Director of Information Security & AI Governance

IHG Hotels & Resorts; Atlanta (GA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

IHG Hotels & Resorts is seeking a Director of Information Security to establish enterprise security controls, policy lifecycle, and AI governance. You will drive regulatory compliance (PCI DSS, IT SOX, SOC 1/2, SWIFT) and oversee policy management while guiding a blended onshore/offshore team through a manager-led model.

You will set guardrails for AI adoption, lead governance forums, and report to executive leadership on control health and risk themes, aligning with NIST AI RMF and ISO

Qualifications

• Deep expertise in regulatory compliance programs (PCI DSS, SOX/SOC, SWIFT) and control frameworks (NIST CSF/AI RMF, ISO 27001, COBIT).
• Proven ownership of enterprise policy lifecycle and governance forums with executive audiences.
• Experience establishing AI governance, including risk tiering and guardrails.
• Executive communication to VPs/SVPs and SteerCo bodies.
• Experience leading blended onshore/offshore delivery models.

Responsibilities

• Own enterprise regulatory compliance strategy across PCI DSS, IT SOX, SOC 1/2/SWIFT, including audit planning and remediation.
• Maintain a unified control framework and expand the controls library as scope grows.
• Drive continuous control monitoring and evidence automation through ServiceNow GRC.
• Define control ownership and formalize executive accountability across functions.
• Lead AI governance with risk tiering, guardrails, and responsible use guidance.

Skills

Security governance

Regulatory compliance

Executive communication

Team leadership

Blended delivery model

Education

Bachelor's degree in Information Systems/Business

Tools

ServiceNow GRC/IRM

Veza

Axonius

Job description

IHG Hotels & Resorts is seeking a Director of Information Security to establish enterprise security controls, policy lifecycle, and AI governance. You will drive regulatory compliance (PCI DSS, IT SOX, SOC 1/2, SWIFT) and oversee policy management while guiding a blended onshore/offshore team through a manager-led model.

You will set guardrails for AI adoption, lead governance forums, and report to executive leadership on control health and risk themes, aligning with NIST AI RMF and ISO