Srmgr-information Security- Vendor Risk Management

3 weeks ago

Bethesda, United States Marriott International, Inc Full time

**Job Number** 24070949

**Job Category** Information Technology

**Location** Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP

**Schedule** Full-Time

**Located Remotely?** Y

**Relocation?** N

**Position Type** Management
**JOB SUMMARY**

Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization.

**CANDIDATE PROFILE**

**Education and Experience**

**Required**:

- Bachelor’s degree in Information Systems or related field or equivalent experience/certification
- 7+ years of information technology leadership experience including implementing, managing and governing security policies
- 3+ years direct work experience in third-party Risk Management
- One or more current information security certifications such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)

**Preferred**:

- A security certification such as GWAPT, GPEN, AWS Associate Architect, AWS Professional Architect, PCI experience.
- Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls)
- Technical leadership experience in an outsourced environment
- Excellent communication skills and problem-solving ability
- Experience conducting and maintaining vendor risk assessments
- Experience with reviewing and assessing security controls of Cloud service providers
- Proficient with assessing a multi-tiered system architecture (Web Server, App Server & Database)
- Knowledge of OWASP Top 10 and SANS 25.
- Manual Web Application Testing experience.

**CORE WORK ACTIVITIES**

**Security Risk & Compliance**
- Oversee, evaluate, and support the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization’s information assurance, security, and privacy requirements. Ensures appropriate treatment of risk, compliance, and assurance of internal policies and external regulations.
- Document controls gap analysis and risk assessment of the third-party providers
- Review controls exception requests and make risk-based approval decision
- Lead, participate or perform various infrastructure compliance initiatives and projects
- Perform Application Security Testing using (Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, Burp, or Retina)
- Conduct and validate finding discovered during the scans
- Monitor compliance to applicable security policies and standards and report related risk issues
- Manage and administer processes and tools that enable the organization to identify, document, and track third party risks and compliance exceptions
- Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend and operationalize appropriate mitigation countermeasures.
- Oversee the information assurance (IA) program of an information system in or outside the network environment; may include procurement duties.

**Maintaining Goals**
- Submits reports in a timely manner, ensuring delivery deadlines are met.
- Promotes the documenting of project progress accurately.
- Provides input and assistance to other teams regarding projects.

**Managing Work, Projects, and Policies**
- Manages and implements work and projects as assigned.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Analyzes information and evaluates results to choose the best solution and solve problems.
- _Provides timely, accurate, and detailed status reports as requested._
- Provides technical expertise and support to persons inside and outside of the department.
- Demonstrates knowledge of job-relevant issues, products, systems, and processes.
- Demonstrates knowledge of function-specific procedures.
- Keeps up-to-date technically and applies new knowledge to job.
- Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

**Delivering on the Needs of Key Stakeholders**
- Understands and meets the needs of key stakeholders.
- Develops specific goals and plans to prioritize, organize, and accomplish work.
- Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
- Collaborates with internal partners and stakeholders to support business/initiative strategies
- Communicates concepts in a clear and persuasive manner that is easy to understand.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Demonstrates an understanding of business priori

  • SrMgr-Information Security- Vendor Risk Management

    3 weeks ago

    Bethesda, Maryland, United States Bethesda Marriott Full time

    Job Number Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryThe candidate will be responsible for completing and maintaining 3rd Party Hosting Service Provider reviews, including...

  • SrMgr-Information Security- Vendor Risk Management

    1 week ago

    Bethesda, United States Marriott Full time

    Job Number 24070949 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY The candidate will be responsible for completing and maintaining 3rd Party Hosting Service Provider...

  • SrMgr-Information Security

    5 days ago

    Bethesda, United States Corporate Full time

    JOB SUMMARY: The Sr. Manager, Continent Information Security Partnerships – US & Canada, is a key role in continent security aspects relating to execution, providing the necessary support and direction to the above property, on-property teams and other business stakeholders. The objective of this role is to attain maximum security compliance status and...

  • SrMgr - Data Security and Governance

    2 weeks ago

    Bethesda, United States Marriott Full time

    Job DescriptionJOB SUMMARY The Senior Manager will support the development, implementation, and maintenance of the Data Governance strategy for the Company. The role will lead the execution and monitoring of the data governance program to ensure compliance to Company policies, security standards and the common controls framework. This position will meet on a...

  • SrMgr - Data Security and Governance

    4 days ago

    Bethesda, United States Marriott Full time

    Job DescriptionJOB SUMMARY The Senior Manager will support the development, implementation, and maintenance of the Data Governance strategy for the Company. The role will lead the execution and monitoring of the data governance program to ensure compliance to Company policies, security standards and the common controls framework. This position will meet on a...

