FLEX Senior Manager, Logging Compliance

This is a temporary position.   

The Senior Manager, Logging Compliance, is responsible for overseeing Marriott’s enterprise-wide logging compliance and monitoring governance to ensure alignment with audit and regulatory requirements. This role focuses on validating that logging activities meet documented controls, identifying compliance gaps, and supporting governance efforts without setting or modifying policies. The role requires a balanced knowledge of SIEM technologies, audit documentation, and threat detection principles to assist teams in meeting logging standards while enabling visibility into critical systems and applications.

 

The ideal candidate brings a deep understanding of security logging, threat detection use case governance, and compliance frameworks. They will work cross-functionally with application owners, infrastructure teams, and cybersecurity stakeholders to validate that logging data is properly onboarded to the SIEM and security data lake, ensuring Marriott maintains a strong audit posture.

 

CANDIDATE PROFILE

 

Education and Experience

 

Required:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science or related field or equivalent experience/certification
• 7+ years of experience in Information Technology/Security including: 
  • 3+ years in a leadership or management role overseeing security compliance or threat detection initiatives.
  • Experience with SIEM platforms (e.g., Splunk Enterprise Security) and logging platforms.
  • Experience managing compliance efforts aligned to frameworks such as NIST, ISO/IEC 27001, PCI DSS etc. 
• Demonstrated knowledge of log management, threat detection use case development, and audit preparation.
• Experience collaborating with application development teams and infrastructure teams to provide oversight for logging compliance. 
• Familiarity with cloud environments (AWS, Azure, GCP) and logging related to cloud workloads. 

 

Preferred Skills/Experience:

• Master’s degree in Cybersecurity, Computer Science, or a related discipline
• 8+ years of experience in information security, focusing on Certification and Accreditation (C&A), Risk Management Framework (RMF), and security controls assessment.
• 4+ years of experience in software/system release management, with a focus on security validation. 
• Experience with risk quantification methodologies and security control testing techniques 
• Comprehensive knowledge of risk management frameworks including FAIR, NIST RMF, MITRE TARA, and OCTAVE
• Deep knowledge of security frameworks such as NIST SP 800-53, ISO/IEC 27001, and PCI DSS, with a strong focus on the Risk Management Framework (RMF)
• Experience with auditing security controls in alignment with RMF processes, including evaluating the effectiveness of controls against NIST 800-53, conducting assessments for compliance, and supporting authorization and accreditation activities
• Familiarity with common documentation frameworks such as the 4+1 View Model, C4 Model, and ISO/IEC/IEEE 42010, as well as UML diagrams, Arc42 templates, and Architecture Decision Records (ADRs) for consuming and interpreting architectural decisions and system design.
• Proven leadership experience in regulatory environments, with strong project management skills. 
• Excellent written and verbal communication skills

 

CORE WORK ACTIVITIES

• Validate that logging practices meet Common Controls Framework (CCF) and other documented compliance requirements.
• Oversee the development and tracking of threat detection use cases across the organization.
• Collaborate with application, infrastructure, and cyber teams to ensure appropriate logging to the SIEM and security data lake.
• Facilitate audit readiness by ensuring accurate documentation of logging controls and evidence collection.
• Lead cross-functional efforts to onboard new log sources and improve existing logging configurations.
• Monitor metrics related to logging completeness, quality, and adherence to established controls.
• Engage with leadership to communicate logging compliance status, risks, and remediation efforts.
• Conduct gap analysis on logging compliance and support remediation efforts.
• Support alignment of threat detection content development efforts with existing logging controls and governance frameworks.

Cultivate a High-Performing Team

• Create a compelling vision, clear direction and strategy for the team
• Generate enthusiasm and understanding of the information security vision and how each role contributes to the achievemen