Director, Data Security Engineering

JOB SUMMARY: 

Marriott International’s Global Information Security is seeking a dynamic and experienced Director of Data Security Engineering to lead our data security engineering team and the associated initiatives and drive the implementation of robust security strategies and controls across our organization. You will be responsible for overseeing the design, development, and management of data security solutions that safeguard our critical information assets and comply with regulatory compliance leveraging your experience in data security principles, practices, and technologies.

CANDIDATE PROFILE 

Education and Experience 

Required:

• Bachelor’s degree in computer sciences, computer engineering or related technology or security field or equivalent experience/certification
• 7+ years of information security experience that includes:
  • 4+ years of experience in data security in a regulated global enterprise environment
  • 3+ years of experience in data protection, encryption, access controls, and threat detection.
• 2+ years of experience in direct management or supervision/team leadership of technical teams
• 3+ years in a role that had responsibility for or closely collaborated with/participated in data incident response, cybersecurity, privacy, compliance, governance, risk, compliance and investigative processes.

Preferred:

• Current information security certifications - Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other.
• Good understanding and experience working with frameworks and regulations - NIST, ISO27001, PCI DSS, GDPR and CCPA
• Strong analytical and problem-solving skills, decision-making abilities, with a focus on balancing security requirements with business objectives
• Proven ability to effectively prioritize and undertake mission critical tasks in a fast-paced environment.
• Adept at conducting research into process and governance best practices, models, and methodologies.
• Excellent verbal and written communication skills 
• Experience working in Agile and Scrum methodologies.

CORE RESPONSIBILITIES                                                                                

• Lead the data security engineering team in developing and executing data security strategies and controls aligned with the organization's goals and compliance requirements.
• Define and implement scalable and effective data security architectures, ensuring the protection of sensitive data across the enterprise.
• Identify and assess data security risks, vulnerabilities, and threats. Develop and implement risk mitigation strategies and controls.
• Oversee the evaluation, selection, and deployment of cutting-edge data security technologies, tools, and solutions.
• Assist in incident response efforts for data security incidents, working closely with cross-functional teams to ensure effective containment and resolution.
• Provide leadership, mentorship, guidance, and career development opportunities to the data security engineering team members.
• Collaborate with cross-functional teams, including IT, compliance, legal, and business units, to ensure data security measures are integrated seamlessly.
• Stay abreast of evolving data security regulations and compliance standards. Ensure the organization's data security practices adhere to industry best practices and legal requirements.
• Promote a culture of data security awareness and educate employees about best practices for protecting sensitive information.
• Other assigned duties as necessary to ensure excellent security services and risk mitigation across the business.

Cultivate a High-Performing Team

• Create a compelling vision, clear direction and strategy for the team
• Generate enthusiasm and understanding of the information security vision and how each role contributes to the achievement of that vision
• Ensure capabilities are developed and resources are aligned to support the strategy
• Attract, motivate, develop and retain highly skilled leaders; champion and model leadership development
• Create and sustain a work environment that drives associate engagement and enables business success
• Ensure appropriate processes are in place and executed to drive collaboration and alignment within the team and with the broader IT organization
• Serve as a role model and ensure all information security leaders are visible and effective partners with IT counterparts, broader Marriott stakeholders, and service providers

Managing Work, Projects, and Policies 

• Coordinates and impl