Senior Manager - Information Security Risk Management

Job Number 24150925 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY The Senior Manager is responsible for leading and coordinating, articulating, and tracking actions related to developing and driving the implementation of cyber security risk management plans, ensuring effective cyber security risk management practices, and engaging with business unit members on a wide range of cyber security matters to achieve overall business objectives. The position plays a critical role in helping to ensure that the company's risk-taking entities are aware of the risks inherent in their activities and decisions, the impact of their actions on the company at an enterprise level, and opportunities to reduce, mitigate, or avoid risks altogether. CANDIDATE PROFILE Education and Experience Required: Bachelor's degree in Cybersecurity, Computer Sciences or related field or equivalent experience/certification 7+ years of progressive information technology or information security experience including: 3+ years of managing, consulting or working in the field of information security risk management 2+ years' experience implementing, managing or governing security technologies, including encryption, network security, intrusion detection and digital forensics Preferred: Current information security certification, including Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)1+ year experience in using the Factor Analysis of Information Risk (FAIR) Model Technical leadership experience in a sourced environment Project management skills with a demonstrated ability to work independently and with others Ability to manage the details and compliance with standards and expectations Technical infrastructure operations, administration, or engineering background Experience with NIST frameworks, including conducting security assessments, implementing controls, and ensuring compliance with standards Proficiency in utilizing ServiceNow, with an emphasis on navigating and leveraging the platform to enhance operational efficiency Expertise in identifying critical security vulnerabilities during risk assessments and assessing the efficacy of remediations addressing identified issues. CORE WORK ACTIVITIES Security Compliance & Risk Management Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develop and/or recommend appropriate mitigation countermeasures. Draft risk assessments and reports for senior management and other stakeholders. Stay current on emerging cyber and technology threats and potential implications. Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives. Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups. Be willing and able to adapt to a rapidly changing organization Provide strategic leadership and senior management for the organization's Cybersecurity risk oversight initiatives Provide subject matter expertise in cybersecurity, to include maintaining and sharing knowledge of current and emerging cyber risk management practices and tools. Advocate policy changes and makes a case on behalf of the company via a wide range of written and oral work products. Manage and measures information security implications within the organization, specific program, or other area of responsibility, to include strategic, personnel, infrastructure, policy enforcement, emergency planning, risk management, security awareness, and other resources. Maintaining Goals Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects. Managing Work, Projects, and Policies Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested. Demonstrating and Applying Discipline Knowledge Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information. Delivering on the Needs of Key Stakeholders Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies. Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities. The salary range for this position is $96,038 to $179,270 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Washington Applicants Only : Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually. All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions. The application deadline for this position is 28 days after the date of this posting, September 4, 2024. Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law. Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work," begin your purpose, belong to an amazing global" team, and become the best version of you.