SrMgr-Information Security- Vendor Risk Management

4 weeks ago


St Paul, United States Marriott Full time

**Job Number** 24070949 **Job Category** Information Technology **Location** Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States **Schedule** Full-Time **Located Remotely?** Y **Relocation?** N **Position Type** Management **JOB SUMMARY** The candidate will be responsible for completing and maintaining 3rd Party Hosting Service Provider reviews, including creating risk assessments, and security test and evaluations. The candidate will also be responsible for supporting the overall security program including security policy, procedures, and standards, assessing the risk of the internal and external IT systems, ensuring Marriott iT documents are compliant with Marriott security policies and procedures, and reviewing documents for accuracy and completeness. Conduct periodic re-assessment with focus on those with highly sensitive data. Perform application security vulnerability scanning and provide remediation options. Candidate will also assist in managing relationship with Service Providers who are responsible for the actual delivery of services, managing outcomes and results, and collaborating with stakeholders across IT and business departments to develop strategies for securing company information and assets. Shares responsibility for planning, directing, and coordinating compliance activities pertaining to technology projects for a given business unit. Verifies that project goals are accomplished and in line with business objectives. Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization. **CANDIDATE PROFILE** **Education and Experience** **Required:** + Bachelor’s degree in Information Systems or related field or equivalent experience/certification + 7+ years of information technology leadership experience including implementing, managing and governing security policies + 3+ years direct work experience in third-party Risk Management + One or more current information security certifications such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) **Preferred:** + A security certification such as GWAPT, GPEN, AWS Associate Architect, AWS Professional Architect, PCI experience. + Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls) + Technical leadership experience in an outsourced environment + Excellent communication skills and problem-solving ability + Experience conducting and maintaining vendor risk assessments + Experience with reviewing and assessing security controls of Cloud service providers + Proficient with assessing a multi-tiered system architecture (Web Server, App Server & Database) + Knowledge of OWASP Top 10 and SANS 25. + Working knowledge of the infrastructure and application scanning tools (such as Retina, Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, etc.) + Manual Web Application Testing experience. **CORE WORK ACTIVITIES** **Security Risk & Compliance** + Oversee, evaluate, and support the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization’s information assurance, security, and privacy requirements. Ensures appropriate treatment of risk, compliance, and assurance of internal policies and external regulations. + Perform security controls assessments of third-party providers – assess security architecture, adherence to the requirements, conduct application scanning and results validation + Document controls gap analysis and risk assessment of the third-party providers + Review controls exception requests and make risk-based approval decision + Lead, participate or perform various infrastructure compliance initiatives and projects + Perform Application Security Testing using (Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, Burp, or Retina) + Conduct and validate finding discovered during the scans + Monitor compliance to applicable security policies and standards and report related risk issues + Manage and administer processes and tools that enable the organization to identify, document, and track third party risks and compliance exceptions + Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend and operationalize appropriate mitigation countermeasures. + Provide sound advice and recommendations to leadership and staff on a variety of relevant topics within the pertinent subject domain. Advocate policy changes and make a case on behalf of the company via a wide range of written and oral work products. + Oversee the information assurance (IA) program of an information system in or outside the network environment; may include procurement duties. **Maintaining Goals** + Submits reports in a timely manner, ensuring delivery deadlines are met. + Promotes the documenting of project progress accurately. + Provides input and assistance to other teams regarding projects. **Managing Work, Projects, and Policies** + Manages and implements work and projects as assigned. + Generates and provides accurate and timely results in the form of reports, presentations, etc. + Analyzes information and evaluates results to choose the best solution and solve problems. + _Provides timely, accurate, and detailed status reports as requested._ **Demonstrating and Applying Discipline Knowledge** + Provides technical expertise and support to persons inside and outside of the department. + Demonstrates knowledge of job-relevant issues, products, systems, and processes. + Demonstrates knowledge of function-specific procedures. + Keeps up-to-date technically and applies new knowledge to job. + Uses computers and computer systems (including hardware and software) to enter data and/ or process information. **Delivering on the Needs of Key Stakeholders** + Understands and meets the needs of key stakeholders. + Develops specific goals and plans to prioritize, organize, and accomplish work. + Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. + Collaborates with internal partners and stakeholders to support business/initiative strategies + Communicates concepts in a clear and persuasive manner that is easy to understand. + Generates and provides accurate and timely results in the form of reports, presentations, etc. + Demonstrates an understanding of business priorities **Additional Responsibilities** + Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. + Demonstrates self-confidence, energy and enthusiasm. + Informs and/or updates leaders on relevant information in a timely manner. + Manages time effectively and conducts activities in an organized manner. + Presents ideas, expectations and information in a concise, organized manner. + Uses problem solving methodology for decision making and follow up. + Performs other reasonable duties as assigned by manager. **California Applicants Only:** The salary range for this position is $96,038.00 to $209,169.00 annually. **Colorado Applicants Only:** The salary range for this position is $96,038.00 to $190,154.00 annually. **Hawaii Applicants Only:** The salary range for this position is $116,205.00 to $209,169.00 annually. **New York Applicants Only:** The salary range for this position is $96,038.00 to $209,169.00 annually. **Washington Applicants Only:** The salary range for this position is $96,038.00 to $209,169.00 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually. All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions. The application deadline for this position is 28 days after the date of this posting, 4/22/2024. _Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law._ Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. **Be** where you can do your best work,​ **begin** your purpose, **belong** to an amazing global​ team, and **become** the best version of you.



  • St Paul, United States Marriott Full time

    Additional Information Three positions for this requisitions--all contractor conversion candidates Job Number 24058361 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY The Senior Manager...

  • Security Risk Analyst

    4 hours ago


    St Paul, United States The College Board Full time

    Risk Analyst College Board - Risk Management Location This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). Type: This is a full-time position About the Team The Information Security Governance Risk and Compliance (ISGRC) team at the College Board checks and...


  • St Petersburg, United States Botkeeper Full time

    Company Overview:Ready for the future of accounting? Botkeeper provides automated bookkeeping support to Accounting firms by using a powerful combination of machine learning, artificial intelligence, and skilled accountants. Our clients receive 24/7 accounting and support as well as incredible insight into their clients' financials with interactive...


  • St Louis, United States SumnerOne Full time

    Job Description As the Chief Information Security Officer (CISO) of SumnerOne, you will play a pivotal role in safeguarding our information assets and ensuring the integrity and availability of our systems. You will lead the development and implementation of a comprehensive information security strategy, aligned with our business goals. Your responsibilities...


  • St. Cloud, United States Nahan Full time

    Job Summary: We are seeking an experienced IT Security Administrator to ensure the protection and integrity of our organization's information systems. This role requires a thorough understanding of industry standards and regulations including SOC2, PCI-DSS, ISO, HIPAA, Hi-Trust, SAS70 T2, NIST, and COBIT. The ideal candidate will be responsible for...


  • St Cloud, United States Nahan Full time

    Job Summary: We are seeking an experienced IT Security Administrator to ensure the protection and integrity of our organization's information systems. This role requires a thorough understanding of industry standards and regulations including SOC2, PCI-DSS, ISO, HIPAA, Hi-Trust, SAS70 T2, NIST, and COBIT. The ideal candidate will be responsible for...


  • St Cloud, United States Nahan Full time

    Job Summary: We are seeking an experienced IT Security Administrator to ensure the protection and integrity of our organization's information systems. This role requires a thorough understanding of industry standards and regulations including SOC2, PCI-DSS, ISO, HIPAA, Hi-Trust, SAS70 T2, NIST, and COBIT. The ideal candidate will be responsible for...


  • Saint Paul, United States Horizontal Talent Full time

    Position Description: Project Manager, Information Technology / Information Security Our client is seeking a highly organized and motivated Project Manager to support their Cyber Defense program within their fast-paced Information Technology Information Security team. The successful candidate will be responsible for managing various workstreams and...


