Senior Director, Information Security – Compliance Program Job at Marriott Bonvoy (Bethesda)

Senior Director, Information Security – Compliance Program

Marriott Bonvoy

Location:
United States , Bethesda

Category:
IT - Administration

Contract Type:
Not provided

Salary:

151100.00 - 238800.00 USD / Year

Save Job

Apply Position

Job Description:

The Sr. Director, Global Information Security (GIS) Compliance Program is a key member of the GIS leadership team responsible for the enterprise alignment to our cyber regulatory and/or settlement agreements. They will lead an organization that coordinates tactical efforts across the company to provide visibility into our Information Security Program to settlement agreement, monitoring a portfolio of projects needed to maintain compliance.

Job Responsibility:

Information Security Compliance and Settlement Program Leadership
Reporting and Management of portfolio of projects or remediations linked to regulatory commitments needed to maintain compliance to the Settlement agreement
Manage testing of ISP controls
Work with teams to standardize processes for monitoring, metrics and reporting for compliance efforts for regulatory commitments
Provide visibility to the settlement program and activities to leadership
Ensure compliance activities are aligned or integrated as much as possible with the Information Security Program & processes and Risk Assessments
Develop and lead a high functioning team that leverages program management expertise, best practices and analytics to manage portfolio
Review key initiatives to ensure alignment with legal agreements and cyber risk program
Partner with senior leaders to facilitate portfolio management effectiveness
Supervise all aspects of department performance
Develops and Enables Program Management Capabilities
Manage Quality & Governance
Cultivate a High-Performing Team

Requirements:

Bachelor's degree in Cybersecurity, Business Administration or a related field or equivalent experience
10+ years of leadership experience in Information Technology and/or Consulting
5+ years of experience managing complex, multifunctional technology or security initiatives
5+ years of experience in portfolio or program management and governance reporting at executive levels
Prior experience with compliance programs and/or government or legal compliance requirements
Ability to influence others, including those at senior organizational levels

Nice to have:

Graduate/post graduate degree or legal degree preferred
Exceptional portfolio or program management competence and skills
Excellent verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms
Ability to distribute, assign and ensure completion of work throughout various teams without direct management authority
Strong analytical skills for planning, estimating, budgeting and monitoring program/project work
Ability to form and foster high performing teams
Ability to accomplish results through others, particularly by establishing relationships and effective controls
Strong negotiating, influencing and problem resolution skills
Proven ability to effectively prioritize and execute tasks in a high-pressure environment
Project Management Professional (PMP) certification, portfolio or similar certifications

What we offer:

401(k) plan
stock purchase plan
discounts at Marriott properties
commuter benefits
employee assistance plan
childcare discounts
medical coverage
dental coverage
vision coverage
health care flexible spending account
dependent care flexible spending account
life insurance
disability insurance
accident insurance
adoption expense reimbursements
paid parental leave
educational assistance
paid sick leave
PTO
holidays

Additional Information:

Job Posted:
March 21, 2026

Expiration:
April 06, 2026

Employment Type:

Fulltime

Work Type:

Hybrid work

Marriott Bonvoy - All Job Offers

Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Chief Country Compliance Officer Sr Mgr

Oversees the Citi Compliance Risk Management Program for a medium to smaller fra...

Location

Bahamas , Nassau

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Credibility as a subject matter expert and experience of dealing with issues that have a high impact at all levels of the organization
Experience of working with key country level regulators and industry associations
Knowledge of local regulatory requirements and obligations and the ability to identify emerging compliance issues and themes
An ability to influence senior business leaders on all compliance risk-related matters affecting the business. The individual should have the ability to independently challenge, when needed, while at the same time being supportive and solution-based and not being perceived as obstructive
An ability to be “hands on” and “in the trenches” with the direct team, while also bringing a sense of strategic vision and a global sensibility to the function
Ability to navigate and negotiate through conflicting demands to maintain focus on priority objectives while ensuring key stakeholders’ needs are met
Strong team leadership, communication, interpersonal and management skills, with a track record of leading through change and the ability to effectively communicate the strategic vision to various stakeholder groups
Effective negotiation skills, a proactive and “no surprises” approach in communicating issues and strength in sustaining independent views. Strong presentation and relationship management and influencing skills are essential
The ability to thrive and execute in a complex, highly matrixed, global environment
Bachelor’s Degree highly preferred or relevant, equivalent experience. Preference for post graduate degree and/or recognized professional qualifications where applicable. Professional qualifications may include: CRMC or equivalent, CPA, ACA, CIA, CFA, ACAMS, etc. strong technical knowledge of compliance regulations and requirements, experience within a highly complex, global financial institution, regulator or related industry participant.

