Director IT Security

Highgate Hotels•Irving, TX

1d•Onsite

About The Position

The Director of IT Security oversees security responsibilities across hotel-level and corporate operations. The position combines technical understanding with knowledge of modern security practices and includes executive security briefings, security training programs, management of the PCI control program, and the development and implementation of security best practices across systems. The role is based in Irving, Texas.

Requirements

Bachelor of Science in Computer Science, Information Technology, Engineering, or a related field.
At least 6 years of security experience, including at least 2 years of senior leadership experience.
Demonstrated ability across a combination of risk management, information security, and engineering roles.
Experience and knowledge working with PCI standards.
Ability to identify, attract, hire, develop, and retain security professionals, and to provide the vision, plan, support, and culture needed for them to deliver impact.
Expertise in the threat landscape and innovative security strategies and products.
Hands-on operating style, with a forward-looking perspective and willingness to invest in people development and organizational development.
Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.
Expertise in understanding sophisticated technology and applying it practically to build solutions.
Knowledge of IT control frameworks and implementation experience with examples such as ISO, NIST, PCI, and ITIL.

Responsibilities

Collaborate with the CISO and partner with executives and their leadership teams to build security roadmaps and plans.
Collaborate with and oversee multiple Managed Security Services Partners.
Champion security practices and major security and compliance initiatives.
Work with Enterprise Risk Management to establish quarterly, annual, and long-term security and risk management goals.
Articulate strategies, define metrics, and provide updates to executive leadership.
Lead responses to third-party owner audits concerning IT security controls.
Partner with business-unit leadership to develop, plan, and execute major security initiatives.
Develop and maintain an asset prioritization program based on asset risk and business impact.
Update cybersecurity and information security strategies to address new threats.
Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk.
Ensure development and implementation of an ongoing employee and member security awareness program.
Produce and maintain security policies and identify areas where new policies are needed.
Direct development and execution of an enterprise-wide Incident Response Plan.
Oversee and prepare the security budget.
Stay informed about security news and trends to guide threat mitigation.
Perform other duties as assigned.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term and long-term disability insurance
401(k) Retirement Plan with employer matching contributions
Paid holidays
Paid vacation
Paid sick leave in accordance with applicable law
Employee assistance program (EAP)
Educational opportunities and tuition reimbursement
Paid jury duty leave, personal leave, medical leave, and military leave in accordance with applicable law
For employees based in Washington: 8 paid holidays per year and up to 20 days of paid vacation per year, based on classification and length of service; paid sick and safe time accrues at 1 hour per 30 hours worked, with up to 72 unused hours carried over.
For employees based in Colorado: 8 paid holidays per year; Denver employees receive 64 hours of designated holiday time per calendar year; up to 20 days of paid vacation per year, based on classification and length of service; 6 days or 48 hours of paid sick leave per year, accrued at 1 hour per 30 hours worked.
For employees based in California: 8 paid holidays per year and up to 20 days of paid vacation per year, based on classification and length of service; additional time-off and paid-sick-time provisions vary by location and classification.