SrMgr-Information Security - Continent Security Partnerships

JOB SUMMARY: 

 

The Sr. Manager, Continent Information Security Partnerships – US & Canada, is a key role in continent security aspects relating to execution, providing the necessary support and direction to the above property, on-property teams and other business stakeholders. The objective of this role is to attain maximum security compliance status and ensure that all implementations follow the company security standards. Enforce Marriott Security Standards and requirements for properties. The role will perform tracking and reporting on the established security metrics and will have a direct reporting line to the Senior Director/Director, Continent Information Security Partnerships. 

 

This position maintains strong relationships with the above property and on-property teams, other continent stakeholders including business and operations and provides support to Area IT Leaders with continent IT operations and provides assistance in liaising with additional teams within Security.  

 

 

CANDIDATE PROFILE 

 

Required Education and Experience 

• 7+ years progressive IT work experience including: 
  • 3+ years in executing technology plans and/or project portfolios or information security programs.
  • 2+ years’ of implementing enterprise security risk management frameworks and processes.
• Bachelor’s degree in Computer Science or related field or equivalent experience/certification.
• Fluent in English both spoken and written.. 

 

Preferred:

• Hotel IT Management.
• Cybersecurity experience.
• Good understanding of PCI DSS.
• Expert level understanding of key network and technical security controls.
• Experience participating in and coordinating activities for security incident responses.
• Basic understanding of vulnerabilities and remediation actions
• Basic understanding of different attack vectors 
• Good understanding of different protocols such as TCP/DNS/HTTP/VPN/, etc.
• Risk identification and remediation along with respective teams
• Knowledge of global regulatory standards including PDPA, PIPA, NDB, PDPB, etc., and understanding of PCI DSS
• Ability to demonstrate security experience via certifications (CISSP, CISA, CRISC, CISM, PCI ISA, etc.) or significant career accomplishments.
• Demonstrated ability to apply organizational information security policies at a discipline unit level.
• Knowledge of IT security within an infrastructure environment.
• Strong negotiating, influencing, and problem-resolution skills.
• Proven ability to effectively prioritize and execute tasks in a high-pressure environment.
• Experience in business systems and process planning.
• Graduate/post-graduate degree.

 

CORE WORK ACTIVITIES 

 

• Provides leadership and guidance for Security project implementations within a designated continent partnering with the respective above property and property operation as well as IT teams.
• Initiates and completes audit programs including tracking of progress, results, and gaps remediation. Shares with GIS and continent partners and leads follow ups, such as IPPA, IT Peer Review, and PCI. 
• Represents Security in signing off on new property openings including tracking that property systems and security readiness is registered, to include application inventory
• Leads project implementations and report on any issues to the respective teams involved in the projects.
• Provides tactical communications and issues remediation planning and implementation with the continent IT Operations team.
• Implements audit programs including tracking of the results and gaps remediation follow ups such as IPPA, IT Peer Review, PCI, etc.
• Signs off the new property openings including tracking that all necessary information on the property systems and security readiness is registered, such as application inventory.
• Facilitates educational calls, materials and meetings to the Continent IT Operations and field associates
• Coordinates new systems and services security reviews and certifications and performs first line approval of security requests from the partners.
• Tracks the compliance performance of the continent and work with on-property IT associates along with the Area IT Managers towards issues remediations, providing necessary escalations and follow-ups to the respective teams.
• Reports on security & compliance related metrics to different stakeholders including GIS, Continent leadership
• Provides answers to general questions and queries around IT security.
• Identifies learning and knowledge gaps and facilitates educational calls, materials and meetings to the Continent IT Operations and field associates