across all IT projects in a fast-paced hospitality environment.

The role requires 5+ years of management and IT experience, familiarity with PCI, SOX, and Nevada Gaming controls, and the ability to

Qualifications

• BS in Management Information Systems, Computer Science or comparable field.
• 5+ years proven management experience.
• 5+ years of computer experience including AS400 and web-based applications, preferably in Gaming or Hospitality.
• ITIL Foundations certification is highly desirable.
• CISSP or CISA certification is highly desirable.

Responsibilities

• Works closely with Business Group to ensure appropriate access and roles are set up in applications and appropriate access is provided to end users.
• Manage user access for AS400 and AS400 applications.
• Manage user access for web-based applications.
• Ensure termed Team Members are removed from application access within time restrictions.
• Ensure transferred Team Member access roles are de-provisioned and re-provisioned as appropriate.
• Be able to troubleshoot and solve security problems reported by users of software.
• Ensure established security controls are in place particularly to new applications or existing applications that will undergo system upgrade.
• Create and maintain Identity Access Management documentation.
• Enforce IT Security Policies and Procedures.
• Enforces all application security policies and standard operating procedures (SOPs) pertaining to Sarbanes Oxley, Gaming, PCI, and other regulatory requirements are met.
• Ensure and monitor peer review process is implemented.
• Perform user access review and assessment monthly and quarterly as appropriate.
• Ensure Business Application Owners provide response and confirmation to the user access review.
• Work with I.T. Compliance and Internal Audit and Gaming Control board on audits to ensure standards are met.
• Produces reports for all auditing directives.
• Establish, adhere to, and report on Key Performance Indicators
• Drive continuous service improvement through automation and process enhancements.
• Accomplishes SMART goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to Security Administration activities and accomplishments.
• Manage workload distribution to the Team.
• Manage team resources as appropriate.
• Perform and implement Team meetings.
• Coach, mentor, and review performance of Security Administrators.

Skills

RBAC and access management

IT security

Audit and compliance

Leadership and mentoring

Communication with stakeholders

Problem solving

Education

BS in MIS/Computer Science or related field

Tools

AS400 access management

Microsoft Office (Excel/Word/PowerPoint)

Job description

Position Overview

The primary responsibility of the Manager – IT Identify Access Management is to manage a team responsible for the delivery of IT security standards, role based access and best practices to ensure application security across the enterprise. Implements processes and methods for audit reviews and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments. The role also manages and participates in the planning and implementation for security administration for all IT projects, including making recommendations and assisting in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures.

All duties are to be performed in accordance with departmental and The Venetian Resort’s policies, practices, and procedures.

Essential Duties & Responsibilities

• Works closely with Business Group to ensure appropriate access and roles are set up in application and appropriate access is provided to end users.
• Manage user access for AS400 and AS400 applications.
• Manage user access for web-based applications.
• Ensure termed Team Members are removed from application access within time restrictions.
• Ensure transferred Team Member access roles are de-provisioned and re-provisioned as appropriate.
• Be able to troubleshoot and solve security problems reported by users of software.
• Ensure established security controls are in place particularly to new applications or existing applications that will undergo system upgrade.
• Create and maintain Identity Access Management documentation.
• Enforce IT Security Policies and Procedures.
• Enforces all application security policies and standard operating procedures (SOPs) pertaining to Sarbanes Oxley, Gaming, PCI, and other regulatory requirements are met.
• Ensure and monitor peer review process is implemented.
• Perform user access review and assessment monthly and quarterly as appropriate.
• Ensure Business Application Owners provide response and confirmation to the user access review.
• Work with I.T. Compliance and Internal Audit and Gaming Control board on audits to ensure standards are met.
• Produces reports for all auditing directives.
• Establish, adhere to, and report on Key Performance Indicators
• Drive continuous service improvement through automation and process enhancements.
• Accomplishes SMART goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to Security Administration activities and accomplishments.
• Manage workload distribution to the Team.
• Manage team resources as appropriate.
• Perform and implement Team meetings.
• Coach, mentor, and review performance of Security Administrators. Safety is an essential function of this job.
• Consistent and regular attendance is an essential function of this job.
• Performs other related duties as assigned.

Company Standards of Conduct

All The Venetian Resort Team Members are expected to conduct and carry themselves in a professional manner at all times. Team Members are required to observe the Company’s standards, work requirements and rules of conduct.

Minimum Qualifications

• 21 years of age.
• Proof of authorization/eligibility to work in the United States.
• BS in Management Information Systems, Computer Science or comparable field
• Must be able to obtain and maintain Nevada Gaming Control Board Registration and any other certification or license, as required by law or policy.
• 5+ years proven management experience.
• 5+ years of computer experience to include AS400 and web-based applications, preferably in the Gaming and/or Hospitality Industry.
• Experience with system audit, profile review, and regulatory controls to include PCI, SOX and Nevada Gaming Control Board is preferred.
• ITIL Foundations certification is highly desirable.
• CISSP or CISA Certification is highly desirable.
• Must be well-versed in role-based access methodologies.
• Extensive use of Microsoft Office suite of products (Excel, Word, PowerPoint, etc.) required.
• Must be able to work effectively and professionally with all levels of management, team members and external contacts while meeting deadlines.
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.
• Must be able to work varied shifts, including nights, weekends and holidays.

Physical Requirements

Must be able to

• Physically access all areas of the property and drive areas with or without a reasonable accommodation.
• Maintain composure under pressure and consistently meet deadlines with internal and external customers and contacts.
• Ability to interact appropriately and effectively with guests, management, other team members, and outside contacts.
• Ability for prolonged periods of time to walk, stand, stretch, bend, and kneel
• Work in a fast-paced and busy environment.
• Work indoors and be exposed to various environmental factors such as, but not limited to, CRT, noise, dust, and cigarette smoke.