  • SrMgr-Information Security

    1 week ago

    Bethesda, United States Corporate Full time

    JOB SUMMARYThe Marriott Enterprise Vulnerability Management group oversees attack surface reduction across a wide range of corporate, cloud, data center, and property locations. Our team members are passionate about protecting our data, systems, and service delivery functions across the globe against a broad range of adversaries. The Senior Manager,...

  • SrMgr - Security Architecture - SER Process Management

    1 week ago

    Bethesda, United States Corporate Full time

    JOB SUMMARY Establishes and leads the processes for Security Engagement Review (SER) Process to ensure they are performed in a timely manner. As a member of the Security Architecture and Strategy (SA) team, this role manages the effort in assigning engagements, verifying the SERs are moving forward, validating completion of assessments, and serving as...

  • SrMgr - Security Architecture - SER Process Management

    3 weeks ago

    Bethesda, United States Bethesda Marriott Full time

    Job Number 24072925Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob Summary Establishes and leads the processes for Security Engagement Review (SER) Process to ensure they are performed in a...

  • Manager - Information Security - Security Issues Management

    4 weeks ago

    Bethesda, United States Bethesda Marriott Full time

    Additional Information REplacement req for 24008682Job Number 24041663Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryManages security issues management as part of the Security...

  • SrMgr - Security Architecture - SER Process Management

    3 weeks ago

    Bethesda, Maryland, United States Bethesda Marriott Full time

    Job Number Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob Summary Establishes and leads the processes for Security Engagement Review (SER) Process to ensure they are performed in a timely...

  • SrMgr - Security Architecture - SER Process Management

    3 weeks ago

    Bethesda, Maryland, United States Marriott International Full time

    Job Number Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP Schedule Full-TimeLocated Remotely? YRelocation? NPosition Type Management JOB SUMMARY Establishes and leads the processes for Security Engagement Review (SER) Process to ensure they are performed in a timely...

  • Information Systems Security Officer

    3 days ago

    Bethesda, United States Hummingbirds Innovations Full time

    •Provide information assurance support to system(s) and program •Demonstrated experience with coordinating and implementing cyber security policies, standards and processes •Maintain operational security posture for system(s) through customized Risk Management Framework (RMF) to ensure established security processes and procedures are followed...

  • Dir-Information Security

    4 weeks ago

    Bethesda, United States Bethesda Marriott Full time

    Job Number 24059910Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob Summary The BISP (Business Information Security Partner) is the Information Security program owner for their assigned lines...

  • Information Systems Security Officer

    1 week ago

    Bethesda, United States Hummingbirds Innovations Full time

    Job DescriptionJob Description• Provide information assurance support to system(s) and program• Demonstrated experience with coordinating and implementing cyber security policies, standards and processes• Maintain operational security posture for system(s) through customized Risk Management Framework (RMF) to ensure established security processes and...

  • Mgr - Information Security - Data Governance

    5 days ago

    Bethesda, United States Bethesda Marriott Full time

    Job Number 24072895Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryThe Manager will support the implementation, and maintenance of the Data Governance strategy for the Company....

  • Mg - Information Security - Data Governance

    3 weeks ago

    Bethesda, Maryland, United States Bethesda Marriott Full time

    Additional Information Please post for 15 days--contractor conversionsJob Number Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryThe Manager will support the implementation, and...

  • Mgr - Information Security - Data Governance

    1 week ago

    Bethesda, Maryland, United States Bethesda Marriott Full time

    Job Number Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryThe Manager will support the implementation, and maintenance of the Data Governance strategy for the Company. Further,...

  • Information Systems Security Officer, Expert

    6 days ago

    Bethesda, United States SHYN I.T BUSINESS SOLUTIONS PRIVATE LIMITED Full time

    Provide information assurance support to system(s) and program - Demonstrated experience with coordinating and implementing cyber security policies, standards and processes - Maintain operational security posture for system(s) through customized Risk Management Framework (RMF) to ensure established security processes and procedures are followed - Strong...

  • Associate Architect

    4 weeks ago

    Bethesda, United States Bethesda Marriott Full time

    Job Number 24063624Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAPSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type ManagementJob SummaryContributes to and refines security strategies, requirements, and standards for applications and platforms. Supports...

  • Information Systems Security Officer

    1 week ago

    Bethesda, Maryland, United States Hummingbirds Innovations Full time

    • Provide information assurance support to system(s) and program • Demonstrated experience with coordinating and implementing cyber security policies, standards and processes • Maintain operational security posture for system(s) through customized Risk Management Framework (RMF) to ensure established security processes and procedures are...