Director, Data Security Engineering

Marriott International’s Global Information Security is seeking a dynamic and experienced Director of Data Security Engineering to lead our data security engineering team and the associated initiatives and drive the implementation of robust security strategies and controls across our organization. You will be responsible for overseeing the design, development, and management of data security solutions that safeguard our critical information assets and comply with regulatory compliance leveraging your experience in data security principles, practices, and technologies.

CANDIDATE PROFILE 

Education and Experience 

Required:

• Bachelor’s degree in computer sciences, computer engineering or related technology or security field or equivalent experience/certification
• 7+ years of information security experience that includes:
  • 4+ years of experience in data security in a regulated global enterprise environment
  • 3+ years of experience in data protection, encryption, access controls, and threat detection.
• 2+ years of experience in direct management or supervision/team leadership of technical teams
• 3+ years in a role that had responsibility for or closely collaborated with/participated in data incident response, cybersecurity, privacy, compliance, governance, risk, compliance and investigative processes.

Preferred:

• Current information security certifications - Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other.
• Good understanding and experience working with frameworks and regulations - NIST, ISO27001, PCI DSS, GDPR and CCPA
• Strong analytical and problem-solving skills, decision-making abilities, with a focus on balancing security requirements with business objectives
• Proven ability to effectively prioritize and undertake mission critical tasks in a fast-paced environment.
• Adept at conducting research into process and governance best practices, models, and methodologies.
• Excellent verbal and written communication skills 
• Experience working in Agile and Scrum methodologies.

CORE RESPONSIBILITIES                                                                                

• Lead the data security engineering team in developing and executing data security strategies and controls aligned with the organization's goals and compliance requirements.
• Define and implement scalable and effective data security architectures, ensuring the protection of sensitive data across the enterprise.
• Identify and assess data security risks, vulnerabilities, and threats. Develop and implement risk mitigation strategies and controls.
• Oversee the evaluation, selection, and deployment of cutting-edge data security technologies, tools, and solutions.
• Assist in incident response efforts for data security incidents, working closely with cross-functional teams to ensure effective containment and resolution.
• Provide leadership, mentorship, guidance, and career development opportunities to the data security engineering team members.
• Collaborate with cross-functional teams, including IT, compliance, legal, and business units, to ensure data security measures are integrated seamlessly.
• Stay abreast of evolving data security regulations and compliance standards. Ensure the organization's data security practices adhere to industry best practices and legal requirements.
• Promote a culture of data security awareness and educate employees about best practices for protecting sensitive information.
• Other assigned duties as necessary to ensure excellent security services and risk mitigation across the business.

Cultivate a High-Performing Team

• Create a compelling vision, clear direction and strategy for the team
• Generate enthusiasm and understanding of the information security vision and how each role contributes to the achievement of that vision
• Ensure capabilities are developed and resources are aligned to support the strategy
• Attract, motivate, develop and retain highly skilled leaders; champion and model leadership development
• Create and sustain a work environment that drives associate engagement and enables business success
• Ensure appropriate processes are in place and executed to drive collaboration and alignment within the team and with the broader IT organization
• Serve as a role model and ensure all information security leaders are visible and effective partners with IT counterparts, broader Marriott stakeholders, and service providers

Managing Work, Projects, and Policies 

• Coordinates and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Sets and tracks goal progress for self and others.
• Monitors the work of others to ensure it is completed on time and meets expectations.
• Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

• Hires, on-boards, trains, develops team
• Creates a team environment that encourages accountability, high standards, and innovation.
• Leads specific team while assisting with meeting or exceeding department goals.
• Sets clear performance expectations and holds direct report accountable.
• Ensures that goals are being translated to the team as they relate to tracking and productivity.
• Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
• Understands employee and develops plans to address need areas and expand on the strengths.
• Provides the team with the capabilities needed to meet or exceed expectations.
• Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities 

• Acts proactively when dealing with employee concerns.
• Extends professionalism and courtesy to employees at all times.
• Communicates/updates all goals and results with employees.
• Meets semiannually with staff on a one-to-one basis.
• Establishes and maintains open, collaborative relationships with employees.
• Solicits employee feedback

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.