Director IT Security

Highgate Hotels Corporate Office TX•Irving, TX

3d•Onsite

About The Position

The Director of IT Security will oversee security responsibilities across hotel-level and corporate operations. The role requires technical expertise and a strong understanding of modern security practices. Key activities include executive security briefings, managing security training programs and the PCI control program, and developing and implementing security best practices across systems. The position is based in Irving, Texas.

Requirements

Bachelor of Science degree in Computer Science, Information Technology, Engineering, or a related field.
At least 6 years of security experience, including at least 2 years of senior leadership experience.
Demonstrated ability across a combination of risk management, information security, and engineering roles.
Experience and knowledge working with PCI standards.
Ability to identify, attract, hire, develop, and retain security professionals, and provide them with the vision, plan, support, and culture needed to deliver impact.
Expert knowledge of the threat landscape and innovative security strategies and products.
Hands-on operating style, with a forward-looking perspective and willingness to invest in people development and organizational development for a large company.
Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.
Expertise in understanding sophisticated technology and applying it practically to build solutions.
Knowledge of IT control frameworks and experience implementing frameworks such as ISO, NIST, PCI, and ITIL.

Responsibilities

Collaborate with the CISO and partner with executives and their leadership teams to build security roadmaps and plans.
Collaborate with and oversee multiple Managed Security Services Partners.
Champion security practices and major security and compliance initiatives.
Work with Enterprise Risk Management to establish quarterly, annual, and long-term security and risk management goals.
Articulate strategies, define metrics, and provide updates to executive leadership.
Lead audit responses to third-party owner auditors regarding IT security controls.
Partner with business unit leadership to develop, plan, and execute major security initiatives.
Develop and maintain an asset prioritization program based on asset risk and business impact.
Update cybersecurity and information security strategies to address new threats.
Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk.
Ensure development and implementation of an ongoing employee and member security awareness program.
Produce and maintain security policies and identify areas where new policies are needed.
Direct development and execution of an enterprise-wide Incident Response Plan.
Oversee and prepare the security budget.
Stay informed about security news and trends to guide threat mitigation.
Perform other duties as assigned.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term and long-term disability insurance
401(k) retirement plan with employer matching contributions
Paid holidays
Paid vacation
Paid sick leave in accordance with applicable law
Employee assistance program (EAP)
Educational opportunities and tuition reimbursement
Paid jury duty leave, personal leave, medical leave, and military leave in accordance with applicable law
For employees based in Washington: up to 20 days of paid vacation per year, based on classification and length of service, and paid sick and safe time accrual
For employees based in Colorado: paid holiday time, up to 20 days of paid vacation per year, and paid sick leave
For employees based in California: up to 20 days of paid vacation per year (with certain Los Angeles exceptions) and paid sick time