Manager, Information and Cyber Security - Incident Response

IHG • GA, GA

11h • Hybrid

About The Position

IHG is seeking a Manager IT Information Security to support its Cyber Security Incident Response Team (CSIRT). The role leads and coordinates responses to cybersecurity incidents and drives continuous improvement of incident response processes and capabilities to reduce business impact and strengthen organizational resilience. The position works across global business and technology teams to identify and address security and risk gaps in IT systems and business processes, develop appropriate controls, and communicate security risks, incident impacts, and recommended actions to Senior Management.

The manager advises business and technology teams on security controls and incidents; develops and reviews standards, guidelines, playbooks, workflows, and procedures; and helps ensure alignment with IHG security policies and regulatory requirements. The role also evaluates security vendors and solutions, manages external security assessment and penetration-testing teams, supports security awareness training, audits computer security systems, and oversees relationships with internal and external security partners. The position is based in Atlanta, Georgia, with a hybrid expectation of three days per week in the office and approximately 10% travel.

Requirements

• Bachelor's or Master's degree in a relevant field, or an equivalent combination of education and work-related experience.
• Typically at least 10 years of progressive work-related experience, with demonstrated proficiency in multiple disciplines, technologies, or processes related to the position; preferably including cybersecurity incident response, security operations, or security investigations.
• Advanced knowledge of privacy and regulatory compliance, enterprise information security risk assessments, PCI remediation, data protection, and strategy.
• Advanced knowledge of preventive security controls for protecting applications and data, such as firewalls, IDS/IPS, WAFs, anti-malware systems, and cross-site scripting libraries.
• Advanced knowledge of cybersecurity incident response, security investigations, vulnerability management, and risk assessment.
• Knowledge of SOX, SOC, PCI, and regulatory security audit programs and audit procedures.
• Knowledge of operating system security controls, including Windows, Linux, and Unix.
• Advanced knowledge of IP networking, network protocols, architecture, and concepts, including their application to security investigations and incident response.
• Understanding of business, information technology, and security management processes.
• Advanced knowledge of design and development processes and business requirements analysis.
• Demonstrated project management experience organizing, planning, and executing large-scale projects and security capability improvements from conception through implementation.
• Willingness to travel 10%.

Nice To Haves

• CISSP certification is highly desired.
• CISA, CRISC, SANS, ISA, or ISC2 certifications are preferred.
• Experience with security automation, scripting, workflow development, or orchestration technologies, with demonstrated ability to apply technology to improve incident response and other security operations.

Responsibilities

• Manage cybersecurity incident response, security investigations, and information security risk processes, including coordinating complex incidents and communicating risks, business impacts, and recommended actions to Senior Management.
• Recommend and implement changes to security technology and practices in line with industry standards and best practices, including using automation and technology to improve incident response and security capabilities.
• Manage global technology strategies to address security objectives.
• Provide technical advisory services to business and technology teams regarding security controls and security incidents.
• Create and review security standards, guidelines, incident response playbooks, workflows, and procedures to meet IHG Information Security Policies and regulatory requirements.
• Evaluate vendors for new and existing solutions that support security assurance functions.
• Manage external teams conducting security assessments and network penetration testing.
• Conduct business analysis to help business units integrate security into their work, and assess and communicate security risks associated with company purchases or practices.
• Recommend and implement changes to security policies and practices based on identified risks and regulatory requirements; develop cost-effective solutions, including automation, workflow, and emerging technologies.
• Assist in developing and executing security awareness training.
• Audit the proper administration of computer security systems and associated software.
• Promote and oversee strategic security relationships with internal resources and external entities, including government, vendors, and partner organizations.
• Review regional standards, procedures, and controls annually to ensure alignment with policies published by the Global Technology Enterprise Architecture team.
• Develop, manage, and maintain processes to ensure centrally managed services and solutions are compliant, including tracking supporting reporting activities.
• Organize, plan, and execute large-scale projects and security capability improvements from conception through implementation.

Benefits

• Room discounts across IHG properties.
• Recharge days.
• Volunteering days throughout the year.
• Wellbeing support through the myWellbeing framework, covering health, lifestyle, and workplace wellbeing.
• Inclusive culture supporting belonging, growth, and making a difference.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager