JOB SUMMARY:

The Sr. Director, Global Information Security (GIS) Compliance Program is a key member of the GIS leadership team responsible for the enterprise alignment to our cyber regulatory and/or settlement agreements. They will lead an organization that coordinates tactical efforts across the company to provide visibility into our Information Security Program to settlement agreement, monitoring a portfolio of projects needed to maintain compliance. This includes the management testing of the Information Security Program, monitoring and reporting of compliance to the provisions, driving actions needed to maintain compliance and adhere to the obligations. Ensures executive awareness and compliance through management of program KPI/KRIs to ensure that we are adhering to order obligations.

CANDIDATE PROFILE

Required:

Bachelor's degree in Cybersecurity, Business Administration or a related field or equivalent experience.

10+ years of leadership experience in Information Technology and/or Consulting including:

5+ years of experience managing complex, multifunctional technology or security initiatives

5+ years of experience in portfolio or program management and governance reporting at executive levels

Prior experience with compliance programs and/or government or legal compliance requirements

Ability to influence others, including those at senior organizational levels

Preferred:

Graduate/post graduate degree or legal degree preferred

Exceptional portfolio or program management competence and skills

Excellent verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms

Ability to distribute, assign and ensure completion of work throughout various teams without direct management authority

Strong analytical skills for planning, estimating, budgeting and monitoring program/project work

Ability to form and foster high performing teams

Ability to accomplish results through others, particularly by establishing relationships and effective controls

Strong negotiating, influencing and problem resolution skills

Proven ability to effectively prioritize and execute tasks in a high-pressure environment

Project Management Professional (PMP) certification, portfolio or similar certifications.

CORE WORK ACTIVITIES

Information Security Compliance and Settlement Program Leadership

Reporting and Management of portfolio of projects or remediations linked to regulatory commitments needed to maintain compliance to the Settlement agreement

Manage testing of ISP controls. Provide results that can serve settlement purposes.

Work with teams to standardize processes for monitoring, metrics and reporting for compliance efforts for regulatory commitments.

Provide visibility to the settlement program and activities to leadership. Raise and mitigate risks to compliance to the regulatory commitments.

Ensure compliance activities are aligned or integrated as much as possible with the Information Security Program & processes and Risk Assessments.

Develop and lead a high functioning team that leverages program management expertise, best practices and analytics to manage portfolio

Review key initiatives to ensure alignment with legal agreements and cyber risk program.

Partner with senior leaders to facilitate portfolio management effectiveness

Supervise all aspects of department performance. Determines the priorities, goals, plans and resources to ensure delivery of effective project and portfolio management function. Sets goals and expectations for direct reports using the performance review process.

Make and execute the necessary decisions to keep moving forward toward achievement of goals.

Create a synergistic leadership team and environment that consistently delivers positive results and continuously strives to improve these results. Provide targeted and timely communication of results, achievements and challenges to direct reports, peers, and leaders.

Inspires and motivates team to achieve operational excellence. Communicate a clear and consistent message regarding goals to produce desired results.

Plan, develop, implement, and evaluate the quality of the teams’ operations to ensure a flexible and scalable organization Develops and Enables Program Management Capabilities

Lead the development and implementation of tools and processes to manage:

Program & Project risks and interdependences

Benefits realization/Settlement alignment

Project estimates and costs

Resources and metrics

Lead efforts to design a risk management approach for the program and establish processes to manage adherence to risk management processes.

Work with teams facilitate the development of actionable work plans, deployment models, and resource allocations to maintain compliance with the intent of the consent agreement.

Establish and implement processes to communicate program and MBO performance

Define program management roles and the related refinement and management of settlement agreement portfolio and management of KPIs and metrics.

Identify key drivers of success and keeps the team focused on those that are critical to achieve results.

Review goals and strategies to ensure alignment with the discipline and GT roadmaps.

Develop and implement strategies that enable Marriott to deliver products and services to meet or exceed the needs of the business aligning to settlement agreement and reducing the cybersecurity risk posture of the company

Manage Quality & Governance

Participate with Governance Forums to enable management of the cross program initiatives related to settlement compliance

Ensure that the appropriate metrics and analyses are conducted and that communications protocols are established to keep stakeholders informed

Cultivate a High-Performing Team

Create a compelling vision, clear direction and strategy for the team

Generate enthusiasm and understanding of the information security vision and how each role contributes to the achievement of that vision

Continuously improve program, team, and job structures and ensures clear leadership accountabilities are in place.

Ensure capabilities are developed and resources are aligned to support the strategy

Attract, motivate, develop and retain highly skilled leaders; champion and model leadership development

Set goals and expectations for direct reports using the performance review process and holds staff accountable for performance goals.

Hold leaders accountable for building teams with the appropriate mix of talent and skills to drive innovation and performance. Cultivate direct reports and their teams, supporting their growth and development plans

Create and sustain a work environment that drives associate engagement and enables business success

Ensure appropriate processes are in place and executed to drive collaboration and alignment within the team and with the broader IT organization

Facilitate regular, ongoing communication and collaboration with your team and across the organization

Serve as a role model and ensure all information security leaders are visible and effective partners with IT counterparts, broader Marriott stakeholders, and service providers

Utilize an “open door policy” and review employee satisfaction results to identify and address employee problems or concerns

Perform other reasonable duties as required for the position.

At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates.  We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.

All positions offer a 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Click here to learn more.

Full-time positions also offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave and educational assistance.

Washington Applicants Only: Employees will accrue paid sick leave, 0.077 PTO balance for every hour worked and be eligible to receive a minimum of 9 holidays annually.

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.

Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.