Senior Director, Information Security – Compliance Program Job at Marriott Bonvoy (Bethesda)

Job Description

The Sr. Director, Global Information Security (GIS) Compliance Program is a key member of the GIS leadership team responsible for the enterprise alignment to our cyber regulatory and/or settlement agreements. They will lead an organization that coordinates tactical efforts across the company to provide visibility into our Information Security Program to settlement agreement, monitoring a portfolio of projects needed to maintain compliance. This includes the management testing of the Information Security Program, monitoring and reporting of compliance to the provisions, driving actions needed to maintain compliance and adhere to the obligations. Ensures executive awareness and compliance through management of program KPI/KRIs to ensure that we are adhering to order obligations.

Job Responsibility

Information Security Compliance and Settlement Program Leadership
Reporting and Management of portfolio of projects or remediations linked to regulatory commitments needed to maintain compliance to the Settlement agreement
Manage testing of ISP controls
Provide results that can serve settlement purposes
Work with teams to standardize processes for monitoring, metrics and reporting for compliance efforts for regulatory commitments
Provide visibility to the settlement program and activities to leadership
Raise and mitigate risks to compliance to the regulatory commitments
Ensure compliance activities are aligned or integrated as much as possible with the Information Security Program & processes and Risk Assessments
Develop and lead a high functioning team that leverages program management expertise, best practices and analytics to manage portfolio
Review key initiatives to ensure alignment with legal agreements and cyber risk program
Partner with senior leaders to facilitate portfolio management effectiveness
Supervise all aspects of department performance
Determines the priorities, goals, plans and resources to ensure delivery of effective project and portfolio management function
Sets goals and expectations for direct reports using the performance review process
Make and execute the necessary decisions to keep moving forward toward achievement of goals
Create a synergistic leadership team and environment that consistently delivers positive results and continuously strives to improve these results
Provide targeted and timely communication of results, achievements and challenges to direct reports, peers, and leaders
Inspires and motivates team to achieve operational excellence
Communicate a clear and consistent message regarding goals to produce desired results
Plan, develop, implement, and evaluate the quality of the teams’ operations to ensure a flexible and scalable organization
Develops and Enables Program Management Capabilities
Lead the development and implementation of tools and processes to manage Program & Project risks and interdependences, Benefits realization/Settlement alignment, Project estimates and costs, Resources and metrics
Lead efforts to design a risk management approach for the program and establish processes to manage adherence to risk management processes
Work with teams facilitate the development of actionable work plans, deployment models, and resource allocations to maintain compliance with the intent of the consent agreement
Establish and implement processes to communicate program and MBO performance
Define program management roles and the related refinement and management of settlement agreement portfolio and management of KPIs and metrics
Identify key drivers of success and keeps the team focused on those that are critical to achieve results
Review goals and strategies to ensure alignment with the discipline and GT roadmaps
Develop and implement strategies that enable Marriott to deliver products and services to meet or exceed the needs of the business aligning to settlement agreement and reducing the cybersecurity risk posture of the company
Manage Quality & Governance
Participate with Governance Forums to enable management of the cross program initiatives related to settlement compliance
Ensure that the appropriate metrics and analyses are conducted and that communications protocols are established to keep stakeholders informed
Cultivate a High-Performing Team
Create a compelling vision, clear direction and strategy for the team
Generate enthusiasm and understanding of the information security vision and how each role contributes to the achievement of that vision
Continuously improve program, team, and job structures and ensures clear leadership accountabilities are in place
Ensure capabilities are developed and resources are aligned to support the strategy
Attract, motivate, develop and retain highly skilled leaders
champion and model leadership development
Set goals and expectations for direct reports using the performance review process and holds staff accountable for performance goals
Hold leaders accountable for building teams with the appropriate mix of talent and skills to drive innovation and performance
Cultivate direct reports and their teams, supporting their growth and development plans
Create and sustain a work environment that drives associate engagement and enables business success
Ensure appropriate processes are in place and executed to drive collaboration and alignment within the team and with the broader IT organization
Facilitate regular, ongoing communication and collaboration with your team and across the organization
Serve as a role model and ensure all information security leaders are visible and effective partners with IT counterparts, broader Marriott stakeholders, and service providers
Utilize an “open door policy” and review employee satisfaction results to identify and address employee problems or concerns

Requirements

Bachelor's degree in Cybersecurity, Business Administration or a related field or equivalent experience
10+ years of leadership experience in Information Technology and/or Consulting including
5+ years of experience managing complex, multifunctional technology or security initiatives
5+ years of experience in portfolio or program management and governance reporting at executive levels
Prior experience with compliance programs and/or government or legal compliance requirements
Ability to influence others, including those at senior organizational levels

Nice to have

Graduate/post graduate degree or legal degree preferred
Exceptional portfolio or program management competence and skills
Excellent verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms
Ability to distribute, assign and ensure completion of work throughout various teams without direct management authority
Strong analytical skills for planning, estimating, budgeting and monitoring program/project work
Ability to form and foster high performing teams
Ability to accomplish results through others, particularly by establishing relationships and effective controls
Strong negotiating, influencing and problem resolution skills
Proven ability to effectively prioritize and execute tasks in a high-pressure environment
Project Management Professional (PMP) certification, portfolio or similar certifications

What we offer

401(k) plan
stock purchase plan
discounts at Marriott properties
commuter benefits
employee assistance plan
childcare discounts
medical, dental, vision
health care flexible spending account
dependent care flexible spending account
life insurance
disability insurance
accident insurance
adoption expense reimbursements
paid parental leave
educational assistance
paid sick leave
PTO

Marriott Bonvoy - All Job Offers

Select Country

Senior Director, Information Security – Compliance Program

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Senior Director, Information Security – Compliance Program

Senior Director - Health Information Management

Senior Director of Information Technology

Chief Information Security Officer

Vp Of Information Security & Risk Management

VP of Information Security & Risk Management

Senior Director of Data Center Operations

Privacy Compliance Director

Program Security Representative (PSR) I

Our AI answers in your language