  • St Albans, United States Equifax Full time

    Our US Information Solutions (USIS) organization is currently in the process of consolidating various BU technology and business functions. The Information Security Specialist will support the Technology Information Security Officers (TISO's) in all of their daily engagements with IT. You will provide oversight and advice to ensure that a portion of the...


  • St. Paul, United States ACTS-Aviation Security, Inc Full time

    Description Join a Global Leader in Aviation Security! ACTS Aviation Security has immediate full-time opening for Aviation Security Supervisor at the Minneapolis St. Paul (MSP) Airport. ACTS offers competitive compensation and benefits, including medical, dental and vision insurance, 401(k) with company match, and paid vacations and holidays. ...

  • Risk Advisor

    4 weeks ago


    St Cloud, United States North Risk Partners Full time

    Job Type Full-time Description Are you interested in doing work that matters everyday with an organization intentional about building and living out a values-driven team culture? North Risk Partners is a fast-growing firm dedicated to serving the insurance and risk management needs of businesses and individuals. Our team consists of over 425 employees...

  • Senior Audit

    2 days ago


    St Paul, United States Marshall Area Chamber of Commerce Full time

    Schwan’s Company, a U.S. affiliate of the global lifestyle company, CJ CheilJedang Corporation, is a leading U.S. manufacturer and marketer of quality foods offered through retail-grocery and food-service channels. Our many popular brands include Red Baron, Tony’s, Big Daddy’s, Villa Prima and Freschetta pizza; Mrs. Smith’s and Edwards desserts; and...

  • Account Processor

    2 weeks ago


    St Paul, United States North Risk Partners Full time

    Job Type Full-timeDescriptionNorth Risk Partners is a fast-growing firm dedicated to serving the insurance and risk management needs of businesses and individuals. Our team consists of over 400 employees working in over 30 locations across five states, including Minnesota, Iowa, North Dakota, South Dakota, and Nebraska. North Risk's team is values-driven...


  • St Paul, United States MedNet Global Healthcare Solutions LLC Full time

    MedNet Egypt is one of the leading managed care service organizations that caters to healthcare needs and offers financial protection against unforeseen health risks. As a Cyber Security Specialist, you are the front line of defense for the safety and integrity of the company’s digital information. Working closely with management, you will be responsible...

  • Account Processor

    4 days ago


    St Paul, United States North Risk Partners Full time

    Job Type Full-time Description North Risk Partners is a fast-growing firm dedicated to serving the insurance and risk management needs of businesses and individuals. Our team consists of over 400 employees working in over 30 locations across five states, including Minnesota, Iowa, North Dakota, South Dakota, and Nebraska. North Risk's team is values-driven...


  • St Paul, United States Marriott Full time

    Job Number 24062106 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management Job Summary The Sr. Systems Engineer ensures that stability, integrity, and efficient security operations that support core...


  • St Louis, United States Prestige Staffing Full time

    The position is responsible for overseeing the organization's physical and electronic information security capabilities. To be successful in this position, you must have at least seven (7) years' experience operating as a security resource in an enterprise environment or equivalent experience. This position requires in-office support. After an initial period...


  • St. Louis, United States Prestige Staffing Full time

    The position is responsible for overseeing the organization’s physical and electronic information security capabilities. To be successful in this position, you must have at least seven (7) years’ experience operating as a security resource in an enterprise environment or equivalent experience. This position requires in-office support. After an initial...


  • St Louis, United States Prestige Staffing Full time

    The position is responsible for overseeing the organization’s physical and electronic information security capabilities. To be successful in this position, you must have at least seven (7) years’ experience operating as a security resource in an enterprise environment or equivalent experience. This position requires in-office support. After an initial...


  • St Louis, United States Prestige Staffing Full time

    The position is responsible for overseeing the organization’s physical and electronic information security capabilities. To be successful in this position, you must have at least seven (7) years’ experience operating as a security resource in an enterprise environment or equivalent experience. This position requires in-office support. After an initial...