Job Responsibility

Annual Country Compliance Plan: Preparing, obtaining approval and successfully completing an annual compliance risk management plan, in accordance with the global template and content and presentation requirements, setting out how compliance risk will be managed within the jurisdiction and its constituent parts, and the role to be played by ICRM in order to achieve the plan. Identification of the jurisdictional requirements, accountabilities and the process ownership and monitoring and testing ownership, as well as the determination of suitable staffing, hours required and secured budget in order to achieve the state of compliance within risk appetite will be set out in the plan, which will be reviewed quarterly with the jurisdictional CCC and ICRM, as well as any applicable legal entity, as well as where required by applicable regulatory agencies. The annual country compliance plan must take into consideration the applicable compliance risk assessments and MCAs appropriate to the jurisdiction and its activities.
State of Compliance Reporting: Preparing quarterly, in accordance with the approved global format, and in adherence to all established requirements for the State of Compliance reporting. The State of Compliance report will be presented to the appropriate CCC, BRCC and legal entity Board or Board Audit Committee, or other such Board committee required within the jurisdiction.
Enhancing Governance: Providing a valued interactive program of support and compliance risk management services covering the assessment and reporting of Key Compliance Risks across products, services, functions, legal entities, service centers and the jurisdiction as a whole. Providing stakeholders with insight and practical solutions as well as credible challenge to improve the ethical control culture, and conduct risk environment. Timely reporting of significant local regulatory issues to local, overseas, regional, and global stakeholders. Same-day escalation of regulatory reports received. Maintaining on-going assessment and reporting of the State of Compliance through the relevant corporate governance committees such as country audit committee(s) and/or subsidiary board(s), country coordinating committee and business risk management committee, and other management body(ies). Key Activities Compliance Risk Culture:
Stakeholder Support and Relationships: Developing senior management relationships, including with legal entity management focus, inclusive of non-executive directors (where they exist in the jurisdiction), and the CCO as well as product functional and entity/service center line management. Informing senior management and directors of subsidiary boards, and the country/business management of significant compliance matters that require their attention or action. Proactively anticipate and help the business and functions plan for changes in the compliance and regulatory environment in the country. Provide support to compliance programs and country/business management on policy interpretation and “gray area” exposures. Build and maintain strong relationships with other functional leads, including Legal, Risk Management, including Operational Risk Management, and Internal Audit to create a supportive and seamless compliance and ethical control culture and an appropriate conduct risk environment. Key Activities Processes and Activities:
Regulatory Management and Coordination: Supporting the Citi Country Officer (CCO) in the management and development of regulatory relationships. Coordinating as the key interface with regulators on compliance risk management issues and supervisory exam management matters. Providing same day notification of regulator correspondence to Citi Compliance Officer, Regulatory Liaison and Exam Management CCO and ICRM COO. Providing leadership, coordination and regular interaction with the [insert country] authorities on behalf of ICRM and the Citi franchise. Record regulator correspondence and minutes of regulator meetings on Citi system in line with the Global Regulatory Exam Management Governance and Process Standards. Ensuring prompt recording of, responses to, and escalation of regulatory queries, notices of violations and breaches, any forbearance, and concerns identified. Deliver to regulators and supervisors a valued interactive program of support and assurance in accordance with requirements and appropriate expectations on compliance issues, trends, themes, root cases and impacts relating to governance, regulatory risk management and internal control issues. The overall objective is to earn the regulator’s trust and to establish a strong, independent and professional regulatory relationship across the franchise.
Regulatory Inventory: Ensuring prompt identification, logging in, evaluation and formulation of a plan to address requirements arising from new and amended laws, regulations, rules and other requirements and expectations from regulatory and enforcement authorities.
Regulatory Change Management and Controls: Ensuring that the regulatory change management requirements and processes, along with the regulatory control framework for existing requirements, are effectively operating within the country with respect to the identification, impact assessment and implementation of all applicable laws, regulations, rules and related processes, controls and reporting that impact Citi activities in the jurisdiction.
Anti-Money Laundering Compliance Risk Management (ACRM): Providing strategic direction, oversight, coordination and cooperation in respect of the country’s Anti-Money Laundering compliance risk management program. Partner closely and with the Head of ACRM to ensure a strong linkage between ICRM and ACRM.
Independent Compliance Risk Management (Program and Product/Service/Function focused*): Providing direction and oversight in supporting the ICRM teams in the country related to local requirements and the applicable extraterritorial laws, regulations, relevant Citi policies, standards, and global procedures. Deliver consistent application of program procedures and be accountable to program owners consistent with the ICRM methodology and CRM Framework. *Programs include but are not limited to: Sanctions
Anti Bribery

Fulltime

Senior Director, Information Security – Compliance Program

Marriott Bonvoy

Location:
United States , Bethesda

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
March 21, 2026

Expiration:
April 06, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Director, Information Security – Compliance Program

Senior Director of Corporate IT

Senior Director, Privacy

Senior Director, Application Development, China

Senior Director of Product (Head of International - Real Time Operations)

Director of Governance, Risk, Compliance and Trust

Executive Director, Governance, Risk and Compliance

Program Security Representative (PSR) III

Chief Country Compliance Officer Sr Mgr

Senior Director, Information Security – Compliance Program

Marriott Bonvoy

Location:United States , Bethesda

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:March 21, 2026

Expiration:April 06, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Director, Information Security – Compliance Program

Senior Director of Corporate IT

Senior Director, Privacy

Senior Director, Application Development, China

Senior Director of Product (Head of International - Real Time Operations)

Director of Governance, Risk, Compliance and Trust

Executive Director, Governance, Risk and Compliance

Program Security Representative (PSR) III

Chief Country Compliance Officer Sr Mgr

Location:
United States , Bethesda

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
March 21, 2026

Expiration:
April 06, 2026