Manager, Information and Cyber Security - Incident Response

IHG is seeking a Manager IT Information Security that will be responsible for supporting IHG’s Cyber Security Incident Response Team (CSIRT), including leading and coordinating the response to cyber security incidents and driving continuous improvement of incident response processes and capabilities to reduce business impact and strengthen organizational resilience.

In this role, you will work across business and technology teams to identify and address security and risk gaps in IT systems and business processes globally, including the development of appropriate controls. The Manager IT Information Security will communicate security risks, incident impacts, and recommended actions to Senior Management.

Your Day to Day

• Manage cyber security incident response, security investigations, and Information Security risk processes, including the coordination of complex incidents, and communicate risks, business impacts, and recommended actions to Senior Management.
• Recommend and implement changes in security technology and practices in accordance with industry standards and best practices, including opportunities to leverage automation and technology to improve incident response and related security capabilities. Manage global technology strategies to address security objectives.
• Provide technical advisory services to business and technology teams concerning security controls and security incidents. Identify opportunities to improve incident response and related security capabilities through process, technology, and automation.
• Create and review standards, guidelines, incident response playbooks, workflows, and procedures to meet IHG Information Security Policies as well as regulatory requirements. Evaluate vendors for new and existing solutions to assist in providing security assurance functions. Manage external teams conducting security assessments and network penetration testing. Conduct business analysis to assist business units in integrating security into their work. Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Recommend and implement changes in security policies and practices in accordance with risks identified and regulatory requirements. Independently provide solutions to security problems in a cost-effective manner, including the application of automation, workflow, and emerging technologies to improve operational effectiveness.
• Assist in developing and executing security awareness training. Audit the proper administration of all computer security systems and their corresponding or associated software. Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.
• Review regional standards, procedures, and controls on an annual basis to ensure they align with policy published by the Global Technology Enterprise Architecture (EA) team. Develop, manage, and maintain processes to ensure centrally managed services and solutions are compliant, including the tracking of all supporting reporting activities.

What We Need From You

• Bachelor's or Master's Degree in a relevant field of work or an equivalent combination of education and work-related experience. Highly Desired Certification: CISSP Preferred Certifications: CISA, CRISC, SANS, ISA, ISC2
• Typically, a minimum of 10 years of progressive work-related experience with demonstrated proficiency in multiple disciplines, technologies, or processes related to the position, preferably including cyber security incident response, security operations, or security investigations.
• Advanced knowledge of privacy and regulatory compliance including information security enterprise risk assessments, PCI remediation, data protection and strategy
• Advanced knowledge of preventative security controls, particularly in relation to protecting applications and data (i.e., firewalls, IDS/IPS, WAFs, anti-malware systems, cross-site scripting libraries, etc.)
• Advanced knowledge of security processes such as cyber security incident response, security investigations, vulnerability management, and risk assessment, knowledge of SOX, SOC, PCI, and regulatory security audit programs and audit procedurek, knowledge of operating system security controls (e.g., Windows, Linux, Unix), and advanced knowledge of IP networking and network protocols, architecture, and concepts, including their application to security investigations and incident response
• Understanding of business and information technology and security management processes. Strongly prefer experience with security automation, scripting, workflow development, or orchestration technologies, with demonstrated ability to apply technology to improve incident response and other security operations.
• Advanced knowledge of design and development processes and business requirements analysis. Demonstrated project management experience in organizing, planning, and executing large-scale projects and security capability improvements from conception through implementation

Travel: 10%

Location - Atlanta, GA: Our hybrid work structure is an expectation of three (3) days a week in office . This expectation may be adjusted to evolve with the changing needs of the business.

At IHG Hotels & Resorts, we work together to deliver True Hospitality for Good on a global scale. With corporate offices and over 6,000 hotel destinations worldwide, a career at IHG is the perfect way to broaden your horizons. You’ll experience our unique culture and brilliant colleagues who will support and inspire you. With a host of corporate opportunities to choose from, wherever you are on your career journey, and whatever you want to achieve there’s Room for You at IHG.

Over recent years, we’ve transformed our company. We have bold ambitions to drive performance and maintain our relentless focus on growth in order to be the hotel company of choice that guests & owners love.

We are a hospitality business at our core and value connections and being together helps us foster a unique sense of belonging that also supports productivity. That’s why here at IHG, we give our colleagues flexibility and balance – working in a hybrid way, blending office and remote working collectively. We recognise that every role is different, that’s why leaders work with teams to determine how and when they collaborate.

We provide a wide range of benefits designed to help you live your best work life. These include impressive room discounts across our many properties, recharge days and volunteering days throughout the year. Through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace. We offer a unique and inclusive culture, where there is always Room for You to belong, grow and make a difference.

Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other category protected by applicable laws. We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.

Don't quite meet every single requirement, but still believe you'd be a great fit for the job? We'll never know unless you hit the 'Apply' button. Start your journey with us today.

Important information :

• The salary range listed is the lowest to highest pay scale we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the pay range will be based on several factors, including relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, and business or organizational needs.
• No amount of pay is considered to be wages or compensation until it is earned, vested, and determinable. The amount and availability of any bonus, commission, or other form of compensation allocable to a particular employee remain in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.
• EEO Is The Law - click here for more information about Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity.
• If you require reasonable accommodation during the application process, please click here .
• IHG does not accept applications, inquiries, or unsolicited CVs/resumes from staffing or recruiting agencies. Please click here for our agency policy.
• If you are a resident of or applying to a job opening in the State of Washington, please click here to read about applicable benefits.
• For roles or applicants in San Francisco only: Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

At IHG Hotels & Resorts, we are proud to be an equal opportunity employer. We firmly believe that all our colleagues deserve to be treated equally and have the same opportunities to develop and grow their skills within our business and provide equal employment opportunities to all applicants and colleagues without regard to an individual's, race, color, ethnicity, national origin, religion, sex, sexual orientation, gender identity or expression, age, disability, marital or familial status, veteran status or any other characteristic protected by law.