Information Security Analyst - Continent Security Partnerships

JOB SUMMARY Contributes to the execution and support of security compliance efforts for above property and on-property teams. The objective of this role is to drive and achieve maximum security compliance status and ensure that all implementations follow the Marriott security standards.The role will perform tracking and reporting on the established security metrics and will have a direct reporting line to the Senior Director, Continent Information Security Partnerships. 

This position maintains strong stakeholder relationships and assists area IT leaders and continent IT operations in liaising with the broader Global Information Security team..  

CANDIDATE PROFILE 

Education and Experience Required:

Education and Experience 

• 3+ years of work experience in general business and/or administrative support
  • 1+ years experience with Microsoft office products; especially Excel and Word
• Bachelor’s degree in Computer Science or related field or equivalent experience/certification.
• OR – Recent undergraduate (4-year) with internship and/or liminted work experience in Information Security or Technnology
• Fluent in English both spoken and written. 

Preferred:

• Experience working in a Technology or Information Security role
• Hotel management experience
• Good understanding of PCI DSS.
• Working knowledge of key network and technical security controls.
• Experience participating in or coordinating activities for security incident responses.
• Basic understanding of vulnerabilities and remediation actions
• Basic understanding of different attack vectors 
• Good understanding of different protocols such as TCP/DNS/HTTP/VPN/, etc.
• Risk identification and remediation along with respective teams
• Knowledge of global regulatory standards including GDPR, CCPA and understanding of PCI DSS
• Ability to demonstrate security experience via certifications (Security+, CISM, PCI ISA, etc.) or significant career accomplishments.
• Demonstrated ability to apply organizational information security policies at a discipline unit level.
• Knowledge of IT security within an infrastructure environment.
• Strong negotiating, influencing, and problem-resolution skills.
• Proven ability to effectively prioritize and execute tasks in a high-pressure environment.
• Experience in business systems and process planning.
• Graduate/post-graduate degree.

CORE WORK ACTIVITIES 

• Provides support and guidance to stakeholders for Security project implementations.
• Initiates and completes security audits as assigned, including tracking of progress, results, and gaps remediation. Shares with GIS and continent partners and initiates follow ups, such as IPPA, Property Secuity Review, and PCI. 
• Represents Security in signing off on new property openings including tracking that property systems and security readiness is registered; including application inventory
• Coordinates project implementations and escalates any issues to project team leadership.
• Provides tactical communications and issues remediation planning and implementation support with the continent IT Operations team.
• Participates in/facilitates educational calls and meetings representing security to field ITassociates
• Participates in new systems and services security reviews and certifications. Performs first line review of security requests from the partners prior to approval
• Tracks the compliance performance of the continent and works with on-property IT associates and Area IT Managers towards issues remediations, providing necessary escalations and follow-ups to the respective teams.
• Contributes to security and compliance related metrics reporting 
• Provides answers to general questions and queries around IT security.
• Participates in security reviews/certifications for new systems and services for properties across an assigned continent. 
• Participates with Cyber Incident Response Team during incident response and remediation with their respective continent 
• Point of contact for general questions and queries around global IT security programs, policies, procedures, and/or strategy.
• Provide necessary training and guidance to field IT teams, non-technical staff, and other stakeholders
• Preparation of monthly reports and other related documentation to presenting to the leadership team

 MANAGING WORK, PROJECTS, AND POLICIES

• Coordinates and implements work and projects as assigned.
• Complies with Federal and State laws applying to procedures.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to c