SrMgr-Information Security

JOB SUMMARY

: The Sr. Manager, Continent Information Security Partnerships – US & Canada, is a key role in continent security aspects relating to execution, providing the necessary support and direction to the above property, on-property teams and other business stakeholders. The objective of this role is to attain maximum security compliance status and ensure that all implementations follow the company security standards. Enforce Marriott Security Standards and requirements for properties. The role will perform tracking and reporting on the established security metrics and will have a direct reporting line to the Senior Director/Director, Continent Information Security Partnerships. This position maintains strong relationships with the above property and on-property teams, other continent stakeholders including business and operations and provides support to Area IT Leaders with continent IT operations and provides assistance in liaising with additional teams within Security. CANDIDATE PROFILE Required Education and Experience  7+ years progressive IT work experience including: 3+ years in executing technology plans and/or project portfolios or information security programs. 2+ years’ of implementing enterprise security risk management frameworks and processes. Bachelor’s degree in Computer Science or related field or equivalent experience/certification. Fluent in English both spoken and written.. Hotel IT Management. Cybersecurity experience. Good understanding of PCI DSS. Expert level understanding of key network and technical security controls. Experience participating in and coordinating activities for security incident responses. Basic understanding of vulnerabilities and remediation actions Basic understanding of different attack vectors Good understanding of different protocols such as TCP/DNS/HTTP/VPN/, etc. Risk identification and remediation along with respective teams Knowledge of global regulatory standards including PDPA, PIPA, NDB, PDPB, etc., and understanding of PCI DSS Ability to demonstrate security experience via certifications (CISSP, CISA, CRISC, CISM, PCI ISA, etc.) or significant career accomplishments. Demonstrated ability to apply organizational information security policies at a discipline unit level. Knowledge of IT security within an infrastructure environment. Strong negotiating, influencing, and problem-resolution skills. Proven ability to effectively prioritize and execute tasks in a high-pressure environment. Experience in business systems and process planning. Graduate/post-graduate degree. CORE WORK ACTIVITIES  Provides leadership and guidance for Security project implementations within a designated continent partnering with the respective above property and property operation as well as IT teams. Initiates and completes audit programs including tracking of progress, results, and gaps remediation. Shares with GIS and continent partners and leads follow ups, such as IPPA, IT Peer Review, and PCI.  Represents Security in signing off on new property openings including tracking that property systems and security readiness is registered, to include application inventory Leads project implementations and report on any issues to the respective teams involved in the projects. Provides tactical communications and issues remediation planning and implementation with the continent IT Operations team. Implements audit programs including tracking of the results and gaps remediation follow ups such as IPPA, IT Peer Review, PCI, etc. Signs off the new property openings including tracking that all necessary information on the property systems and security readiness is registered, such as application inventory. Facilitates educational calls, materials and meetings to the Continent IT Operations and field associates Coordinates new systems and services security reviews and certifications and performs first line approval of security requests from the partners. Tracks the compliance performance of the continent and work with on-property IT associates along with the Area IT Managers towards issues remediations, providing necessary escalations and follow-ups to the respective teams. Reports on security & compliance related metrics to different stakeholders including GIS, Continent leadership Provides answers to general questions and queries around IT security. Identifies learning and knowledge gaps and facilitates educational calls, materials and meetings to the Continent IT Operations and field associates Plans and leads security reviews/certifications for new systems and services for properties across an assigned continent.  Performs first line approval of security requests from the partners and presents to leadership for additional approvals  Key contact for security compliance partnering with IT continent and global GIS teams. Tracks compliance of the continent and works with on property IT associates along with the Area IT Managers towards issues remediations, providing necessary escalations and follow ups to the respective teams. Partners with Cyber Incident Response Team during incident response and remediation with their respective continent  Point of contact for general questions and queries around global IT security programs, policies, procedures, and/or strategy. Provide necessary training and guidance to field IT teams, Non-technical staff, and other stakeholders Preparation of monthly reports and other related documentation to presenting to the leadership teamManaging Projects and Priorities Thinks creatively and practically to develop, execute, and implement new project plans.  Generates and provides accurate and timely results in the form of reports, presentations, etc.  Plans, develops, implements, and evaluates the quality of operations. Delivering on the Needs of Key Stakeholders Understands and meets the needs of key stakeholders.  Communicates concepts in a clear and persuasive manner that is easy to understand.  Demonstrates an understanding of business priorities.  Supports achievement of performance goals, budget goals, team goals, etc. Providing Technical Support and Consultation Provides recommendations to improve the effectiveness of processes and programs.  Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes. Demonstrates advanced knowledge of function-specific procedures.  Applies knowledge/judgment to achieve business goals.  Foresees, identifies, and resolves problems.  Keeps up-to-date technically and applies new knowledge to job.  Performs other reasonable duties as required for this position.  California Applicants Only: The salary range for this position is to annually.Colorado Applicants Only: The salary range for this position is to annually.Hawaii Applicants Only: The salary range for this position is to annually.New York Applicants Only: The salary range for this position is to annually.Washington Applicants Only: The salary range for this position is to annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Employees will accrue PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually.All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, (k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.The application deadline for this position is days after the date of this posting, //4.

---